Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/34352e3136342e33362e302f32322d3232203d3e20323638363232.roa
File:                     34352e3136342e33362e302f32322d3232203d3e20323638363232.roa (raw, json)
Hash identifier:          nPTDkUe47JQyr+54InW2cNDGVMyD+5WzHDiai63utlQ=
Subject key identifier:   12:F8:31:A6:F9:4B:B2:9F:C6:59:BF:B8:3A:D9:59:F9:88:0A:29:1A
Certificate issuer:       /CN=0AC324E95DDE8107D6C9FCF9C7931D836843F4A4
Certificate serial:       61943841E5358F5F8BB875A75227BCE6F174642D
Authority key identifier: 0A:C3:24:E9:5D:DE:81:07:D6:C9:FC:F9:C7:93:1D:83:68:43:F4:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/34352e3136342e33362e302f32322d3232203d3e20323638363232.roa
Signing time:             Mon 07 Sep 2026 19:17:42 +0000
ROA not before:           Mon 07 Sep 2026 19:12:42 +0000
ROA not after:            Mon 06 Sep 2027 19:17:42 +0000
asID:                     268622
IP address blocks:        45.164.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.crl
                          rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 00:21:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:94:38:41:e5:35:8f:5f:8b:b8:75:a7:52:27:bc:e6:f1:74:64:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AC324E95DDE8107D6C9FCF9C7931D836843F4A4
        Validity
            Not Before: Sep  7 19:12:42 2026 GMT
            Not After : Sep  6 19:17:42 2027 GMT
        Subject: CN=12F831A6F94BB29FC659BFB83AD959F9880A291A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:49:17:ae:e5:20:68:bd:26:1d:c9:bb:a3:0d:
                    99:45:4c:05:90:25:07:31:1c:11:d6:75:6d:85:50:
                    d9:30:04:67:c6:78:a3:b6:fa:ea:17:20:65:bc:35:
                    c3:05:91:89:55:7b:25:41:a3:eb:ed:68:0c:9d:1f:
                    49:de:2c:51:09:d9:23:e2:33:25:8e:57:27:21:01:
                    80:01:56:be:b4:70:d2:21:a0:9b:db:67:86:aa:b0:
                    50:85:22:34:f0:4e:94:eb:a8:51:07:a4:75:58:df:
                    0c:88:b9:a6:08:50:57:31:6b:f5:96:e6:84:9a:73:
                    ea:6c:91:14:6a:7f:00:be:01:5f:20:40:c5:23:5b:
                    e8:bc:c4:39:a7:8a:28:3c:de:e3:89:f7:33:d7:fa:
                    a5:12:61:01:96:b9:92:05:1a:8c:d4:90:4e:51:84:
                    37:83:e8:06:5d:49:e9:0f:9d:8f:8e:65:c6:35:85:
                    00:73:f3:ed:cc:39:e0:ef:1e:13:9e:12:49:4c:87:
                    c1:5f:d2:d3:ae:89:05:1d:cb:77:30:85:44:4c:4a:
                    38:65:84:30:e6:23:48:5f:ba:48:cb:93:8d:52:52:
                    e6:7f:56:8e:8c:a9:33:39:c9:eb:51:94:aa:89:6a:
                    51:22:04:7b:5b:2e:ee:6c:2a:7d:2c:4c:a1:f5:db:
                    0f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F8:31:A6:F9:4B:B2:9F:C6:59:BF:B8:3A:D9:59:F9:88:0A:29:1A
            X509v3 Authority Key Identifier:
                keyid:0A:C3:24:E9:5D:DE:81:07:D6:C9:FC:F9:C7:93:1D:83:68:43:F4:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/34352e3136342e33362e302f32322d3232203d3e20323638363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:ee:37:b9:d3:e4:5e:d8:90:5c:a0:5c:17:96:d2:68:d7:45:
         ad:ce:b4:51:ee:ec:02:22:7e:f1:24:f6:f0:0e:8b:8b:48:d2:
         df:83:35:ac:63:c6:06:b0:e2:6b:0f:ea:f0:fd:6b:31:0e:37:
         f2:f3:6e:39:cd:a3:7e:dd:fc:27:ee:26:f3:5c:ba:14:25:53:
         77:81:ba:88:52:1c:fd:af:d6:57:19:1e:46:db:0c:54:b1:36:
         fc:75:d3:72:b0:5d:55:93:5e:37:ec:0c:a6:f0:9f:08:31:bd:
         be:3c:4c:6d:d0:08:48:a6:5a:6d:e8:c5:d3:f6:b2:ed:ab:4b:
         e6:d1:7d:6f:a1:15:b0:0c:5b:f6:c7:cf:f3:8a:83:38:cc:78:
         5b:b9:ef:1b:af:07:0a:8a:cf:af:8f:51:60:37:22:75:65:91:
         fb:e1:5d:79:96:d1:84:c9:69:c0:91:1d:26:45:52:63:66:da:
         22:9d:88:a2:b1:42:18:b6:14:f5:a1:1a:17:a6:e2:4c:52:97:
         3b:d9:14:c6:b8:94:eb:17:90:e8:c2:3c:90:c1:07:b4:b9:f8:
         ed:96:26:2a:52:d9:bf:89:0f:41:60:d5:0e:f2:3c:61:6b:5e:
         a7:ff:ba:bc:9b:33:bb:69:ca:80:1b:51:3f:d9:55:8e:29:c0:
         7f:07:8d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:21:51 2026 by rpki-client