Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/34352e3232392e382e302f32322d3234203d3e20323637313233.roa
File:                     34352e3232392e382e302f32322d3234203d3e20323637313233.roa (raw, json)
Hash identifier:          fgrs9XKMjSn5FkJCZDRI71LWKU5UFP1RkhmeSdV1WBc=
Subject key identifier:   90:83:74:75:E5:17:87:F7:FF:A6:16:70:F5:F7:53:E6:51:73:F6:3F
Certificate issuer:       /CN=DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7
Certificate serial:       099DBDF44FCAA94288F62898AA8BA632BBFABF1E
Authority key identifier: DF:9D:1F:F1:4B:D6:D4:20:9A:F1:97:A1:E8:76:8E:8A:7A:93:C5:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/34352e3232392e382e302f32322d3234203d3e20323637313233.roa
Signing time:             Wed 02 Sep 2026 21:00:00 +0000
ROA not before:           Wed 02 Sep 2026 20:55:00 +0000
ROA not after:            Wed 01 Sep 2027 21:00:00 +0000
asID:                     267123
IP address blocks:        45.229.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.crl
                          rsync://rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 06:11:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:9d:bd:f4:4f:ca:a9:42:88:f6:28:98:aa:8b:a6:32:bb:fa:bf:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7
        Validity
            Not Before: Sep  2 20:55:00 2026 GMT
            Not After : Sep  1 21:00:00 2027 GMT
        Subject: CN=90837475E51787F7FFA61670F5F753E65173F63F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:aa:8d:0b:79:6d:a4:cd:31:9a:ec:81:5b:79:
                    2f:18:1d:85:8e:67:cf:dd:40:72:93:cd:99:d0:bd:
                    d4:d5:39:f5:ec:ff:89:dd:38:12:48:86:01:cc:1c:
                    cf:22:32:8a:77:89:4b:f0:04:b6:3f:63:07:b9:59:
                    b1:bb:f7:a0:5a:67:fa:36:e7:05:09:38:17:c6:4e:
                    94:86:f3:39:f8:04:d1:3d:ee:6c:2d:8e:b2:d2:ad:
                    95:35:f4:ea:0a:df:a3:74:aa:e0:b4:8c:d2:6b:3d:
                    ad:29:98:77:a2:c8:02:55:cc:30:34:94:cc:d3:7c:
                    50:47:37:a2:06:13:31:06:b4:9e:93:09:43:00:df:
                    26:a4:f1:8e:df:01:11:2c:13:e5:7a:7c:bf:23:14:
                    58:0b:cb:de:ef:36:2a:1f:5b:72:e1:c5:2c:13:60:
                    01:b4:53:9c:2b:18:9a:d2:69:16:37:55:7e:46:8b:
                    92:f9:b5:a9:80:52:46:3b:46:01:b9:16:f1:45:54:
                    f5:1a:54:68:85:fa:43:ca:53:58:97:5d:38:ed:a2:
                    0a:f9:98:db:bb:15:6a:16:0e:c3:bd:6e:41:9c:f6:
                    9b:d9:f0:10:3a:f8:0e:aa:0c:67:af:b1:6b:14:dc:
                    c2:91:e3:b1:2a:8e:f4:ae:ac:10:43:1f:70:e3:07:
                    dd:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:83:74:75:E5:17:87:F7:FF:A6:16:70:F5:F7:53:E6:51:73:F6:3F
            X509v3 Authority Key Identifier:
                keyid:DF:9D:1F:F1:4B:D6:D4:20:9A:F1:97:A1:E8:76:8E:8A:7A:93:C5:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/34352e3232392e382e302f32322d3234203d3e20323637313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:4f:ef:32:a3:fc:e2:0d:fd:d7:90:3a:a7:54:fe:73:3c:ae:
         1e:96:ff:d0:f7:d1:71:57:15:e8:7b:fe:47:96:bd:85:0f:00:
         65:ed:7a:6a:57:e1:fe:19:a2:08:98:29:88:bc:ca:24:3b:a8:
         fc:ca:2c:a3:fd:5f:a0:60:07:4c:7e:7b:2a:90:bf:65:d7:a3:
         de:50:8d:a1:29:e7:62:47:f1:14:2d:ff:6d:21:80:15:11:66:
         cb:b5:c7:00:3e:c6:28:3b:49:f3:72:bb:0d:66:22:c4:0d:5a:
         41:11:70:5e:9f:f3:be:fc:b5:bc:b8:eb:6d:d4:ba:3f:c2:94:
         67:49:7b:b2:60:92:19:70:2f:fd:60:b8:ef:31:82:a6:11:f4:
         d1:bd:23:c7:2c:22:a7:de:e9:af:56:e6:00:47:3e:80:d4:ad:
         1a:cc:e6:f6:e5:b3:b4:cd:ce:95:50:b0:cb:f2:54:2b:3d:dc:
         59:a2:ae:f3:37:e5:41:e1:49:7b:34:c1:c3:a6:3d:63:56:ac:
         c9:83:38:3c:4a:d9:e1:ab:c8:c1:a7:eb:b1:d1:a1:3c:f9:f4:
         26:5d:ee:bc:0c:65:d0:3b:c0:ea:15:43:ea:4d:55:f5:68:68:
         a0:bb:66:9e:c4:56:08:58:07:b4:8f:36:66:2d:b6:bf:85:e1:
         6d:ea:b3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----