Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/34352e3233352e3232302e302f32322d3234203d3e20323638323330.roa
File:                     34352e3233352e3232302e302f32322d3234203d3e20323638323330.roa (raw, json)
Hash identifier:          VgTEKKQ5x6p8Sl6tqGlg1fL84JWHFwkxpp5Kvaa9AxI=
Subject key identifier:   D4:A3:07:F2:84:83:E8:EE:0D:2F:3B:81:F5:45:1C:D6:E0:E5:50:8B
Certificate issuer:       /CN=7F6FA8E3283DF0A70669D93FD9B84155B89C4685
Certificate serial:       3E951148AAA440FF665CAB0953EB72168B7673EA
Authority key identifier: 7F:6F:A8:E3:28:3D:F0:A7:06:69:D9:3F:D9:B8:41:55:B8:9C:46:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F6FA8E3283DF0A70669D93FD9B84155B89C4685.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/34352e3233352e3232302e302f32322d3234203d3e20323638323330.roa
Signing time:             Mon 23 Mar 2026 12:53:54 +0000
ROA not before:           Mon 23 Mar 2026 12:48:54 +0000
ROA not after:            Mon 22 Mar 2027 12:53:54 +0000
asID:                     268230
IP address blocks:        45.235.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/7F6FA8E3283DF0A70669D93FD9B84155B89C4685.crl
                          rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/7F6FA8E3283DF0A70669D93FD9B84155B89C4685.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F6FA8E3283DF0A70669D93FD9B84155B89C4685.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 13:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:95:11:48:aa:a4:40:ff:66:5c:ab:09:53:eb:72:16:8b:76:73:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F6FA8E3283DF0A70669D93FD9B84155B89C4685
        Validity
            Not Before: Mar 23 12:48:54 2026 GMT
            Not After : Mar 22 12:53:54 2027 GMT
        Subject: CN=D4A307F28483E8EE0D2F3B81F5451CD6E0E5508B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:24:02:66:d9:f9:7e:e7:e9:c0:42:29:80:a6:
                    83:87:c0:8e:e0:4c:82:3c:bc:57:a0:13:37:77:90:
                    ea:58:5d:6b:ec:3f:75:d4:bb:c3:e7:82:a7:c1:52:
                    b6:23:bc:04:b0:be:5b:a2:87:a8:42:2a:36:2a:44:
                    11:ca:bd:25:fa:a1:a7:90:d4:4d:b0:34:ac:ac:76:
                    4c:4a:88:03:b7:88:0e:87:1c:51:b2:63:2e:75:e7:
                    93:e3:bc:61:6e:21:10:22:97:35:b6:77:a1:77:2a:
                    6b:f7:9a:39:3f:1f:6f:02:3b:f6:da:93:27:1b:6a:
                    f0:55:f4:44:cd:bc:63:d5:9c:ee:58:89:aa:9f:c5:
                    a1:02:e6:e4:67:05:71:b9:b8:34:72:80:1e:b7:36:
                    92:2c:67:d1:54:26:e5:dd:83:bb:78:9e:b3:d8:81:
                    36:06:d4:27:f4:1a:a6:4e:1e:9e:83:84:07:46:97:
                    30:2a:5d:49:a3:89:fd:93:19:a6:54:49:03:c7:bc:
                    d4:dc:54:d6:fa:9c:fb:c6:7c:b4:ad:6d:c9:da:c0:
                    38:f5:5a:6f:75:45:4d:62:18:99:d1:23:1b:0b:4f:
                    f6:4d:ee:1f:37:f5:4a:8a:5c:dd:d5:45:26:ee:ae:
                    82:6d:40:38:bc:a3:1b:73:98:d8:73:2a:d6:cd:06:
                    bd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A3:07:F2:84:83:E8:EE:0D:2F:3B:81:F5:45:1C:D6:E0:E5:50:8B
            X509v3 Authority Key Identifier:
                keyid:7F:6F:A8:E3:28:3D:F0:A7:06:69:D9:3F:D9:B8:41:55:B8:9C:46:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/7F6FA8E3283DF0A70669D93FD9B84155B89C4685.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F6FA8E3283DF0A70669D93FD9B84155B89C4685.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/34352e3233352e3232302e302f32322d3234203d3e20323638323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:5d:28:0c:93:aa:0e:41:a2:5d:4e:ef:72:97:2a:58:c8:6f:
         31:73:cd:12:ea:c8:44:8e:2e:64:5b:15:fe:17:22:fc:3e:4f:
         20:cc:01:e7:fa:83:94:ff:17:66:ad:98:7a:b2:87:4e:e0:7e:
         eb:a6:c6:ae:a6:65:5b:41:75:19:37:3a:c4:ba:83:58:15:35:
         d3:f3:39:41:6b:fa:d8:b5:d8:78:e8:78:d2:c1:cd:ee:04:a2:
         b3:d5:72:21:8a:4d:60:e6:b3:c7:fc:23:90:cf:a6:97:be:e6:
         0a:da:7e:93:05:52:5b:9e:1b:bf:07:db:71:65:62:4f:04:23:
         66:18:a0:8e:9a:ea:89:61:b0:26:8c:01:e0:75:f4:9f:a3:b8:
         4d:81:7d:76:dc:43:3b:e1:38:b0:e1:08:27:43:87:11:2e:fa:
         90:07:61:be:15:5f:35:49:8a:dd:f2:84:11:47:32:3a:ac:e7:
         1e:28:75:7b:57:5c:98:2d:77:3b:28:0c:d1:2b:7f:86:a3:bf:
         e8:19:53:33:8d:dc:e9:94:3c:00:e9:f8:82:f3:fd:c8:aa:9a:
         81:3d:f0:79:77:f7:90:a2:01:63:2d:0d:3b:91:32:59:19:52:
         31:46:bc:07:ff:b4:e1:ce:f1:be:59:8b:33:78:62:e4:41:d1:
         c0:4a:ca:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:26:22 2026 by rpki-client