Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234362e302f32342d3234203d3e20323638323936.roa
File:                     34352e3233372e3234362e302f32342d3234203d3e20323638323936.roa (raw, json)
Hash identifier:          pNlhghq8cLuQ//J3ead7VxRXC0AW1qBrewhuTSVPXFY=
Subject key identifier:   CA:60:7B:EC:85:BF:33:8E:22:3E:5A:1D:29:5C:22:BD:3A:D3:5E:80
Certificate issuer:       /CN=62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F
Certificate serial:       6E0430B2EB9B1D369910A1F0A81E242967D5C2C5
Authority key identifier: 62:04:0E:0F:83:8A:09:ED:AD:38:CB:7E:6B:6B:BB:DC:23:B1:CB:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234362e302f32342d3234203d3e20323638323936.roa
Signing time:             Tue 13 Oct 2026 15:22:41 +0000
ROA not before:           Tue 13 Oct 2026 15:17:41 +0000
ROA not after:            Tue 12 Oct 2027 15:22:41 +0000
asID:                     268296
IP address blocks:        45.237.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 08:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:04:30:b2:eb:9b:1d:36:99:10:a1:f0:a8:1e:24:29:67:d5:c2:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F
        Validity
            Not Before: Oct 13 15:17:41 2026 GMT
            Not After : Oct 12 15:22:41 2027 GMT
        Subject: CN=CA607BEC85BF338E223E5A1D295C22BD3AD35E80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:28:92:bf:3e:ea:2b:09:80:04:43:dd:a2:63:
                    c6:33:f8:d6:03:b7:be:64:b2:ca:65:8d:c6:f9:00:
                    11:c3:a9:74:aa:cf:98:81:00:6a:97:14:e4:55:fb:
                    5c:99:fd:16:06:32:89:57:7e:30:f4:25:dc:fe:b2:
                    87:f5:49:e4:7a:b9:80:43:e3:dc:fb:e9:ee:5b:b6:
                    30:4c:f0:32:f6:08:48:cc:ff:c3:15:ff:71:75:07:
                    3f:9e:13:37:e3:6a:94:bd:4e:7d:77:8f:0b:5e:19:
                    f1:75:c5:84:7a:c6:f5:d5:e6:2b:dc:a8:09:11:b9:
                    40:47:04:90:64:93:9f:6e:81:8a:25:9b:14:f8:03:
                    08:f1:2b:51:23:bb:a1:8c:4b:20:80:8c:83:29:a4:
                    49:3d:27:0d:98:db:29:eb:c5:32:3a:d3:55:10:d9:
                    b9:a3:3c:1b:04:3f:3a:f9:00:59:63:e2:e3:8b:67:
                    e3:07:41:e3:2f:e6:41:25:d2:91:74:07:f5:f7:12:
                    06:f4:97:8b:cb:e1:d5:dd:61:e7:0f:66:fd:75:39:
                    9d:17:62:71:56:14:38:d6:18:79:3d:47:7b:ce:36:
                    ea:4e:5d:b4:1f:22:a8:7e:7d:99:01:9b:a1:96:16:
                    23:32:f6:12:5d:4f:6c:7b:28:37:ed:67:5e:87:01:
                    36:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:60:7B:EC:85:BF:33:8E:22:3E:5A:1D:29:5C:22:BD:3A:D3:5E:80
            X509v3 Authority Key Identifier:
                keyid:62:04:0E:0F:83:8A:09:ED:AD:38:CB:7E:6B:6B:BB:DC:23:B1:CB:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234362e302f32342d3234203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:82:b3:94:86:9d:8c:4b:f5:a0:76:5a:7a:50:78:37:07:01:
         b2:21:c0:3d:b7:b0:e4:b0:23:1d:9e:76:a6:f6:ed:40:38:45:
         ec:75:32:ac:7e:87:ba:63:f9:9e:72:3a:69:3e:d0:da:4e:0d:
         0f:eb:f3:fb:a6:b6:ce:f5:07:0d:93:0f:5f:a2:7d:fb:e2:47:
         6d:55:95:25:0f:54:cc:c3:78:9a:15:84:6f:5e:45:20:71:65:
         8c:34:2f:7e:78:f8:75:fe:97:85:be:4b:35:d9:8f:ae:45:b6:
         1b:70:25:91:76:8f:29:19:ce:a0:bc:95:f7:60:fd:fc:f7:da:
         f0:aa:63:d2:cb:fb:43:f3:52:f0:59:a5:dd:c8:c6:79:1b:a9:
         f4:e1:1d:e4:18:a2:03:92:c2:a1:11:80:86:76:07:fd:ca:a0:
         02:bf:f0:dd:c6:f9:40:12:54:4c:e2:fc:3c:9c:98:99:d8:fc:
         3c:dc:30:55:da:68:a5:56:87:83:a2:23:c6:1b:09:f1:b6:c1:
         78:c8:9c:28:02:18:d5:a7:b4:9c:c8:94:74:f3:50:96:85:b2:
         02:c3:53:90:99:0e:33:10:42:22:51:fc:89:ae:7d:e1:b0:f2:
         68:5b:9e:81:89:d4:03:cd:4c:b9:51:e6:84:c1:be:1b:0f:7f:
         bb:b1:c8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:26:04 2026 by rpki-client