Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/67vp35Nu8d5TxrVXspGefkpGxFCbKZvUUqKe6sc3Sbq5/0/34352e3138372e31302e302f32342d3234203d3e20323639343630.roa
File:                     34352e3138372e31302e302f32342d3234203d3e20323639343630.roa (raw, json)
Hash identifier:          UE9/dmSNMtCT4YD//+KSMXG1ak3MdwWqVpekv2PqWrA=
Subject key identifier:   A2:12:13:DE:39:00:7C:34:60:CD:4F:4E:F9:90:2E:CA:8C:6A:DE:85
Certificate issuer:       /CN=7EE0E237BA83B6E5F7FFA4C779A448AD72D24453
Certificate serial:       22CD185FE941BC11D52B984B0D36802683CD5D47
Authority key identifier: 7E:E0:E2:37:BA:83:B6:E5:F7:FF:A4:C7:79:A4:48:AD:72:D2:44:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EE0E237BA83B6E5F7FFA4C779A448AD72D24453.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/67vp35Nu8d5TxrVXspGefkpGxFCbKZvUUqKe6sc3Sbq5/0/34352e3138372e31302e302f32342d3234203d3e20323639343630.roa
Signing time:             Mon 21 Sep 2026 17:40:34 +0000
ROA not before:           Mon 21 Sep 2026 17:35:34 +0000
ROA not after:            Mon 20 Sep 2027 17:40:34 +0000
asID:                     269460
IP address blocks:        45.187.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/67vp35Nu8d5TxrVXspGefkpGxFCbKZvUUqKe6sc3Sbq5/0/7EE0E237BA83B6E5F7FFA4C779A448AD72D24453.crl
                          rsync://rpki-repo.registro.br/repo/67vp35Nu8d5TxrVXspGefkpGxFCbKZvUUqKe6sc3Sbq5/0/7EE0E237BA83B6E5F7FFA4C779A448AD72D24453.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EE0E237BA83B6E5F7FFA4C779A448AD72D24453.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 11:19:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:cd:18:5f:e9:41:bc:11:d5:2b:98:4b:0d:36:80:26:83:cd:5d:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EE0E237BA83B6E5F7FFA4C779A448AD72D24453
        Validity
            Not Before: Sep 21 17:35:34 2026 GMT
            Not After : Sep 20 17:40:34 2027 GMT
        Subject: CN=A21213DE39007C3460CD4F4EF9902ECA8C6ADE85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:16:98:de:3d:a8:17:72:9c:7d:30:79:21:e7:
                    21:4a:8d:90:20:a0:88:52:0b:26:f9:fb:f2:6d:c7:
                    e3:5c:4a:db:51:76:1f:59:66:f9:6b:ad:7b:62:96:
                    3c:35:31:1f:06:0f:04:1d:13:ba:0f:5c:35:22:e2:
                    14:d0:b6:8c:01:88:ee:fe:7b:51:fa:d4:c9:8e:db:
                    61:8b:b2:29:55:08:92:2c:d3:cb:b5:11:17:00:ba:
                    d5:77:c2:5a:a0:a5:50:fd:b7:42:9a:3f:20:ff:36:
                    af:08:00:2b:4c:2c:49:4a:ab:04:94:6c:5f:86:df:
                    46:87:92:80:64:74:cb:4e:6e:c4:a0:3c:79:ac:e9:
                    84:d3:ab:d8:3a:7f:7f:9e:13:16:75:53:e7:fc:60:
                    6a:06:ec:47:59:13:33:c0:97:46:d1:99:0d:18:4a:
                    25:22:5d:dd:f8:59:a7:ba:85:6e:50:50:64:71:c7:
                    bb:bc:29:e7:97:4b:04:2a:90:76:74:82:a8:a5:5f:
                    47:2f:bd:2b:f1:11:7d:91:d4:83:0b:3c:3e:cb:a6:
                    e6:2d:bd:15:32:14:be:aa:16:28:91:c7:23:69:48:
                    0e:06:c5:c8:7a:f3:eb:68:18:78:57:48:db:e1:54:
                    bc:bf:98:12:fa:cf:1d:f1:25:b3:c2:29:52:51:44:
                    b9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:12:13:DE:39:00:7C:34:60:CD:4F:4E:F9:90:2E:CA:8C:6A:DE:85
            X509v3 Authority Key Identifier:
                keyid:7E:E0:E2:37:BA:83:B6:E5:F7:FF:A4:C7:79:A4:48:AD:72:D2:44:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/67vp35Nu8d5TxrVXspGefkpGxFCbKZvUUqKe6sc3Sbq5/0/7EE0E237BA83B6E5F7FFA4C779A448AD72D24453.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EE0E237BA83B6E5F7FFA4C779A448AD72D24453.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/67vp35Nu8d5TxrVXspGefkpGxFCbKZvUUqKe6sc3Sbq5/0/34352e3138372e31302e302f32342d3234203d3e20323639343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:8e:6d:eb:07:5d:06:dc:05:a3:0e:03:d6:45:c6:69:ad:35:
         1d:ac:6d:a5:8e:bb:9c:d3:80:ad:03:af:17:9c:5e:78:d7:be:
         14:ab:33:6e:a0:f5:ff:97:89:83:f8:22:6a:62:46:46:3f:0e:
         2f:3f:d2:d3:73:e7:c7:ec:ab:a1:62:58:1f:56:87:53:c1:64:
         4a:3b:bd:b3:59:65:cb:f8:5e:57:46:9e:85:4b:06:6a:50:dd:
         7e:a6:7d:87:0f:8d:69:b7:25:bd:3b:c9:50:db:9f:3b:96:84:
         b2:0b:69:27:35:92:fd:e6:a3:d9:04:5c:a7:7c:8d:f6:08:cf:
         16:80:56:59:f6:bf:d9:6f:79:93:e3:e8:3e:d7:73:fd:35:95:
         59:de:fb:97:a0:f1:e0:b4:1f:bf:8b:66:ce:b8:49:d6:01:fd:
         6b:c8:d5:d4:9a:0f:20:78:3f:9e:c9:32:88:a0:bf:3d:2f:63:
         34:42:62:01:0c:0e:35:53:ab:d2:89:95:0d:95:02:be:cc:3e:
         9e:85:d3:b3:79:5f:9d:23:ca:0b:f8:b5:58:2f:4b:77:df:41:
         dd:9b:72:ef:4b:0c:99:89:89:1d:60:f7:a0:fe:4c:aa:4a:dd:
         17:a1:13:2b:d0:b4:b0:49:e8:07:52:a9:e4:9a:34:47:14:52:
         11:e4:e7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:23:22 2026 by rpki-client