Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/34352e3233342e35352e302f32342d3234203d3e20323637333630.roa
File:                     34352e3233342e35352e302f32342d3234203d3e20323637333630.roa (raw, json)
Hash identifier:          zAszvJBc9qbXKBfO7KjX2RV2VLnaRFMoVF8F7PF4ubI=
Subject key identifier:   8E:97:27:53:7D:F6:3C:17:5C:4B:AC:46:D1:BF:06:1C:AE:14:D0:84
Certificate issuer:       /CN=29458830F065A1888B513BA8F48CF0ACB0C499EA
Certificate serial:       351944FEB32E859E0F3E687B5B67E96744EE27E5
Authority key identifier: 29:45:88:30:F0:65:A1:88:8B:51:3B:A8:F4:8C:F0:AC:B0:C4:99:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29458830F065A1888B513BA8F48CF0ACB0C499EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/34352e3233342e35352e302f32342d3234203d3e20323637333630.roa
Signing time:             Tue 08 Sep 2026 20:19:46 +0000
ROA not before:           Tue 08 Sep 2026 20:14:46 +0000
ROA not after:            Tue 07 Sep 2027 20:19:46 +0000
asID:                     267360
IP address blocks:        45.234.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/29458830F065A1888B513BA8F48CF0ACB0C499EA.crl
                          rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/29458830F065A1888B513BA8F48CF0ACB0C499EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29458830F065A1888B513BA8F48CF0ACB0C499EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 11:10:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:19:44:fe:b3:2e:85:9e:0f:3e:68:7b:5b:67:e9:67:44:ee:27:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29458830F065A1888B513BA8F48CF0ACB0C499EA
        Validity
            Not Before: Sep  8 20:14:46 2026 GMT
            Not After : Sep  7 20:19:46 2027 GMT
        Subject: CN=8E9727537DF63C175C4BAC46D1BF061CAE14D084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a8:41:bd:b4:21:61:4b:78:f5:2d:e3:02:ce:
                    ac:44:f9:79:4d:cb:fb:b1:54:51:10:ab:6a:da:51:
                    0b:ee:c3:a9:2e:7d:fa:ad:96:ae:f0:97:a9:a1:9a:
                    c0:3b:c7:91:9a:7a:1f:fc:1f:8b:25:94:3f:23:22:
                    ee:4a:74:85:55:b4:02:60:72:82:50:ed:e4:d8:e8:
                    39:e3:bf:51:c7:a0:30:d6:cf:93:0d:3b:ef:64:6b:
                    89:ae:96:d1:6d:cf:e4:d0:18:94:5f:c3:1f:34:75:
                    8a:7e:cf:27:e4:65:9c:71:0c:b7:f7:e4:e4:a1:af:
                    e0:be:2c:76:56:ee:9b:f4:b5:59:13:d2:77:2a:08:
                    41:91:ea:62:14:e7:ec:09:27:8b:5c:78:bd:5d:61:
                    ea:f1:27:1b:8f:3d:b0:27:29:74:ba:4b:ba:ff:26:
                    54:b6:98:b7:a9:70:cf:22:91:52:9b:bd:df:78:65:
                    72:c5:fd:08:12:64:bf:d3:ac:31:74:e3:d5:9a:d8:
                    0b:81:5b:17:90:17:e9:5f:5b:3f:92:72:0f:b7:ee:
                    80:b4:03:6f:02:2e:34:ac:ad:2c:c5:f3:76:66:1a:
                    fa:42:ed:e9:0f:47:f6:0c:42:a4:b4:f5:0e:80:a6:
                    56:31:fc:34:32:e7:ea:a9:76:72:53:36:ae:2a:ce:
                    31:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:97:27:53:7D:F6:3C:17:5C:4B:AC:46:D1:BF:06:1C:AE:14:D0:84
            X509v3 Authority Key Identifier:
                keyid:29:45:88:30:F0:65:A1:88:8B:51:3B:A8:F4:8C:F0:AC:B0:C4:99:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/29458830F065A1888B513BA8F48CF0ACB0C499EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29458830F065A1888B513BA8F48CF0ACB0C499EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/34352e3233342e35352e302f32342d3234203d3e20323637333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:61:96:d2:25:7c:79:e1:8c:ab:1b:c2:be:68:d0:85:b0:9a:
         e9:8e:9c:85:2c:65:94:24:11:1c:ce:ac:69:56:db:4f:36:b9:
         97:67:15:4e:e7:2f:66:10:8c:13:a4:29:18:6e:a5:b6:52:b2:
         e7:1f:17:21:04:9f:76:ee:2d:17:f4:e8:0b:b9:76:54:e6:08:
         28:d6:4e:39:e3:f9:26:30:b7:07:31:63:1a:d2:e4:49:9e:43:
         85:ce:0d:ba:60:ef:0f:d3:21:d8:e3:d7:2b:39:be:df:c9:94:
         2c:7d:84:3d:0a:44:fe:dc:9e:0b:5a:05:43:63:54:77:a3:e0:
         77:90:33:1f:10:a0:55:9f:c5:6f:ef:83:77:81:b4:16:9d:40:
         02:f5:06:bd:03:93:de:5f:77:40:72:fa:5a:b1:86:c4:18:63:
         1c:3a:9f:21:d3:ce:2b:43:e1:20:85:be:36:cd:89:73:89:1a:
         80:56:88:4d:bd:19:83:ca:d8:94:2c:b2:92:7e:d4:47:ac:3e:
         df:22:25:ae:f5:d5:03:66:cd:e6:97:0c:49:c0:da:ba:a6:1b:
         af:3d:31:9a:c7:10:d5:63:0c:bc:be:09:f2:fa:de:28:e1:12:
         3e:24:da:bf:70:f6:2c:8b:52:b8:c8:b1:12:12:f4:0c:19:94:
         1b:cb:e9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 20:48:32 2026 by rpki-client