Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/34352e3137322e39362e302f32322d3234203d3e2033333536.roa
File:                     34352e3137322e39362e302f32322d3234203d3e2033333536.roa (raw, json)
Hash identifier:          BA6gwXCo0HBF6XaKfdEugib1yv56wIagSzIDW8xEA+g=
Subject key identifier:   CA:BA:E6:D4:1A:1D:31:AD:6A:7B:5F:E1:DB:22:13:34:45:B0:2B:08
Certificate issuer:       /CN=CD8F95B9B42EF35274A249E09F9AF98392325D71
Certificate serial:       59A6D86E185A9B950BD0427895D8FB65930FF3FD
Authority key identifier: CD:8F:95:B9:B4:2E:F3:52:74:A2:49:E0:9F:9A:F9:83:92:32:5D:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/34352e3137322e39362e302f32322d3234203d3e2033333536.roa
Signing time:             Thu 10 Sep 2026 20:28:13 +0000
ROA not before:           Thu 10 Sep 2026 20:23:13 +0000
ROA not after:            Thu 09 Sep 2027 20:28:13 +0000
asID:                     3356
IP address blocks:        45.172.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.crl
                          rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 08:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:a6:d8:6e:18:5a:9b:95:0b:d0:42:78:95:d8:fb:65:93:0f:f3:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD8F95B9B42EF35274A249E09F9AF98392325D71
        Validity
            Not Before: Sep 10 20:23:13 2026 GMT
            Not After : Sep  9 20:28:13 2027 GMT
        Subject: CN=CABAE6D41A1D31AD6A7B5FE1DB22133445B02B08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a4:78:d1:35:f6:54:e7:79:7b:07:0b:d3:e1:
                    aa:00:39:45:99:91:c3:c7:d8:4f:4c:65:0f:7f:d3:
                    e7:59:3f:b3:d4:78:c3:ff:04:67:5b:1e:ed:b9:12:
                    88:aa:7d:ca:2c:e4:36:ab:46:71:bd:ad:32:12:27:
                    a5:ff:bd:96:50:8f:61:33:bb:08:46:f8:ae:3d:44:
                    11:4e:4c:34:a9:79:82:43:fb:b2:26:5d:21:9e:77:
                    b1:0f:40:a8:c9:a6:33:d5:5c:75:24:c4:41:b0:74:
                    78:66:b3:60:73:91:85:a1:ee:ca:0c:ea:9c:15:fa:
                    e2:db:1b:4e:66:3d:89:d0:fa:3e:0e:36:9b:d4:02:
                    38:f9:e2:87:6d:5b:c9:2c:4a:8e:c9:d0:a0:a2:58:
                    b4:80:bd:7f:63:be:f3:4d:7f:4c:e0:28:2c:72:ae:
                    fb:9c:b2:c6:22:56:e2:f7:ed:a1:a8:49:ed:a7:8a:
                    d3:b2:f8:20:3e:6a:43:14:ca:e7:86:91:95:04:d0:
                    4c:2b:49:88:23:ad:e3:0f:4a:8d:04:67:ad:0c:3a:
                    f4:15:0b:ad:22:22:a0:32:b5:f6:a2:52:de:e1:ec:
                    65:af:98:88:3a:03:4c:75:3f:12:2b:67:7d:14:00:
                    b7:a0:73:02:50:c0:5a:05:88:3a:9f:82:e0:30:30:
                    53:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:BA:E6:D4:1A:1D:31:AD:6A:7B:5F:E1:DB:22:13:34:45:B0:2B:08
            X509v3 Authority Key Identifier:
                keyid:CD:8F:95:B9:B4:2E:F3:52:74:A2:49:E0:9F:9A:F9:83:92:32:5D:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/34352e3137322e39362e302f32322d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:17:28:f2:72:d6:7e:f8:c9:be:38:6a:a9:b2:3b:1a:6f:59:
         a1:ac:12:53:2e:1f:8b:14:75:a8:4d:30:56:45:8d:4e:c6:7a:
         15:13:51:d6:ec:43:7f:e0:64:b1:3c:ee:68:d3:e7:08:18:b8:
         f2:f2:30:1a:c9:b9:db:be:dc:ee:a8:64:25:42:4c:a0:a5:83:
         1b:2e:fb:39:2d:dc:c8:d2:d4:b2:6c:19:be:e5:bc:ed:ba:f8:
         3a:a7:1f:74:56:a5:35:c8:cf:ed:fa:bd:11:76:80:db:56:3c:
         7f:1d:cb:b4:f8:66:9c:c9:ee:05:19:94:74:94:40:10:43:1b:
         3a:94:91:03:00:6a:d7:c0:e4:22:5c:47:da:97:e9:14:11:ba:
         30:fe:59:dd:ed:db:b3:1a:85:32:b5:17:3b:db:60:ee:ac:d0:
         1a:e1:2c:20:0e:92:f8:2b:e6:77:4e:16:bb:57:72:ff:ae:bb:
         75:08:17:c3:13:0c:f5:cf:d9:ea:68:f6:49:6f:3f:59:cb:9e:
         99:c4:a8:50:73:5b:a4:34:ab:7c:eb:09:4e:fc:ce:b0:3c:23:
         8f:4e:2a:e1:bb:b2:d1:97:34:98:f6:cc:0e:62:00:e4:c6:ed:
         43:0f:db:07:f0:4c:83:b6:48:a5:58:a3:56:80:48:ff:58:e6:
         6a:f9:f9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:49:13 2026 by rpki-client