Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/34352e3137372e3138392e302f32342d3332203d3e20323732373932.roa
File:                     34352e3137372e3138392e302f32342d3332203d3e20323732373932.roa (raw, json)
Hash identifier:          JN5/KpBxb3dxtTCRXFOhlCtfuwR3nKYfscJG1vkd+X4=
Subject key identifier:   E5:57:91:67:79:B8:66:D9:E3:94:4C:6D:D2:A0:1D:EA:C6:0B:D7:A2
Certificate issuer:       /CN=2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9
Certificate serial:       47D040B7ABEB94CE6853BDB2D28A6BD34FB94799
Authority key identifier: 28:00:AF:8E:67:2F:64:E0:2C:EC:5D:04:7E:DE:B2:AD:86:B4:7E:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/34352e3137372e3138392e302f32342d3332203d3e20323732373932.roa
Signing time:             Thu 01 Oct 2026 16:44:02 +0000
ROA not before:           Thu 01 Oct 2026 16:39:02 +0000
ROA not after:            Thu 30 Sep 2027 16:44:02 +0000
asID:                     272792
IP address blocks:        45.177.189.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.crl
                          rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 05:52:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:d0:40:b7:ab:eb:94:ce:68:53:bd:b2:d2:8a:6b:d3:4f:b9:47:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9
        Validity
            Not Before: Oct  1 16:39:02 2026 GMT
            Not After : Sep 30 16:44:02 2027 GMT
        Subject: CN=E557916779B866D9E3944C6DD2A01DEAC60BD7A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f7:17:66:c6:43:a8:c3:58:c1:df:4a:ad:14:
                    75:15:f0:e2:e3:50:c1:34:ac:84:95:b6:2d:fc:c4:
                    05:be:37:4c:44:a3:d1:51:b5:5b:8a:b9:70:0d:b7:
                    cc:19:b5:81:c6:94:6b:68:27:48:b5:a7:ba:30:ea:
                    de:1b:09:ef:60:29:16:1e:3d:1b:23:22:3e:c1:2a:
                    9a:cb:94:27:06:99:7a:d1:a3:9b:ca:45:fb:fc:38:
                    19:7c:08:39:5a:14:87:78:e1:29:c6:c7:80:c0:84:
                    e1:1a:3f:81:c2:ca:d4:d2:14:f7:07:92:4c:b1:36:
                    23:ff:0a:cb:4e:4f:68:b5:cd:d5:b0:d0:48:03:ed:
                    28:38:52:cf:3c:a8:e7:79:ea:83:97:f9:a2:88:f6:
                    72:80:76:a1:38:2c:81:9b:85:fd:3a:b8:d2:ba:5c:
                    a8:a1:8c:6f:ea:09:ac:da:fb:20:77:03:8e:f6:f4:
                    76:ab:e6:0b:e5:9e:1b:be:07:5c:9f:77:d0:d3:25:
                    a6:09:ad:b9:a7:10:8a:41:8c:d5:bf:be:f1:8b:97:
                    fd:af:f2:29:26:6f:f4:03:b6:93:6b:2c:3d:68:aa:
                    e9:67:ef:be:ce:66:71:1e:74:e0:12:3e:6e:40:02:
                    8c:ca:66:15:e8:f9:0e:00:c5:5f:bb:c6:3e:56:cb:
                    bc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:57:91:67:79:B8:66:D9:E3:94:4C:6D:D2:A0:1D:EA:C6:0B:D7:A2
            X509v3 Authority Key Identifier:
                keyid:28:00:AF:8E:67:2F:64:E0:2C:EC:5D:04:7E:DE:B2:AD:86:B4:7E:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/34352e3137372e3138392e302f32342d3332203d3e20323732373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:e0:18:43:a1:97:25:77:77:14:33:25:27:4e:1f:e6:b2:76:
         f9:57:e7:39:47:c4:ab:5c:f1:7a:31:85:95:d2:6d:6b:81:a1:
         c7:d4:1c:f6:3d:d0:db:7a:b3:2d:a1:a9:66:4d:6a:b0:ad:1a:
         88:f3:8a:cf:92:2b:50:43:12:87:80:06:bb:de:06:5d:b0:5c:
         c2:ab:95:cd:8e:f2:dc:57:56:1f:07:ff:77:6f:22:19:00:78:
         cc:d7:f9:cc:9e:dd:12:3f:0f:1b:91:0a:2c:0f:17:67:c9:9a:
         10:cb:58:50:5a:aa:84:ea:eb:a3:f6:5c:f1:36:db:94:ad:ac:
         7a:d6:63:a0:ba:be:0b:f2:03:de:44:f9:40:3d:ba:75:91:f2:
         1e:a6:ea:38:aa:01:38:7a:89:fc:b1:38:88:44:0b:44:21:68:
         83:ca:00:4f:63:19:1b:47:cb:02:14:fe:1f:18:e7:c2:cc:d0:
         97:ff:4f:37:de:5e:29:42:69:2e:e0:cf:c4:a0:d0:65:3f:e0:
         f4:af:e9:43:10:9a:30:bb:56:1c:03:75:d1:17:29:17:db:71:
         b5:50:52:58:52:14:bb:96:97:24:49:de:a8:35:83:51:2f:64:
         da:6c:d4:1f:e8:e2:34:7d:63:76:a6:e8:fc:b9:a7:d3:ff:c8:
         52:bf:3f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:46:08 2026 by rpki-client