Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/34352e342e3230382e302f32322d3234203d3e20323636303836.roa
File:                     34352e342e3230382e302f32322d3234203d3e20323636303836.roa (raw, json)
Hash identifier:          rKFoRJJ5ZyV2oPoc65i/7GnWtmXR7D5VJ0uJ0fEYJOw=
Subject key identifier:   0A:A0:CE:E3:84:21:1B:80:65:E3:31:C5:4A:C6:09:BB:DE:79:2E:95
Certificate issuer:       /CN=E0C40FA4B10FE3592FA45A02252E9834A23C3076
Certificate serial:       27B768CA8DE094F34D95C61E0DB5DA97FE36CF53
Authority key identifier: E0:C4:0F:A4:B1:0F:E3:59:2F:A4:5A:02:25:2E:98:34:A2:3C:30:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0C40FA4B10FE3592FA45A02252E9834A23C3076.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/34352e342e3230382e302f32322d3234203d3e20323636303836.roa
Signing time:             Tue 18 Aug 2026 13:59:29 +0000
ROA not before:           Tue 18 Aug 2026 13:54:29 +0000
ROA not after:            Tue 17 Aug 2027 13:59:29 +0000
asID:                     266086
IP address blocks:        45.4.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/E0C40FA4B10FE3592FA45A02252E9834A23C3076.crl
                          rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/E0C40FA4B10FE3592FA45A02252E9834A23C3076.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0C40FA4B10FE3592FA45A02252E9834A23C3076.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Sep 2026 08:54:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:b7:68:ca:8d:e0:94:f3:4d:95:c6:1e:0d:b5:da:97:fe:36:cf:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0C40FA4B10FE3592FA45A02252E9834A23C3076
        Validity
            Not Before: Aug 18 13:54:29 2026 GMT
            Not After : Aug 17 13:59:29 2027 GMT
        Subject: CN=0AA0CEE384211B8065E331C54AC609BBDE792E95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ee:46:fa:28:a8:41:19:32:85:60:ad:81:e2:
                    16:af:bc:2d:a5:01:47:37:75:57:65:80:67:75:5f:
                    a9:17:34:e7:c3:77:4e:44:ab:7e:8d:f6:e1:2a:b9:
                    e7:78:f8:9e:6e:44:08:cd:d0:4c:68:a9:41:7a:fc:
                    ce:88:47:c1:da:bb:27:b2:a3:9c:f6:fc:5f:8a:77:
                    35:98:cb:a9:ef:e1:8b:88:e0:ed:89:37:dc:04:f6:
                    b4:3d:63:d8:f3:eb:81:32:91:e9:5b:ff:9d:cb:9d:
                    56:6b:ac:c9:3a:42:7a:91:50:8a:5e:35:3b:78:b1:
                    ae:47:7a:60:fe:40:7a:ba:99:99:3d:25:14:28:2a:
                    97:b4:65:14:b0:3c:21:00:37:92:0c:dd:e8:2f:d9:
                    49:59:62:8a:33:a2:46:ad:2e:88:48:91:ed:b4:5a:
                    ad:9e:e6:1d:0f:0a:c4:07:2b:89:1f:47:af:50:46:
                    76:87:e0:2f:ec:f6:35:40:1a:a4:9c:9a:99:7b:ae:
                    06:b3:c0:5b:37:ca:2f:75:ba:6a:75:4a:c3:87:db:
                    51:ec:4b:9d:1c:06:66:41:1c:44:eb:cb:b4:5e:33:
                    46:1e:af:c1:32:5d:21:ff:38:f3:09:4f:1f:5d:5f:
                    43:51:e5:c3:01:2b:bd:8d:b5:d8:40:3a:6f:5c:65:
                    6c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A0:CE:E3:84:21:1B:80:65:E3:31:C5:4A:C6:09:BB:DE:79:2E:95
            X509v3 Authority Key Identifier:
                keyid:E0:C4:0F:A4:B1:0F:E3:59:2F:A4:5A:02:25:2E:98:34:A2:3C:30:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/E0C40FA4B10FE3592FA45A02252E9834A23C3076.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0C40FA4B10FE3592FA45A02252E9834A23C3076.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/34352e342e3230382e302f32322d3234203d3e20323636303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:1a:20:d2:aa:94:12:2c:b2:c3:f4:69:b3:1d:ba:a2:4a:b2:
         49:4f:c1:19:5c:69:df:43:d6:7b:83:bc:7a:7e:63:59:c6:f5:
         5b:8f:d4:b5:a2:53:65:85:24:ef:b9:30:66:51:48:cf:13:92:
         f3:87:9c:54:8a:b0:24:d8:7f:f2:28:a0:b0:a8:62:70:27:ac:
         23:47:49:82:c1:fc:0f:eb:65:3a:d7:10:6e:a6:68:91:d3:b9:
         42:7c:ed:82:f6:db:59:a4:dd:7a:eb:e3:6d:26:99:cc:93:db:
         86:41:1f:0d:b7:5c:59:6d:41:c8:e1:5c:25:a9:4a:94:92:07:
         fc:fa:1d:2d:22:07:31:15:11:22:e5:a0:95:b4:e9:ef:e1:50:
         d1:dc:fd:d0:9b:da:f7:1b:5e:b3:dc:08:d8:a8:67:d0:02:b0:
         e2:62:51:af:ac:3a:70:1b:c5:d8:a3:c9:b8:a3:33:08:c7:e9:
         1c:8e:41:72:f4:9f:e4:83:50:08:ae:aa:cc:86:ac:c3:5f:c8:
         ad:7a:c6:be:8b:8a:81:9c:5a:28:dd:a3:2a:b7:c1:3e:1c:fb:
         3d:d5:91:9d:9a:74:5a:e2:88:34:b2:d5:50:a3:b5:2b:38:f5:
         d0:e9:a5:00:ac:77:e0:11:79:34:36:fd:24:79:4d:43:78:0b:
         94:1b:56:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:05:51 2026 by rpki-client