Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3233312e3233332e302f32342d3234203d3e203532383338.roa
File:                     34352e3233312e3233332e302f32342d3234203d3e203532383338.roa (raw, json)
Hash identifier:          FiOIl6MIqa0FhGHrSBbyv0/6wzm2CYtMWhYq/yRD/F8=
Subject key identifier:   A5:D5:4C:D8:1D:8D:5C:16:40:21:0E:03:DC:07:16:12:9B:F2:95:8F
Certificate issuer:       /CN=24159525D9783B62253D92C07EC4EB5CB3204829
Certificate serial:       362D37084E090229CD49D8B9EA91CF63D116392F
Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3233312e3233332e302f32342d3234203d3e203532383338.roa
Signing time:             Wed 04 Nov 2026 01:21:28 +0000
ROA not before:           Wed 04 Nov 2026 01:16:28 +0000
ROA not after:            Wed 03 Nov 2027 01:21:28 +0000
asID:                     52838
IP address blocks:        45.231.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
                          rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 21:19:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:2d:37:08:4e:09:02:29:cd:49:d8:b9:ea:91:cf:63:d1:16:39:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829
        Validity
            Not Before: Nov  4 01:16:28 2026 GMT
            Not After : Nov  3 01:21:28 2027 GMT
        Subject: CN=A5D54CD81D8D5C1640210E03DC0716129BF2958F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b3:d4:d6:61:28:8c:00:01:82:d9:c4:64:8e:
                    a8:b5:27:78:45:95:52:10:a0:13:5d:3e:18:5f:aa:
                    5d:54:25:cb:75:5e:99:11:b7:d7:45:12:dd:bd:71:
                    10:15:31:5a:49:a3:d8:61:b9:84:4f:d6:f4:78:f6:
                    b0:95:55:22:94:5d:6b:01:85:bf:47:f8:97:12:82:
                    62:35:f7:1a:cf:c5:94:c7:0f:12:7b:9b:1e:fe:a1:
                    78:b9:d4:d5:fe:19:22:fc:99:66:96:71:d3:ac:40:
                    fc:53:a5:88:5c:c5:8b:e8:cd:a4:e9:94:63:87:e0:
                    6f:52:07:3a:de:b7:80:50:16:49:73:94:21:d5:57:
                    da:c2:0c:26:29:8a:40:68:82:7b:cf:d0:16:1d:84:
                    6a:51:e1:16:0b:32:a9:2e:8e:ea:e8:69:07:99:bc:
                    85:0c:64:c4:5b:59:d0:2f:10:e2:ea:28:13:9d:25:
                    b2:6d:f0:cb:e1:2d:ad:3d:d7:b5:f5:ab:13:cb:62:
                    15:21:93:6c:52:8e:66:c9:40:d7:89:48:24:f0:98:
                    64:66:d7:52:a5:a8:4f:f7:9a:64:66:ae:c1:58:11:
                    35:60:97:70:91:8c:d8:d1:6b:22:77:04:5f:89:34:
                    a9:3e:e6:1c:aa:35:ef:65:5e:55:8c:33:84:a9:64:
                    e5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D5:4C:D8:1D:8D:5C:16:40:21:0E:03:DC:07:16:12:9B:F2:95:8F
            X509v3 Authority Key Identifier:
                keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3233312e3233332e302f32342d3234203d3e203532383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:74:ec:c4:e9:af:d9:d8:10:fe:2c:69:5d:c5:3b:1b:81:77:
         e4:85:db:51:84:90:64:54:14:4f:42:69:af:69:3f:04:4f:26:
         f7:8e:02:d1:74:50:1a:4e:a5:07:fc:68:66:aa:2a:60:48:df:
         54:2c:7a:7c:6a:1c:76:cc:bb:50:85:b3:a6:b2:e6:bf:97:60:
         04:93:7d:52:cf:96:62:09:26:9f:17:5b:ba:00:63:c5:c7:6a:
         3f:f6:bf:8b:8e:a3:ea:b7:fd:fc:9b:e7:d8:3d:fa:bf:ab:d3:
         6f:25:5a:1f:0e:63:06:eb:9a:78:7c:e9:84:ff:5b:eb:a5:e1:
         64:9b:c0:54:c6:c6:6b:54:a9:bd:48:76:bf:fc:27:48:42:c4:
         9c:cb:02:fe:1e:5c:ff:00:05:8a:f0:dd:e3:21:fa:fd:1c:a0:
         ca:c0:39:19:81:ee:f9:3d:a2:5a:73:e6:5d:e4:ac:50:8b:72:
         00:85:bc:41:2a:1c:ab:b1:07:19:47:0d:e3:84:b3:47:8d:ce:
         30:f3:4b:36:53:d0:b1:68:11:c8:66:23:e4:77:a1:1f:56:03:
         5f:ad:d2:6e:79:03:e0:7e:47:99:7c:d4:05:db:23:fa:3c:2a:
         97:eb:57:ad:d5:cd:c3:34:ff:df:fb:c9:f4:ab:5b:cf:63:ee:
         71:69:8b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:27:11 2026 by rpki-client