Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234342e302f32342d3234203d3e20323638323936.roa
File:                     34352e3233372e3234342e302f32342d3234203d3e20323638323936.roa (raw, json)
Hash identifier:          Hql6r6dk3yELTp+JgsF3YNTUZf+NIcNah1XeRZsPaCE=
Subject key identifier:   77:3C:36:BE:FB:5E:26:14:8B:32:A8:50:21:B2:4F:07:03:B7:69:67
Certificate issuer:       /CN=62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F
Certificate serial:       34EADABDDF613F9296127CEF48B6BBCF85E3C4DE
Authority key identifier: 62:04:0E:0F:83:8A:09:ED:AD:38:CB:7E:6B:6B:BB:DC:23:B1:CB:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234342e302f32342d3234203d3e20323638323936.roa
Signing time:             Tue 13 Oct 2026 15:22:41 +0000
ROA not before:           Tue 13 Oct 2026 15:17:41 +0000
ROA not after:            Tue 12 Oct 2027 15:22:41 +0000
asID:                     268296
IP address blocks:        45.237.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 08:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ea:da:bd:df:61:3f:92:96:12:7c:ef:48:b6:bb:cf:85:e3:c4:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F
        Validity
            Not Before: Oct 13 15:17:41 2026 GMT
            Not After : Oct 12 15:22:41 2027 GMT
        Subject: CN=773C36BEFB5E26148B32A85021B24F0703B76967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4b:0c:6b:ab:e8:4c:90:72:ae:b3:e0:c3:03:
                    0a:f6:2d:75:0b:33:85:87:84:f1:f4:e4:c2:32:09:
                    35:a0:db:ef:e9:6e:a0:4f:f8:44:b4:f2:57:52:4a:
                    82:82:0a:aa:46:70:82:c2:28:9e:74:aa:9d:cd:dd:
                    a5:f8:7e:1a:d8:1b:1d:85:18:d4:ab:d2:c1:13:d0:
                    d1:98:ce:c1:f8:63:20:2d:3d:32:66:58:d3:fb:92:
                    5b:de:08:07:36:7a:a4:42:d3:5c:47:cd:6b:9e:ea:
                    d7:92:5b:37:0d:04:dd:36:7f:b6:e1:b2:6c:a3:4b:
                    1e:4a:79:79:00:0b:af:53:8f:19:e0:70:b7:f1:25:
                    a4:a2:04:03:e4:7d:3d:81:31:83:bf:75:0a:1f:6d:
                    5b:28:1b:65:8b:78:40:78:64:03:0f:96:a0:c6:7d:
                    15:f1:eb:63:53:08:d7:60:a8:5c:92:86:d4:b2:d7:
                    99:d0:20:61:19:e9:0b:6e:90:32:13:1a:42:5c:6b:
                    5a:49:83:8d:b2:71:0a:18:29:a7:a3:4b:3b:c5:0a:
                    24:60:80:79:bc:95:14:02:67:4a:34:29:76:4e:d7:
                    57:ec:cd:c9:df:3a:1a:c4:b3:41:7e:dd:0d:f9:e9:
                    35:42:32:d8:89:b3:a5:8d:03:bf:26:e7:e9:68:ee:
                    d8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:3C:36:BE:FB:5E:26:14:8B:32:A8:50:21:B2:4F:07:03:B7:69:67
            X509v3 Authority Key Identifier:
                keyid:62:04:0E:0F:83:8A:09:ED:AD:38:CB:7E:6B:6B:BB:DC:23:B1:CB:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234342e302f32342d3234203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:e6:d4:3d:5d:d6:0e:ad:2b:21:e0:c5:d1:27:04:4a:bc:99:
         78:4d:3d:bb:42:2f:78:e1:e7:b1:31:b3:ef:19:16:c0:a5:be:
         ec:7b:0b:ae:f2:91:6c:d7:c9:9f:9b:51:9e:af:6b:9d:3b:b1:
         c8:c1:95:4a:46:de:86:ab:8d:15:dc:76:52:aa:d6:4e:c0:10:
         4c:3b:95:f2:0d:58:e1:05:8d:3f:e5:9b:0d:d6:3a:95:8a:4e:
         3c:5c:f5:11:c9:fb:1a:58:95:93:f8:0d:59:88:48:1b:9a:e5:
         c4:f1:52:86:96:4c:96:ec:2b:36:81:a5:d9:9e:16:fb:ae:5d:
         83:50:af:47:cc:39:00:95:d1:61:fc:66:cc:ba:3a:1c:d7:9d:
         74:0a:20:25:1c:52:ec:2f:f1:72:5c:77:0e:76:23:bc:9b:99:
         09:8b:ab:95:36:51:a7:b6:05:5c:42:28:40:2f:25:43:9e:b9:
         fe:a9:b8:34:28:b2:ad:8c:d6:31:b1:fd:1e:08:c0:f2:6e:6f:
         e9:6f:a2:c8:7a:bc:3d:f7:ec:1f:02:a7:86:4f:04:36:5d:7f:
         7b:fe:97:fc:0d:0c:bf:f5:fd:2a:77:f7:11:ab:10:6d:d3:a1:
         a4:ff:5d:bd:39:2c:87:6c:38:40:43:55:57:34:e4:0f:47:ed:
         ff:dd:e2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:31:18 2026 by rpki-client