Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/2/34352e3138352e342e302f32332d3233203d3e20323639333535.roa
File:                     34352e3138352e342e302f32332d3233203d3e20323639333535.roa (raw, json)
Hash identifier:          3qBxeDTUr2ZSo5DUreC66j498LULt38G8Ym6nr5txeM=
Subject key identifier:   44:6B:23:23:1E:CD:34:48:56:08:1D:49:32:B0:AA:0C:94:F3:A0:9A
Certificate issuer:       /CN=7191F9F31FCAE6ED1417B34857F66B4B522797BD
Certificate serial:       5CD08ED171DCC38CEF305F1A3F11ED1AADBF838D
Authority key identifier: 71:91:F9:F3:1F:CA:E6:ED:14:17:B3:48:57:F6:6B:4B:52:27:97:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7191F9F31FCAE6ED1417B34857F66B4B522797BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/2/34352e3138352e342e302f32332d3233203d3e20323639333535.roa
Signing time:             Mon 20 Jul 2026 22:58:10 +0000
ROA not before:           Mon 20 Jul 2026 22:53:10 +0000
ROA not after:            Mon 19 Jul 2027 22:58:10 +0000
asID:                     269355
IP address blocks:        45.185.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/2/7191F9F31FCAE6ED1417B34857F66B4B522797BD.crl
                          rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/2/7191F9F31FCAE6ED1417B34857F66B4B522797BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7191F9F31FCAE6ED1417B34857F66B4B522797BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 18:23:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:d0:8e:d1:71:dc:c3:8c:ef:30:5f:1a:3f:11:ed:1a:ad:bf:83:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7191F9F31FCAE6ED1417B34857F66B4B522797BD
        Validity
            Not Before: Jul 20 22:53:10 2026 GMT
            Not After : Jul 19 22:58:10 2027 GMT
        Subject: CN=446B23231ECD344856081D4932B0AA0C94F3A09A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3a:88:37:43:90:6a:59:27:19:e1:93:02:d6:
                    63:ba:c0:84:8c:d9:f8:a3:02:6a:fe:30:89:ac:a8:
                    f7:d5:b9:13:7d:f1:b0:70:fb:b5:c7:53:6a:32:e2:
                    c0:18:0e:5d:55:d3:37:c4:ce:09:64:1e:af:90:97:
                    20:1e:cc:cd:1a:e7:a4:81:80:5b:1e:6f:14:80:64:
                    bc:02:66:b0:47:a2:09:19:62:94:5e:59:82:62:a3:
                    41:96:24:4a:90:7d:19:e0:57:c6:bb:3c:9d:14:bb:
                    ec:a9:18:a2:0f:ba:18:1f:a1:38:06:69:ca:e7:e9:
                    78:2a:ab:dc:bc:cd:b7:ca:4e:4f:9b:7f:3e:70:a7:
                    02:f8:69:c0:ae:91:f3:ee:8e:d9:6d:d5:91:53:8d:
                    c3:83:5b:7f:49:ff:83:e5:37:cf:e1:eb:2d:1d:f3:
                    df:54:3b:9e:c7:7a:6e:82:46:d7:b5:18:24:3d:5a:
                    49:1c:fd:20:43:3c:ac:e8:62:40:23:3a:b0:36:dc:
                    55:e8:e3:29:a1:b1:71:d7:65:c4:f0:e0:8a:6d:0e:
                    ce:0b:70:9f:51:18:5e:2e:d2:d0:05:ab:e0:c7:bb:
                    8d:d2:b5:03:d6:5e:01:01:f4:4d:08:c9:81:53:0f:
                    b6:e5:a8:1a:63:d8:e4:47:f5:07:ed:f3:63:65:de:
                    f0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:6B:23:23:1E:CD:34:48:56:08:1D:49:32:B0:AA:0C:94:F3:A0:9A
            X509v3 Authority Key Identifier:
                keyid:71:91:F9:F3:1F:CA:E6:ED:14:17:B3:48:57:F6:6B:4B:52:27:97:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/2/7191F9F31FCAE6ED1417B34857F66B4B522797BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7191F9F31FCAE6ED1417B34857F66B4B522797BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/2/34352e3138352e342e302f32332d3233203d3e20323639333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:8d:b7:dd:51:2b:35:dd:95:1e:f3:96:d7:c0:da:5f:6f:68:
         d1:34:70:1d:50:57:ee:c7:15:38:03:92:8a:27:0e:87:ef:3b:
         c3:db:36:6c:1c:e0:10:d3:6b:a9:d5:44:8e:ba:48:4c:07:4b:
         a3:34:4b:f0:c9:51:40:f6:ba:f8:4c:e9:41:08:30:08:16:76:
         16:8e:33:0b:be:cc:ad:58:76:c1:ca:5d:e8:b9:c4:31:a4:b2:
         a8:1a:c1:73:a9:a2:be:b1:55:0f:10:dc:f5:1c:c5:09:7e:0c:
         4a:ab:be:7c:e0:8f:66:7e:3d:b5:c4:88:15:b0:e5:23:84:ee:
         5d:b4:0c:ef:71:d8:05:7a:87:89:9c:5e:50:8b:50:7d:96:c0:
         a6:7b:db:73:34:6c:cd:88:ed:19:0f:db:dc:34:e3:32:d0:aa:
         5a:96:48:9e:fd:98:15:47:65:91:63:52:8d:78:be:05:c3:f4:
         15:8d:4b:1e:2d:f1:7e:b3:f6:bb:d7:a0:fa:b0:ba:81:a2:44:
         07:93:e6:91:c2:b9:b7:85:ae:6c:01:1f:ae:40:03:c1:95:a5:
         92:a9:21:4a:96:cf:ff:da:9d:04:e4:da:28:18:82:b6:ff:c2:
         13:36:94:35:cc:11:4c:5b:29:ce:9a:4f:bf:d1:20:e7:87:7e:
         11:91:ba:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:09:22 2026 by rpki-client