Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/34352e3233362e392e302f32342d3234203d3e20323638323133.roa
File:                     34352e3233362e392e302f32342d3234203d3e20323638323133.roa (raw, json)
Hash identifier:          DO6ySDbWySorxVzVMLFxnhEIRp6TTSUotVllni5udx8=
Subject key identifier:   BC:17:CC:D7:6E:FB:D9:6A:F2:28:85:94:1A:12:40:63:30:42:C1:E0
Certificate issuer:       /CN=C3254EFA5C4E9FDA6768D0294247DF70DABBEF22
Certificate serial:       0536B5724654C50129C17AAC65C4184512B78218
Authority key identifier: C3:25:4E:FA:5C:4E:9F:DA:67:68:D0:29:42:47:DF:70:DA:BB:EF:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/34352e3233362e392e302f32342d3234203d3e20323638323133.roa
Signing time:             Fri 11 Sep 2026 19:02:30 +0000
ROA not before:           Fri 11 Sep 2026 18:57:30 +0000
ROA not after:            Fri 10 Sep 2027 19:02:30 +0000
asID:                     268213
IP address blocks:        45.236.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.crl
                          rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 22:21:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:36:b5:72:46:54:c5:01:29:c1:7a:ac:65:c4:18:45:12:b7:82:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3254EFA5C4E9FDA6768D0294247DF70DABBEF22
        Validity
            Not Before: Sep 11 18:57:30 2026 GMT
            Not After : Sep 10 19:02:30 2027 GMT
        Subject: CN=BC17CCD76EFBD96AF22885941A1240633042C1E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9d:56:80:15:a6:95:a4:a4:97:ac:ba:f6:02:
                    22:a4:a3:70:e8:08:4b:e8:90:c2:00:a4:b0:cf:d5:
                    d8:ed:b6:12:b8:48:58:a6:98:9e:3f:e2:9f:10:1b:
                    90:22:90:97:5a:a6:c5:36:8b:39:57:30:f5:ad:64:
                    7c:5e:29:03:08:c0:b2:3f:70:62:71:4f:4f:c3:85:
                    61:6e:5f:9e:53:24:e3:9f:10:30:01:57:1a:41:bc:
                    3a:85:1b:57:34:03:b0:21:06:f9:bd:db:f2:a3:fb:
                    0f:51:1d:33:12:e0:f9:43:5c:bd:78:11:1f:34:30:
                    3c:c5:bb:d7:fb:1b:2e:bc:ee:51:51:01:71:3f:d5:
                    26:08:45:a4:22:75:c5:f8:71:27:58:ef:b4:08:a0:
                    33:4e:3c:60:53:84:5a:97:a4:0c:c3:be:3f:4d:99:
                    91:78:a5:e3:ca:28:16:77:ad:be:f2:24:63:cb:1d:
                    51:57:f2:6a:fd:a4:48:3c:46:a0:e4:5a:00:36:97:
                    b9:df:78:c6:87:a3:6f:ac:1f:eb:e6:7a:d0:07:89:
                    cb:90:8f:4d:35:8f:83:24:a1:17:f0:7e:24:2a:af:
                    5d:2d:4c:3c:58:d1:a0:5d:da:91:72:6f:c0:b1:09:
                    20:10:9c:b8:b2:6d:06:dc:17:71:44:8c:ee:eb:43:
                    34:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:17:CC:D7:6E:FB:D9:6A:F2:28:85:94:1A:12:40:63:30:42:C1:E0
            X509v3 Authority Key Identifier:
                keyid:C3:25:4E:FA:5C:4E:9F:DA:67:68:D0:29:42:47:DF:70:DA:BB:EF:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/34352e3233362e392e302f32342d3234203d3e20323638323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:0c:c0:25:1a:8b:b9:ae:02:77:4c:e9:cf:fe:2a:b1:eb:9b:
         c0:e8:35:47:69:83:25:2c:ed:85:56:43:98:0d:02:9a:bb:1d:
         46:38:28:a2:b8:22:52:74:2c:fa:7f:3d:d4:ea:c9:c5:ab:6c:
         99:67:65:32:4e:22:b6:01:8c:90:73:c0:6f:68:e5:98:db:92:
         a7:86:86:a9:7d:09:4c:9d:5f:12:b4:33:d1:fc:d0:37:bf:61:
         06:e2:82:dc:e9:4a:08:45:d1:ea:b7:ca:dd:ff:d3:9e:ef:9c:
         b5:90:2b:e5:bb:1b:66:ae:86:0f:30:6f:8a:20:f0:a4:3d:65:
         60:a4:49:f5:d8:b8:ff:fd:f0:b5:8b:aa:6c:45:06:24:64:44:
         bf:89:82:91:11:01:40:71:fd:32:9d:2c:ae:94:65:65:e8:5e:
         2b:29:8e:6a:72:a4:b6:9a:69:b7:93:37:64:a0:3f:e0:d6:35:
         c8:4a:d6:95:29:9b:98:07:c7:4e:c1:96:6a:6c:0a:40:e0:be:
         df:ae:96:70:78:11:db:4f:bd:97:5a:71:fb:97:2e:c6:2f:53:
         c6:04:f1:0d:01:fc:f6:37:6d:7c:15:d7:67:25:af:5b:6d:5d:
         37:69:ee:bb:00:3e:31:1c:b9:a1:5d:77:5c:99:71:c3:28:dd:
         b5:94:17:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 08:18:52 2026 by rpki-client