Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/34352e3138322e3234382e302f32322d3332203d3e20323639323435.roa
File:                     34352e3138322e3234382e302f32322d3332203d3e20323639323435.roa (raw, json)
Hash identifier:          uUfKYD3DmH4ZJkMCPgvfZ4TPG/ypI9A1J7Lx1IYgs5Y=
Subject key identifier:   BC:0C:03:63:0E:9C:64:27:A4:E4:4C:43:F7:B2:BC:E4:95:03:66:79
Certificate issuer:       /CN=FDD143F62E397A87EC22FC239E7DA2435AD80D9E
Certificate serial:       12CFCDDBF3276F34C1EDEF5D9F059F7F9D456A05
Authority key identifier: FD:D1:43:F6:2E:39:7A:87:EC:22:FC:23:9E:7D:A2:43:5A:D8:0D:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/34352e3138322e3234382e302f32322d3332203d3e20323639323435.roa
Signing time:             Thu 26 Mar 2026 19:16:09 +0000
ROA not before:           Thu 26 Mar 2026 19:11:09 +0000
ROA not after:            Thu 25 Mar 2027 19:16:09 +0000
asID:                     269245
IP address blocks:        45.182.248.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.crl
                          rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 20:36:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:cf:cd:db:f3:27:6f:34:c1:ed:ef:5d:9f:05:9f:7f:9d:45:6a:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDD143F62E397A87EC22FC239E7DA2435AD80D9E
        Validity
            Not Before: Mar 26 19:11:09 2026 GMT
            Not After : Mar 25 19:16:09 2027 GMT
        Subject: CN=BC0C03630E9C6427A4E44C43F7B2BCE495036679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ce:44:d8:ad:55:63:fd:3f:37:67:81:0e:5f:
                    70:ae:f2:e8:a3:33:dd:96:75:89:77:00:94:f9:a5:
                    04:bb:06:38:96:a9:39:20:36:fa:cd:20:54:2b:3f:
                    8c:85:bb:26:94:7f:5c:de:f6:47:e0:7f:ec:1d:94:
                    c3:b6:42:2f:3b:67:62:a0:e7:8d:32:e0:65:25:3d:
                    92:0f:e9:0b:ed:6e:2c:dc:b0:f0:d6:87:4c:2f:d4:
                    80:71:8f:8c:fd:8a:95:1d:c4:a4:71:5a:be:c9:14:
                    88:c9:cb:28:45:cb:bf:88:8e:6b:2e:08:d5:fe:ac:
                    b8:d2:a7:2a:ff:04:d7:ad:35:56:09:a7:49:53:dc:
                    78:c4:d1:2f:7b:bf:29:5d:05:2b:f9:0b:c0:2d:07:
                    cf:d4:30:9b:52:56:15:70:88:2b:30:d7:46:3d:5d:
                    15:a5:ad:04:d7:83:16:d9:10:0f:5a:ee:72:c0:0c:
                    92:75:ff:99:e8:68:1a:5a:ad:07:40:9a:d6:01:4f:
                    b8:80:9f:6e:26:8f:e1:ea:b9:63:9d:33:b4:ac:fd:
                    c0:83:c0:7e:8a:2b:ef:2d:18:3f:5f:86:f1:c7:62:
                    b0:75:95:67:78:75:18:9b:44:e6:1b:25:6f:33:b5:
                    47:c4:d2:48:bf:83:68:24:bd:da:45:ad:25:d7:d5:
                    46:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:0C:03:63:0E:9C:64:27:A4:E4:4C:43:F7:B2:BC:E4:95:03:66:79
            X509v3 Authority Key Identifier:
                keyid:FD:D1:43:F6:2E:39:7A:87:EC:22:FC:23:9E:7D:A2:43:5A:D8:0D:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/34352e3138322e3234382e302f32322d3332203d3e20323639323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:1c:b6:c5:98:80:06:43:ef:57:10:0b:2e:15:97:28:1c:0d:
         61:1e:b9:e5:13:60:87:4b:9f:53:f6:04:d4:80:57:c3:9e:81:
         63:5d:e1:b1:39:36:d2:89:ca:c1:85:41:2e:1c:52:27:5f:cc:
         47:4e:af:f4:71:02:d1:9b:04:7a:21:3b:11:17:5e:0d:31:69:
         86:e4:23:83:32:69:38:39:52:64:10:44:28:1d:cd:4b:e1:5b:
         3e:34:dc:5a:20:e9:51:60:35:9c:02:35:f8:d5:b5:4c:da:74:
         35:58:cb:f2:c3:82:79:05:58:ed:c8:71:69:92:57:80:d1:ac:
         d5:77:08:85:92:ca:ba:05:47:5e:2e:b5:86:79:a0:c1:6e:01:
         5d:e4:45:28:3d:22:d0:20:71:c1:d5:79:0f:7e:c8:bd:4d:89:
         1b:49:71:81:5c:96:2b:e9:17:bf:82:a4:ac:6c:b1:2f:68:05:
         df:15:32:20:b9:d3:ff:2e:83:d0:d2:34:38:65:22:e3:67:2b:
         4c:a0:99:64:51:2f:c2:73:a7:f7:60:89:11:e3:41:8a:86:49:
         b8:a8:9a:88:a2:f4:da:89:f7:a4:0f:63:60:79:92:fc:59:c7:
         01:76:7d:86:85:d0:fc:1e:24:25:5c:0f:53:84:f7:26:10:8a:
         ef:92:8e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:12:18 2026 by rpki-client