Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8poGNi9of4dkZnzmBjFiW1rriAxH4vFgyx9BjHfFfp1L/1/34352e3233322e3133382e302f32332d3233203d3e20323637333231.roa
File:                     34352e3233322e3133382e302f32332d3233203d3e20323637333231.roa (raw, json)
Hash identifier:          UIyp+N4G/63QLEP8g1igx/yQ8k19ohRvjPTV8AK+fNI=
Subject key identifier:   96:B8:9D:FF:EB:56:8F:6E:F2:06:6B:91:30:A0:2D:49:1A:C0:30:0C
Certificate issuer:       /CN=4C79E3729CF2CCA4F36451F61E86482BE2269626
Certificate serial:       65616C7BD99DF65F2CF85991D87B9DA7F9AC3EFA
Authority key identifier: 4C:79:E3:72:9C:F2:CC:A4:F3:64:51:F6:1E:86:48:2B:E2:26:96:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C79E3729CF2CCA4F36451F61E86482BE2269626.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8poGNi9of4dkZnzmBjFiW1rriAxH4vFgyx9BjHfFfp1L/1/34352e3233322e3133382e302f32332d3233203d3e20323637333231.roa
Signing time:             Fri 30 Oct 2026 20:17:03 +0000
ROA not before:           Fri 30 Oct 2026 20:12:03 +0000
ROA not after:            Fri 29 Oct 2027 20:17:03 +0000
asID:                     267321
IP address blocks:        45.232.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8poGNi9of4dkZnzmBjFiW1rriAxH4vFgyx9BjHfFfp1L/1/4C79E3729CF2CCA4F36451F61E86482BE2269626.crl
                          rsync://rpki-repo.registro.br/repo/8poGNi9of4dkZnzmBjFiW1rriAxH4vFgyx9BjHfFfp1L/1/4C79E3729CF2CCA4F36451F61E86482BE2269626.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C79E3729CF2CCA4F36451F61E86482BE2269626.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 02:05:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:61:6c:7b:d9:9d:f6:5f:2c:f8:59:91:d8:7b:9d:a7:f9:ac:3e:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C79E3729CF2CCA4F36451F61E86482BE2269626
        Validity
            Not Before: Oct 30 20:12:03 2026 GMT
            Not After : Oct 29 20:17:03 2027 GMT
        Subject: CN=96B89DFFEB568F6EF2066B9130A02D491AC0300C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5f:7d:aa:4f:63:c7:72:13:dd:ce:72:bf:9e:
                    7a:aa:23:20:e6:31:aa:37:fb:4b:e3:16:57:21:00:
                    12:41:c1:3c:be:48:5d:7e:13:37:8c:47:0b:93:c6:
                    6a:c3:03:4d:ba:26:47:c9:dc:84:48:6d:bb:21:9a:
                    d4:fb:ef:44:5c:8c:84:04:46:0f:32:f6:23:77:0c:
                    f6:25:5a:fe:cd:cb:f9:60:a2:40:66:18:34:57:0b:
                    12:44:36:65:cd:eb:5a:85:f7:0d:3d:cf:c5:45:fc:
                    6d:03:ea:64:f1:7a:c0:ac:1d:05:7d:d0:07:99:a6:
                    68:35:40:af:a3:2f:a2:bc:d9:e9:6b:f4:ab:44:68:
                    1f:c2:67:cc:ac:24:53:5b:5a:ef:39:fb:9e:3e:a2:
                    66:e6:6d:c5:fe:f5:c7:e0:c6:6c:6c:db:02:e1:39:
                    f4:0c:ab:ed:0f:ba:03:16:ed:6d:ae:d4:80:79:b3:
                    5a:7a:fb:a7:85:2a:49:8d:e3:c5:5f:ba:2c:76:bc:
                    e4:55:b2:14:af:a6:de:86:10:9a:a2:c2:d4:c6:21:
                    ce:96:67:be:e3:aa:60:e7:fc:92:89:78:c7:c0:91:
                    bf:cb:76:60:6e:c6:65:bd:52:92:f3:41:3a:11:02:
                    2d:5d:e6:91:56:e1:80:98:53:33:be:32:b7:5d:4f:
                    87:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:B8:9D:FF:EB:56:8F:6E:F2:06:6B:91:30:A0:2D:49:1A:C0:30:0C
            X509v3 Authority Key Identifier:
                keyid:4C:79:E3:72:9C:F2:CC:A4:F3:64:51:F6:1E:86:48:2B:E2:26:96:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8poGNi9of4dkZnzmBjFiW1rriAxH4vFgyx9BjHfFfp1L/1/4C79E3729CF2CCA4F36451F61E86482BE2269626.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C79E3729CF2CCA4F36451F61E86482BE2269626.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8poGNi9of4dkZnzmBjFiW1rriAxH4vFgyx9BjHfFfp1L/1/34352e3233322e3133382e302f32332d3233203d3e20323637333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:eb:63:cc:6f:d7:6b:d8:1f:06:3b:e4:06:f6:4b:86:9f:d5:
         e0:92:e7:c4:90:a7:67:1c:3e:bc:c8:b7:df:e8:3d:68:00:35:
         42:f6:29:78:10:5a:1b:d1:68:9f:cc:33:f8:7b:4f:71:4f:ed:
         d2:98:d5:57:c3:f9:ce:62:a4:4a:b4:bb:62:a6:1a:f4:fb:d7:
         b4:69:1c:48:68:86:b7:18:31:a1:d9:5d:ef:1c:f3:b1:08:d1:
         c8:f3:99:e9:58:e4:f2:f7:9d:89:b4:cf:9c:55:d2:a6:b1:21:
         b4:ee:34:e9:70:e8:2c:8f:7c:13:b7:6d:3c:48:ac:08:57:de:
         f9:f6:16:6e:1c:13:2c:84:0a:da:a0:e3:a0:ad:47:ed:eb:17:
         ac:10:88:09:02:52:c6:39:95:72:b0:a6:a2:6e:b0:08:c1:9a:
         2f:e2:fa:99:0e:53:77:3f:20:4f:29:ba:12:17:20:aa:1a:ea:
         eb:8c:ce:32:1c:c2:45:d4:e4:d1:01:01:7a:a5:6f:a7:7a:9c:
         b0:ab:5f:09:72:23:49:aa:38:9b:9f:e3:df:a8:d1:5e:a7:13:
         4a:74:84:54:a7:02:85:a9:77:ae:63:1b:39:0f:b8:c5:f0:a5:
         d8:75:9c:18:d3:10:e2:de:07:39:8e:80:74:95:ea:c1:52:b5:
         1c:e3:02:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 14:49:20 2026 by rpki-client