Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/34352e3233372e39322e302f32322d3232203d3e20323638323637.roa
File:                     34352e3233372e39322e302f32322d3232203d3e20323638323637.roa (raw, json)
Hash identifier:          aGBTZwlJ/q+RaMMT4p4N9uXZQ7NSxmYpN/dPuWUR/ZU=
Subject key identifier:   DF:56:E9:04:84:D8:C8:5F:BB:DF:F0:AF:22:86:B2:04:86:97:49:26
Certificate issuer:       /CN=E0E56E765738AF9709155514C8A4C6494D4155B3
Certificate serial:       495D0DB8C46086CD7E544905569605A3A92541B7
Authority key identifier: E0:E5:6E:76:57:38:AF:97:09:15:55:14:C8:A4:C6:49:4D:41:55:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0E56E765738AF9709155514C8A4C6494D4155B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/34352e3233372e39322e302f32322d3232203d3e20323638323637.roa
Signing time:             Mon 26 Oct 2026 16:00:00 +0000
ROA not before:           Mon 26 Oct 2026 15:55:00 +0000
ROA not after:            Mon 25 Oct 2027 16:00:00 +0000
asID:                     268267
IP address blocks:        45.237.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/E0E56E765738AF9709155514C8A4C6494D4155B3.crl
                          rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/E0E56E765738AF9709155514C8A4C6494D4155B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0E56E765738AF9709155514C8A4C6494D4155B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 08:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:5d:0d:b8:c4:60:86:cd:7e:54:49:05:56:96:05:a3:a9:25:41:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0E56E765738AF9709155514C8A4C6494D4155B3
        Validity
            Not Before: Oct 26 15:55:00 2026 GMT
            Not After : Oct 25 16:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e4:5e:19:0e:a3:84:e9:f8:1d:f2:62:64:08:
                    4a:7d:24:d0:be:d1:00:53:ef:10:0a:ad:0f:ae:f1:
                    41:5e:ad:c8:da:04:28:7b:c7:75:f5:07:70:36:6e:
                    6b:89:19:2c:3e:ee:16:85:f7:cf:79:b0:38:51:a6:
                    49:39:4b:18:bc:9c:7c:86:cc:1a:28:dc:e7:01:de:
                    88:5e:99:42:9f:2f:7d:b0:bc:dd:b5:d0:11:d6:b2:
                    10:9e:f4:70:77:26:6c:43:e3:2b:3c:e0:6a:2a:f4:
                    9f:76:50:2c:4f:b7:71:29:71:92:3d:dd:f2:c3:fa:
                    3a:92:8a:6e:4a:06:3e:3f:4c:71:2b:2c:a5:7b:e9:
                    c8:28:68:dd:69:5f:3c:0f:fd:06:ee:75:77:4d:5e:
                    4f:7d:c2:bd:f2:40:03:08:1a:5b:74:35:b7:21:a9:
                    ec:0e:44:53:c9:3a:42:5d:14:82:46:11:76:d7:85:
                    60:63:4a:b0:82:ba:1b:5a:aa:61:7c:bf:67:20:5d:
                    15:f8:55:56:58:1d:77:fb:81:c0:b2:f2:ad:65:53:
                    08:4f:f6:78:a1:7a:60:ef:40:12:cc:e3:f7:f4:a5:
                    21:56:43:fe:6b:c2:f7:1b:83:12:7d:1a:15:3c:c9:
                    0a:bd:82:1d:95:a8:98:4f:11:ab:11:41:75:fb:c0:
                    fe:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:56:E9:04:84:D8:C8:5F:BB:DF:F0:AF:22:86:B2:04:86:97:49:26
            X509v3 Authority Key Identifier:
                keyid:E0:E5:6E:76:57:38:AF:97:09:15:55:14:C8:A4:C6:49:4D:41:55:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/E0E56E765738AF9709155514C8A4C6494D4155B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0E56E765738AF9709155514C8A4C6494D4155B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/34352e3233372e39322e302f32322d3232203d3e20323638323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:43:e7:5d:e5:e9:32:11:74:bd:0b:07:60:32:f4:fb:1d:17:
         dc:1e:11:8e:42:82:bb:c6:a2:ef:08:93:25:93:e0:e0:51:1f:
         54:6a:fe:10:57:10:d0:b0:5c:99:38:fe:03:52:54:c1:36:6a:
         20:d1:e8:ec:bb:40:37:c4:74:c2:c5:a1:e5:59:1b:87:fa:d9:
         cc:75:6a:d6:1d:08:46:8d:1f:31:43:4c:29:51:64:9e:70:36:
         19:4c:b0:62:c9:48:53:10:1c:ee:cc:4c:6f:92:08:58:4e:b6:
         b9:d7:33:f6:e4:dc:48:a6:90:b0:ca:7b:f7:e2:63:fe:98:b5:
         de:b7:ea:24:fe:bd:b6:64:e4:fa:e7:20:70:df:cf:a8:4e:77:
         24:8d:53:d2:d6:8e:62:7c:cc:6f:2b:83:8d:74:17:24:d8:d3:
         1d:2a:34:58:14:6a:4d:62:01:d9:4c:06:db:95:22:75:a3:78:
         51:c7:8a:4d:b9:7f:c5:31:5c:75:8d:f5:a5:be:dc:23:1b:ad:
         65:df:2f:65:a5:a7:dd:ab:0b:7d:91:1b:3a:e7:c0:28:b0:67:
         6a:ca:88:58:c4:79:74:68:d7:99:d3:a5:43:3c:42:fa:82:db:
         88:0a:75:b0:ec:cc:a7:cb:d1:dc:5d:c0:8c:f7:48:0c:a2:f7:
         66:7a:03:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:22:44 2026 by rpki-client