Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/34352e3139302e3235312e302f32342d3234203d3e20323639363536.roa
File:                     34352e3139302e3235312e302f32342d3234203d3e20323639363536.roa (raw, json)
Hash identifier:          tvefacDa2lys/AbAKL9uDH4+v2JG4o4cygPvyy7Jlbs=
Subject key identifier:   FE:6B:70:3E:A6:BA:D6:20:EB:7D:C0:A2:29:33:39:6E:85:7C:D7:62
Certificate issuer:       /CN=49C708D013D5FE74999800FB265B16FDF89861D3
Certificate serial:       17FDF0E5BA566C71589955EE07331276E17F4990
Authority key identifier: 49:C7:08:D0:13:D5:FE:74:99:98:00:FB:26:5B:16:FD:F8:98:61:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C708D013D5FE74999800FB265B16FDF89861D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/34352e3139302e3235312e302f32342d3234203d3e20323639363536.roa
Signing time:             Thu 08 Oct 2026 19:02:35 +0000
ROA not before:           Thu 08 Oct 2026 18:57:35 +0000
ROA not after:            Thu 07 Oct 2027 19:02:35 +0000
asID:                     269656
IP address blocks:        45.190.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/49C708D013D5FE74999800FB265B16FDF89861D3.crl
                          rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/49C708D013D5FE74999800FB265B16FDF89861D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C708D013D5FE74999800FB265B16FDF89861D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 15:28:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:fd:f0:e5:ba:56:6c:71:58:99:55:ee:07:33:12:76:e1:7f:49:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49C708D013D5FE74999800FB265B16FDF89861D3
        Validity
            Not Before: Oct  8 18:57:35 2026 GMT
            Not After : Oct  7 19:02:35 2027 GMT
        Subject: CN=FE6B703EA6BAD620EB7DC0A22933396E857CD762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e8:d6:09:0a:75:dc:7d:24:92:62:53:fd:fd:
                    c8:03:66:36:14:25:c1:f9:f8:c1:96:f7:b2:21:f9:
                    57:66:77:b4:08:5f:68:6c:c8:21:bb:15:94:4a:fe:
                    2c:34:c9:0a:06:87:fe:ae:bd:b1:5b:9b:aa:2a:9a:
                    db:84:e9:ba:f5:d2:08:9e:13:cf:57:92:de:78:a4:
                    84:0b:60:2b:9a:b8:61:e4:7c:8a:09:0f:62:d2:61:
                    f9:f0:68:be:22:98:07:27:15:9f:b7:3d:27:9c:53:
                    91:e1:4d:e8:8b:53:58:26:4a:06:8d:aa:d9:c6:a3:
                    f7:06:d9:1c:3e:61:16:0a:43:96:5b:72:1f:e9:87:
                    0f:85:5a:a6:5a:5c:7a:39:bd:e7:6f:5a:dc:d4:13:
                    f0:4e:b2:f6:b4:36:2e:0d:ab:11:bd:4c:93:30:1b:
                    ca:ff:42:2e:6d:99:47:df:42:16:d6:51:ee:cc:44:
                    95:c6:d8:1b:a4:e0:70:61:00:20:3a:5a:a1:6b:5f:
                    8b:43:a1:92:ef:0d:6e:95:1f:b0:8e:cc:b9:77:ce:
                    80:de:06:dc:65:60:b6:d4:a6:00:57:e9:9d:bd:83:
                    7f:6e:44:58:b4:ea:a8:2d:e5:77:84:38:7c:a5:5a:
                    a7:48:09:94:47:c0:d8:81:29:fa:57:40:27:65:3c:
                    22:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:6B:70:3E:A6:BA:D6:20:EB:7D:C0:A2:29:33:39:6E:85:7C:D7:62
            X509v3 Authority Key Identifier:
                keyid:49:C7:08:D0:13:D5:FE:74:99:98:00:FB:26:5B:16:FD:F8:98:61:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/49C708D013D5FE74999800FB265B16FDF89861D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C708D013D5FE74999800FB265B16FDF89861D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/34352e3139302e3235312e302f32342d3234203d3e20323639363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:33:84:ff:52:25:17:c5:9b:8a:0f:51:9f:77:54:b5:ea:35:
         83:ac:56:b1:9a:97:fe:fe:17:82:d5:e1:9e:6c:73:91:76:ec:
         c8:72:f6:16:da:eb:05:8b:61:73:1f:02:47:75:25:c5:58:b6:
         a9:95:ad:ba:d2:68:13:70:83:c4:a7:f2:42:e0:8b:89:f5:50:
         80:51:4e:11:9a:9e:b2:63:7f:65:4e:3e:c2:44:f8:f1:37:51:
         2e:06:79:5e:f3:0f:a8:44:31:a6:b3:47:f2:d4:39:fe:65:f8:
         1d:ce:f4:a9:df:4e:14:3b:5d:f8:92:5a:5d:33:51:fa:84:81:
         4d:7e:b7:59:a6:94:de:3a:f6:0d:d5:99:c8:c0:32:30:e2:25:
         a4:1f:10:4f:66:3a:63:91:d1:7d:85:de:81:c3:f3:6a:e3:f8:
         ac:f5:29:40:15:b4:db:12:d3:b9:88:af:54:84:cc:c4:0f:37:
         ec:f0:fd:bc:af:70:a2:9e:09:b3:4c:bb:e1:fe:48:72:88:af:
         a4:42:0d:8b:58:b5:1a:f8:ea:b2:68:e5:7f:a9:0e:3f:01:64:
         ad:31:c0:90:89:b8:15:86:80:65:64:d7:a1:12:de:20:44:da:
         f4:e9:ff:39:c6:df:53:db:3f:c7:80:70:f9:c0:ec:bb:04:83:
         96:b3:d8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:12:15 2026 by rpki-client