Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/34352e3233342e35332e302f32342d3234203d3e20323637333630.roa
File:                     34352e3233342e35332e302f32342d3234203d3e20323637333630.roa (raw, json)
Hash identifier:          VS9IMFSE1MQZo+DSR978g2LXmg+xO+rGABvKXPKo2Mg=
Subject key identifier:   29:00:5D:4E:44:A5:2C:93:14:D0:66:89:55:B9:0B:56:0E:18:9A:30
Certificate issuer:       /CN=29458830F065A1888B513BA8F48CF0ACB0C499EA
Certificate serial:       7BA662146343A70B3FBE0EBAADBCE6DEC9BDA981
Authority key identifier: 29:45:88:30:F0:65:A1:88:8B:51:3B:A8:F4:8C:F0:AC:B0:C4:99:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29458830F065A1888B513BA8F48CF0ACB0C499EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/34352e3233342e35332e302f32342d3234203d3e20323637333630.roa
Signing time:             Tue 08 Sep 2026 20:19:50 +0000
ROA not before:           Tue 08 Sep 2026 20:14:50 +0000
ROA not after:            Tue 07 Sep 2027 20:19:50 +0000
asID:                     267360
IP address blocks:        45.234.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/29458830F065A1888B513BA8F48CF0ACB0C499EA.crl
                          rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/29458830F065A1888B513BA8F48CF0ACB0C499EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29458830F065A1888B513BA8F48CF0ACB0C499EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 11:10:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:a6:62:14:63:43:a7:0b:3f:be:0e:ba:ad:bc:e6:de:c9:bd:a9:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29458830F065A1888B513BA8F48CF0ACB0C499EA
        Validity
            Not Before: Sep  8 20:14:50 2026 GMT
            Not After : Sep  7 20:19:50 2027 GMT
        Subject: CN=29005D4E44A52C9314D0668955B90B560E189A30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bb:76:fa:4c:01:49:a5:8e:50:27:3b:27:fa:
                    3b:f3:5b:3b:ab:43:3e:c7:3a:e3:f8:e8:50:07:5d:
                    e4:d4:59:e1:70:10:91:5b:50:f6:45:4c:b4:05:9b:
                    f4:da:05:41:38:86:90:ab:5f:d5:84:ca:bb:77:d6:
                    6a:15:c8:9e:60:14:90:36:10:d9:90:0d:97:58:7e:
                    23:c2:3b:0f:6c:1f:88:ab:15:6e:59:c4:ff:36:66:
                    b7:33:59:26:ab:27:19:fc:49:e2:77:5f:f9:5a:da:
                    2f:f6:84:0a:e3:bb:32:aa:54:da:f1:02:87:e2:26:
                    cd:37:cb:61:d1:59:47:a4:39:a2:68:cf:37:f9:07:
                    58:d7:e3:07:05:42:2e:fb:cb:af:38:4a:4b:e2:49:
                    d2:69:f9:fc:1f:fc:6b:89:4d:be:33:76:b2:66:9d:
                    3c:b5:ec:7c:86:d3:8a:32:e6:26:23:ab:e2:14:31:
                    71:9c:35:0a:0b:85:64:87:ac:f0:77:b5:7b:31:48:
                    b0:c0:8b:f0:94:b5:76:a4:4b:29:16:2b:e2:df:73:
                    45:f5:9b:e7:8e:07:6f:8e:a9:41:c3:f3:a7:6e:1b:
                    84:23:3b:61:14:a7:c7:23:99:17:a1:94:63:af:d3:
                    73:0a:7b:cc:93:93:67:fb:39:66:f4:f0:e0:72:15:
                    a1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:00:5D:4E:44:A5:2C:93:14:D0:66:89:55:B9:0B:56:0E:18:9A:30
            X509v3 Authority Key Identifier:
                keyid:29:45:88:30:F0:65:A1:88:8B:51:3B:A8:F4:8C:F0:AC:B0:C4:99:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/29458830F065A1888B513BA8F48CF0ACB0C499EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29458830F065A1888B513BA8F48CF0ACB0C499EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/34352e3233342e35332e302f32342d3234203d3e20323637333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:b2:68:ba:3c:36:7f:b9:a3:b8:e6:bb:b2:90:5d:9a:18:54:
         71:93:77:20:c0:21:f8:cf:7c:43:57:c8:ef:fd:d2:c9:13:af:
         0e:36:b2:40:26:8e:fd:c1:f1:f8:aa:cd:ba:1f:6e:c8:c8:d4:
         6f:fa:6e:7e:3a:cf:d9:fc:73:a0:fe:03:51:60:f5:39:bd:cf:
         c7:1d:19:39:1b:24:fd:3a:85:c8:7a:fc:6d:99:59:5c:5b:2d:
         d7:60:52:03:db:2d:38:c5:5b:8b:62:dc:34:20:ce:d1:f9:3e:
         79:0d:5f:ec:73:b9:06:83:48:f3:6d:f5:d3:de:23:dc:29:f2:
         6c:67:16:2d:d9:fa:20:cd:15:85:a1:6f:8f:7d:f4:d6:20:ee:
         04:0c:ab:40:43:51:5a:f3:33:dd:70:c9:cf:a9:ef:e8:97:5a:
         6c:71:2f:d8:df:c0:ed:bc:cc:c7:11:8e:2d:e8:9c:0f:75:e3:
         ed:72:d8:12:a8:5f:5a:1e:06:92:1b:ec:b9:93:f0:15:aa:22:
         73:3e:7d:db:de:47:9a:86:b3:9a:2c:ef:ea:33:9c:7b:9d:01:
         42:7e:ef:02:b6:74:59:96:96:0f:5c:a3:c5:56:43:f6:10:99:
         36:56:d9:bd:c2:ad:c5:f3:bf:bc:74:df:28:a8:81:d1:0e:70:
         ae:a8:72:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 03:46:19 2026 by rpki-client