Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/34352e3233362e31302e302f32342d3234203d3e20323638323133.roa
File:                     34352e3233362e31302e302f32342d3234203d3e20323638323133.roa (raw, json)
Hash identifier:          C7/9+m1YIlhBftVB5dzjuceg8M8Yy+vkJQsnSTe4oqQ=
Subject key identifier:   FB:11:0C:6B:66:8C:72:EF:4F:F2:0F:81:99:5F:D6:4A:FE:59:B7:6E
Certificate issuer:       /CN=C3254EFA5C4E9FDA6768D0294247DF70DABBEF22
Certificate serial:       212C28878E29F1FC7060D2117A84BBA791045C5A
Authority key identifier: C3:25:4E:FA:5C:4E:9F:DA:67:68:D0:29:42:47:DF:70:DA:BB:EF:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/34352e3233362e31302e302f32342d3234203d3e20323638323133.roa
Signing time:             Fri 11 Sep 2026 19:02:30 +0000
ROA not before:           Fri 11 Sep 2026 18:57:30 +0000
ROA not after:            Fri 10 Sep 2027 19:02:30 +0000
asID:                     268213
IP address blocks:        45.236.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.crl
                          rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 22:21:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:2c:28:87:8e:29:f1:fc:70:60:d2:11:7a:84:bb:a7:91:04:5c:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3254EFA5C4E9FDA6768D0294247DF70DABBEF22
        Validity
            Not Before: Sep 11 18:57:30 2026 GMT
            Not After : Sep 10 19:02:30 2027 GMT
        Subject: CN=FB110C6B668C72EF4FF20F81995FD64AFE59B76E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a9:23:a4:b0:2d:4b:7d:07:3c:26:f6:8b:41:
                    00:87:bb:2e:35:c0:a8:21:0c:52:1c:3d:5d:a8:79:
                    22:0d:66:09:29:25:59:22:12:a4:06:73:f4:6f:f2:
                    c2:e8:fa:82:dc:fa:43:5b:42:db:4c:76:e2:30:a8:
                    dd:d9:05:09:76:18:cd:b7:29:48:d0:6c:be:6c:18:
                    c1:ef:c2:4e:77:16:10:a7:ca:ec:23:24:40:15:25:
                    82:98:3b:06:da:df:27:1a:34:ce:03:40:cb:19:6d:
                    4e:1c:1e:77:e3:d2:38:57:e6:5b:d3:47:90:a8:a0:
                    9c:f1:b0:5b:d4:d4:98:4d:af:d6:ba:80:36:62:e7:
                    be:6b:58:13:9b:2f:6b:83:9a:40:a9:f5:26:7c:46:
                    3a:81:fa:60:3a:4b:0a:14:b5:d3:00:c3:a6:46:8a:
                    5e:87:c9:43:83:9b:41:bd:e6:e9:6b:ae:0f:13:d2:
                    04:e7:93:69:c5:fc:d5:2d:6e:46:90:ee:b3:43:4d:
                    02:dd:ed:2c:0b:aa:78:be:b0:a0:04:a2:3a:0d:97:
                    5d:a8:b0:18:9e:74:4a:3e:c3:de:8c:14:7c:99:fd:
                    1f:c6:c8:7f:67:69:68:20:89:ea:fe:ab:42:f3:c4:
                    9e:0c:0a:98:16:58:34:c8:b1:dc:05:0a:ef:8f:06:
                    6b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:11:0C:6B:66:8C:72:EF:4F:F2:0F:81:99:5F:D6:4A:FE:59:B7:6E
            X509v3 Authority Key Identifier:
                keyid:C3:25:4E:FA:5C:4E:9F:DA:67:68:D0:29:42:47:DF:70:DA:BB:EF:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/34352e3233362e31302e302f32342d3234203d3e20323638323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:c8:0d:9b:2d:17:42:47:c3:de:4e:9a:54:b2:26:59:25:b0:
         57:01:b4:84:4e:e9:98:31:e0:4b:67:63:07:c5:8c:04:4e:67:
         47:a5:01:d2:1d:94:04:2e:6d:a1:77:92:05:61:76:95:a4:f9:
         95:97:05:e6:ff:42:be:da:a8:13:f6:02:61:fd:79:04:e2:fa:
         5d:ee:b8:ca:18:9d:2c:2a:58:66:b8:e9:f7:4d:4b:d6:fa:59:
         d3:4f:95:29:7e:97:71:29:59:4a:d6:a9:a0:b9:e2:20:8c:db:
         20:bb:23:9c:89:4b:75:d0:17:11:55:15:cb:d9:42:ec:2f:67:
         d0:ca:fd:f4:7c:9e:eb:97:96:97:65:6c:16:fa:b2:3f:bb:08:
         c6:5c:ee:5f:43:36:de:c0:d9:da:fc:04:38:b2:92:fd:78:96:
         cd:3b:1c:f6:47:34:87:74:f5:83:e4:a5:70:cd:6b:25:52:b8:
         77:f9:d7:a7:f6:9a:fe:bf:14:38:03:55:fb:fa:da:ba:aa:4a:
         8b:d1:f1:26:c8:2a:9b:19:66:d1:cf:6f:11:8a:b1:18:fb:1d:
         c9:21:24:70:7e:d4:e3:b1:de:4f:75:ec:a8:5c:49:78:c4:89:
         c4:b4:62:e8:17:00:34:f9:33:95:fb:a9:e4:b8:1d:44:af:ef:
         17:fb:5e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 02:37:30 2026 by rpki-client