Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/34352e3138352e34382e302f32322d3234203d3e20323639333538.roa
File:                     34352e3138352e34382e302f32322d3234203d3e20323639333538.roa (raw, json)
Hash identifier:          NUtXQFaOeVTxrDiCpchmBbF+gu+nGbOOEjVHUYb1Oy4=
Subject key identifier:   23:82:FA:9A:CB:ED:79:A4:3A:66:D5:6F:33:58:3E:C2:AD:3E:8E:44
Certificate issuer:       /CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
Certificate serial:       0D63229D85C6D45E4285E22B0F2F356814E3308B
Authority key identifier: 3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/34352e3138352e34382e302f32322d3234203d3e20323639333538.roa
Signing time:             Fri 23 Oct 2026 15:25:07 +0000
ROA not before:           Fri 23 Oct 2026 15:20:07 +0000
ROA not after:            Fri 22 Oct 2027 15:25:07 +0000
asID:                     269358
IP address blocks:        45.185.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl
                          rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 19:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:63:22:9d:85:c6:d4:5e:42:85:e2:2b:0f:2f:35:68:14:e3:30:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
        Validity
            Not Before: Oct 23 15:20:07 2026 GMT
            Not After : Oct 22 15:25:07 2027 GMT
        Subject: CN=2382FA9ACBED79A43A66D56F33583EC2AD3E8E44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:13:8d:5a:8f:95:b2:27:26:26:d8:74:8e:70:
                    bf:90:23:d5:04:21:28:2d:3f:17:eb:67:df:d3:02:
                    23:a8:95:06:bc:06:b2:4f:a5:38:21:a5:f0:00:ca:
                    06:09:4c:c4:d4:2b:2b:91:09:d7:d7:8b:0c:00:a1:
                    56:e9:2a:73:6a:f9:98:28:32:a3:9d:22:f3:99:a1:
                    76:53:a1:b1:eb:d3:b5:6d:ef:0f:f2:2c:75:6f:40:
                    1c:14:58:ae:2e:20:c0:a1:e7:03:a0:92:9c:58:38:
                    ec:a1:7f:dc:1a:72:97:00:19:71:2d:a2:aa:6f:01:
                    2e:6f:6b:8d:a7:55:38:ba:66:94:ae:88:3e:0a:cc:
                    90:aa:12:a3:70:cd:0a:31:69:87:ca:f2:26:df:53:
                    81:bc:4e:79:b7:f8:75:51:d8:74:91:f9:4f:cf:3c:
                    53:07:84:fa:43:60:b7:a8:70:5b:95:02:06:ef:bc:
                    77:eb:13:18:15:53:d4:c4:e4:e8:f1:1d:b5:8b:4c:
                    cd:04:a8:b8:a9:02:26:29:46:3a:6d:62:3a:77:6d:
                    09:34:3d:0c:14:92:8c:16:99:56:18:c7:42:cb:bd:
                    ec:37:83:e0:46:a0:08:c5:9d:f1:25:4e:71:b1:18:
                    e5:00:9e:b8:a3:1a:c7:3d:e7:de:1e:9a:18:74:ef:
                    f3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:82:FA:9A:CB:ED:79:A4:3A:66:D5:6F:33:58:3E:C2:AD:3E:8E:44
            X509v3 Authority Key Identifier:
                keyid:3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/34352e3138352e34382e302f32322d3234203d3e20323639333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:e6:46:11:72:33:ff:35:92:e6:1a:ed:f2:3c:d6:72:a2:80:
         51:8f:ed:90:62:78:90:87:d8:ac:84:2a:26:13:fd:0c:08:e3:
         82:54:26:fa:d5:bc:d7:53:65:38:1e:9c:e3:cf:07:5b:c2:9c:
         3e:91:82:dc:35:d3:18:2c:43:4c:b9:6f:98:0a:6d:93:5d:79:
         f9:5a:4b:a7:b2:0a:b8:32:95:9d:c2:ac:f6:47:86:c3:fe:fc:
         41:cc:e5:11:8d:52:7c:4d:20:d0:53:66:56:01:df:c7:46:db:
         ee:4b:08:74:cc:2f:45:51:21:e9:4f:27:b0:85:af:ee:b3:4f:
         21:78:fc:4b:0c:40:01:83:2e:49:75:0e:24:f4:c6:5c:b4:08:
         fa:22:5b:30:49:50:29:e6:97:c6:bf:c1:9f:c6:a3:23:a1:29:
         ca:83:6d:b9:d3:c8:1e:e9:99:9a:a0:4a:f3:bc:0b:3f:bb:ad:
         c7:b0:37:e2:73:67:9f:66:9e:7f:59:b3:b3:6c:8d:35:32:4a:
         70:cc:ca:8d:5a:35:6c:f6:aa:27:ff:9c:43:4f:f4:83:d4:cb:
         19:9f:f3:86:08:dc:b7:61:de:15:49:18:f3:e8:dd:da:95:46:
         f5:29:19:31:d6:e9:23:7f:28:ea:60:b4:fc:f0:cc:d1:38:60:
         ef:fa:5f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 03:26:29 2026 by rpki-client