Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/34352e3233332e3138362e302f32342d3234203d3e20323637333236.roa
File:                     34352e3233332e3138362e302f32342d3234203d3e20323637333236.roa (raw, json)
Hash identifier:          B+SQ5y3JIROtNm1VMAU58ofaTMomxs6dXc0BrltkeU0=
Subject key identifier:   48:34:10:37:95:E3:B4:9E:73:4E:6F:78:D0:B9:7B:2A:D9:84:E4:40
Certificate issuer:       /CN=BE7C82FCD91A11CE5A95DCF80706992CF9D292EC
Certificate serial:       15AC77438E0D7DB57BDFF56AB9A58E9F7A0D6708
Authority key identifier: BE:7C:82:FC:D9:1A:11:CE:5A:95:DC:F8:07:06:99:2C:F9:D2:92:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/34352e3233332e3138362e302f32342d3234203d3e20323637333236.roa
Signing time:             Wed 30 Sep 2026 18:14:28 +0000
ROA not before:           Wed 30 Sep 2026 18:09:28 +0000
ROA not after:            Wed 29 Sep 2027 18:14:28 +0000
asID:                     267326
IP address blocks:        45.233.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.crl
                          rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 12:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ac:77:43:8e:0d:7d:b5:7b:df:f5:6a:b9:a5:8e:9f:7a:0d:67:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE7C82FCD91A11CE5A95DCF80706992CF9D292EC
        Validity
            Not Before: Sep 30 18:09:28 2026 GMT
            Not After : Sep 29 18:14:28 2027 GMT
        Subject: CN=4834103795E3B49E734E6F78D0B97B2AD984E440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:af:bb:58:28:01:04:7f:7e:0b:78:41:7d:fa:
                    48:c2:0d:4c:13:ed:80:ee:8e:e5:25:a9:6a:22:4a:
                    83:bb:ab:6e:84:26:9e:c5:62:7c:50:8b:3d:0b:0f:
                    63:27:9b:cf:2d:26:8d:bf:00:c6:60:2d:58:fa:a2:
                    37:67:c2:bd:35:76:13:f8:3f:08:04:41:41:78:42:
                    ef:a7:1d:a8:6f:69:d9:7a:4e:15:7f:b4:36:43:a3:
                    27:07:b8:01:4e:ab:c5:a7:07:21:2c:27:4d:6f:84:
                    ee:a3:23:53:3e:68:70:b7:34:3a:53:c2:0d:9c:5e:
                    61:34:c9:fd:3b:f3:ac:f5:19:c8:96:69:59:a5:7e:
                    d1:73:5c:eb:ad:18:3f:7f:41:5c:44:bd:87:ab:d3:
                    b8:53:7d:65:88:75:63:c4:a4:a5:26:38:19:df:dd:
                    8c:85:e0:71:f7:dd:13:ad:98:34:b1:19:cd:3c:51:
                    c8:8c:19:24:23:c9:97:ad:a0:79:00:56:22:11:be:
                    09:2c:42:6e:25:30:7c:6b:40:cc:2d:96:ac:42:e8:
                    82:fb:f5:62:0a:8c:f2:a8:3c:92:47:a2:49:43:4c:
                    a4:0f:bb:44:35:ec:94:a3:f7:d8:67:de:b9:c3:89:
                    69:5b:16:49:6b:b5:76:a8:a7:64:9b:6f:c2:ef:c7:
                    a0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:34:10:37:95:E3:B4:9E:73:4E:6F:78:D0:B9:7B:2A:D9:84:E4:40
            X509v3 Authority Key Identifier:
                keyid:BE:7C:82:FC:D9:1A:11:CE:5A:95:DC:F8:07:06:99:2C:F9:D2:92:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/34352e3233332e3138362e302f32342d3234203d3e20323637333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:82:c8:3a:8f:f3:45:90:bf:8a:e0:fe:6c:1d:6e:8d:9d:0b:
         1c:a1:0e:9c:49:89:b7:42:01:28:4e:22:80:ed:06:a3:c3:45:
         da:ae:ef:06:0e:e0:30:a9:80:aa:6b:cb:1b:8f:1e:80:be:d4:
         7b:a0:94:c7:81:57:4a:d7:57:04:37:44:71:34:14:d1:0a:97:
         b1:f8:c5:26:ea:75:bc:13:0c:a7:58:f7:a3:6e:01:7e:f5:ad:
         44:cb:12:f1:6c:e9:96:58:ec:77:56:ce:60:31:18:93:40:8d:
         ed:cc:75:fa:69:77:6d:93:e8:e2:86:98:cc:d7:4b:38:01:cf:
         78:4c:21:69:ff:ec:69:59:c9:fc:b8:2f:de:77:ff:e0:06:0c:
         6c:08:d4:c8:45:f2:ad:7e:26:d2:31:f9:cc:30:bb:32:34:46:
         2e:3e:bf:2d:f8:57:cc:7a:47:ba:15:fb:34:24:27:7c:2d:3b:
         d0:1b:b3:83:d8:7b:78:5c:4b:32:63:91:87:7d:f9:14:e4:eb:
         04:b8:57:26:20:ef:de:84:4e:da:7e:a7:3f:0e:38:d0:e3:fc:
         a1:6a:af:79:14:54:57:18:60:d7:e6:cc:34:82:4b:79:c7:fa:
         5d:1c:06:fe:3b:93:25:73:0b:11:62:89:e1:08:c5:0e:a8:95:
         b3:88:fc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 18:37:33 2026 by rpki-client