Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/34352e3138362e3138382e302f32322d3234203d3e20323639343334.roa
File:                     34352e3138362e3138382e302f32322d3234203d3e20323639343334.roa (raw, json)
Hash identifier:          50PtAYhV+iUhbUUDuKAlt1cV6rgXN4L4fC6IcBz32GQ=
Subject key identifier:   BF:EE:68:E4:A2:40:F1:D5:AE:BA:62:1F:0F:49:B0:D9:65:A9:E1:C5
Certificate issuer:       /CN=F3AD919FCCA00BC383D6D6398B96B1D77AAFB476
Certificate serial:       74EBC74C4B642F03680EA83E6A51932DD5F4DB62
Authority key identifier: F3:AD:91:9F:CC:A0:0B:C3:83:D6:D6:39:8B:96:B1:D7:7A:AF:B4:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/34352e3138362e3138382e302f32322d3234203d3e20323639343334.roa
Signing time:             Thu 16 Jul 2026 19:54:07 +0000
ROA not before:           Thu 16 Jul 2026 19:49:07 +0000
ROA not after:            Thu 15 Jul 2027 19:54:07 +0000
asID:                     269434
IP address blocks:        45.186.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.crl
                          rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 13:54:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:eb:c7:4c:4b:64:2f:03:68:0e:a8:3e:6a:51:93:2d:d5:f4:db:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3AD919FCCA00BC383D6D6398B96B1D77AAFB476
        Validity
            Not Before: Jul 16 19:49:07 2026 GMT
            Not After : Jul 15 19:54:07 2027 GMT
        Subject: CN=BFEE68E4A240F1D5AEBA621F0F49B0D965A9E1C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:96:58:fb:fa:27:3a:c9:11:25:e5:f9:f3:8c:
                    4a:d3:06:16:c0:c8:96:3a:dd:53:1d:0a:c4:72:34:
                    3c:13:2a:35:e3:68:dc:0d:17:44:57:43:00:fd:3e:
                    25:8d:ac:23:ed:0b:9d:f3:65:d3:4c:2d:44:8d:94:
                    eb:22:ba:21:9a:15:f5:73:01:ad:06:0c:4a:d9:e5:
                    f8:5a:9a:04:6a:93:a3:ba:4f:bf:6d:96:eb:74:cc:
                    4e:7e:d5:ce:2d:2f:9f:89:9a:e5:78:01:d1:92:d1:
                    55:28:60:46:86:ed:c6:7b:4b:dd:e5:93:37:ff:50:
                    53:88:ab:17:59:e3:00:57:a2:91:5a:97:25:5e:ba:
                    a6:b9:a6:b7:13:aa:73:ec:ab:79:ad:3a:63:9f:6e:
                    26:4e:95:a4:5c:79:76:96:c2:3c:8f:3e:7e:f3:0d:
                    e4:4a:77:3e:16:13:27:35:ef:a3:1a:2f:d8:01:10:
                    fe:ce:e1:e4:c2:8c:bc:f4:96:24:72:e5:16:d0:3c:
                    97:33:93:54:40:f7:9d:21:95:2d:45:46:b3:10:ad:
                    e2:a2:b5:1c:fc:9a:99:ee:1c:bc:8f:5b:f9:c5:c8:
                    f2:8f:10:41:bb:0c:82:bd:2e:f0:5e:7b:68:2c:32:
                    ce:41:bc:bd:e7:6c:00:76:4c:30:fb:21:98:1d:60:
                    ed:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:EE:68:E4:A2:40:F1:D5:AE:BA:62:1F:0F:49:B0:D9:65:A9:E1:C5
            X509v3 Authority Key Identifier:
                keyid:F3:AD:91:9F:CC:A0:0B:C3:83:D6:D6:39:8B:96:B1:D7:7A:AF:B4:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/34352e3138362e3138382e302f32322d3234203d3e20323639343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cf:31:5d:fd:2e:67:2f:3c:ca:4e:d9:d7:be:0c:85:c3:3a:44:
         e3:04:96:70:04:04:cb:44:db:bb:23:55:86:47:a1:f8:07:dc:
         2d:b9:f7:cc:31:ec:50:e6:b5:d6:f7:27:33:2e:e3:a9:6c:3d:
         47:fe:e5:5e:18:ae:de:e0:f2:86:42:6b:a1:6c:69:e7:f9:2f:
         02:ef:38:f0:2e:36:21:4f:67:eb:d7:7f:c0:62:18:bd:3c:76:
         05:92:4d:82:88:3b:d5:a3:b5:00:8f:c0:40:dc:07:a3:22:33:
         43:65:ae:9b:38:36:b9:ad:4a:e8:78:f3:35:b4:e3:df:b7:64:
         2e:d6:ee:ee:b7:c2:de:14:e4:6b:63:bf:4d:c0:89:5b:6d:c2:
         de:24:e4:01:ee:db:b2:81:6f:8c:7a:de:24:f1:61:75:74:fa:
         f1:37:dc:1d:89:3b:1a:7f:5c:9a:f2:78:29:81:66:fc:ce:f8:
         a1:be:a3:7d:07:f7:0e:d7:7f:b1:a3:11:2f:9e:c8:66:04:2e:
         34:80:78:cf:28:0d:3e:aa:fb:c3:b4:9e:8e:88:b0:ec:c2:78:
         18:3c:af:87:23:2d:3f:7a:49:41:68:a2:da:27:c3:e7:74:d2:
         2a:9a:71:0b:a0:22:b1:0b:da:6e:a8:17:be:ad:bc:7e:5a:b5:
         e0:b4:1d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:45:50 2026 by rpki-client