Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/34352e3233332e3138342e302f32332d3233203d3e20323637333236.roa
File:                     34352e3233332e3138342e302f32332d3233203d3e20323637333236.roa (raw, json)
Hash identifier:          o+9RaewsVe05CTU4yILQwpxiNAIDUPD6zMcq+9potGs=
Subject key identifier:   54:4B:51:F4:95:CE:81:05:FE:BA:54:0C:23:67:E8:8E:A0:84:C8:B1
Certificate issuer:       /CN=BE7C82FCD91A11CE5A95DCF80706992CF9D292EC
Certificate serial:       671451C8D9730507CA24648E6A26B2AC1681FFFE
Authority key identifier: BE:7C:82:FC:D9:1A:11:CE:5A:95:DC:F8:07:06:99:2C:F9:D2:92:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/34352e3233332e3138342e302f32332d3233203d3e20323637333236.roa
Signing time:             Wed 30 Sep 2026 18:14:36 +0000
ROA not before:           Wed 30 Sep 2026 18:09:36 +0000
ROA not after:            Wed 29 Sep 2027 18:14:36 +0000
asID:                     267326
IP address blocks:        45.233.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.crl
                          rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 18:16:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:14:51:c8:d9:73:05:07:ca:24:64:8e:6a:26:b2:ac:16:81:ff:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE7C82FCD91A11CE5A95DCF80706992CF9D292EC
        Validity
            Not Before: Sep 30 18:09:36 2026 GMT
            Not After : Sep 29 18:14:36 2027 GMT
        Subject: CN=544B51F495CE8105FEBA540C2367E88EA084C8B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:32:29:4b:ef:af:17:33:2e:17:5f:a7:65:43:
                    ec:2f:0d:8c:77:f6:3e:73:e8:b1:84:e7:f3:41:70:
                    ad:f3:9a:dc:3c:be:be:50:f1:77:9f:77:40:9e:77:
                    58:45:20:ac:7b:d1:ea:9e:e1:d1:39:85:2c:87:4b:
                    c7:50:a8:22:58:1c:a9:56:3b:e5:35:ee:43:fc:dc:
                    5f:17:0f:4c:32:c0:bf:bf:07:45:86:cf:7a:30:2c:
                    7e:b7:9c:4f:27:2f:ef:23:56:c6:b5:10:14:8a:ca:
                    c3:57:7e:7e:a2:e6:6b:29:6c:16:f4:4b:0c:d5:88:
                    7c:66:d9:a7:4f:ec:5a:f5:9a:0e:2d:5d:8b:cf:1f:
                    15:3d:c2:f8:24:bc:31:df:53:c6:98:6c:21:d5:1b:
                    b3:76:e2:2c:57:d7:78:e7:d3:4b:c6:78:4f:0f:fe:
                    40:30:b5:6f:5d:ff:1d:43:ba:72:e8:f4:14:1d:39:
                    1c:73:c1:07:9b:ec:81:c2:58:4b:6a:8c:12:5e:a6:
                    12:53:f2:0c:a1:06:0c:7e:dd:4b:37:33:11:c6:5f:
                    e2:14:3b:5f:90:3f:40:6e:b4:6c:8e:18:85:be:da:
                    24:e9:af:9e:91:e5:b4:fa:3a:ba:ac:19:ac:f5:52:
                    b1:af:5b:5d:8b:17:32:e8:59:f5:ac:9d:7d:7f:8d:
                    fb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4B:51:F4:95:CE:81:05:FE:BA:54:0C:23:67:E8:8E:A0:84:C8:B1
            X509v3 Authority Key Identifier:
                keyid:BE:7C:82:FC:D9:1A:11:CE:5A:95:DC:F8:07:06:99:2C:F9:D2:92:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/34352e3233332e3138342e302f32332d3233203d3e20323637333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:6d:f9:44:e1:2e:fa:11:ba:2b:ca:69:82:f9:4b:f7:c5:d1:
         a4:e3:69:00:d4:2c:11:09:ec:cc:bf:cd:16:1c:c9:a0:62:b8:
         cf:2b:27:72:a7:94:60:0c:4a:1d:11:2a:7a:cf:4c:b6:e6:94:
         bd:5e:1f:cd:40:26:f3:b4:95:6c:87:de:23:c4:07:23:00:3f:
         fa:d7:b5:18:57:58:dd:b6:d0:80:7e:d1:4c:9f:36:d1:df:96:
         33:a4:7c:a3:cd:e9:70:70:6e:78:68:13:54:e7:e5:b6:85:97:
         a7:7d:f6:29:74:b9:99:04:bc:0b:d8:af:5d:34:3a:5c:e6:3d:
         b2:79:fd:a5:0b:94:7b:b5:58:16:72:b8:85:fa:8c:33:1a:a9:
         d9:b2:0e:6d:00:34:c4:42:88:33:62:28:3b:cc:56:e1:ed:60:
         35:4a:3e:da:db:21:f0:e7:6b:fd:11:40:95:bd:4e:b5:a5:38:
         be:5d:72:af:2e:86:f8:d7:3b:d8:2f:72:8f:cf:aa:ae:5b:fb:
         84:e7:8f:a8:d0:0b:5e:9f:bc:d9:9a:6c:cd:b8:0c:ce:8a:78:
         19:d1:9d:80:2c:06:30:9e:4e:c3:ee:50:21:f9:67:52:f1:d6:
         32:5f:9a:f1:ee:d0:6a:dc:d3:d7:da:cd:8a:59:c4:1d:01:09:
         bf:92:92:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:52:29 2026 by rpki-client