Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4vudqjw7dHsEsckGb6JjqXtKZp483DgxXQzvRo8mEoBq/0/34352e3138312e35322e302f32342d3332203d3e20323639313732.roa
File:                     34352e3138312e35322e302f32342d3332203d3e20323639313732.roa (raw, json)
Hash identifier:          +siBGPmkEQX1UMYxXkPKue3OhJjmyDBstVM5oiUIhNw=
Subject key identifier:   D5:7B:BD:A4:45:A2:93:1B:B3:1F:4A:51:F9:8E:12:05:95:FF:6D:46
Certificate issuer:       /CN=A1ACAB9FCA6EF588548AD2B6BDF8A61AC75940EE
Certificate serial:       0DBFA1D646E4AD6A3CFABBF2576AD0580358C5EA
Authority key identifier: A1:AC:AB:9F:CA:6E:F5:88:54:8A:D2:B6:BD:F8:A6:1A:C7:59:40:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1ACAB9FCA6EF588548AD2B6BDF8A61AC75940EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4vudqjw7dHsEsckGb6JjqXtKZp483DgxXQzvRo8mEoBq/0/34352e3138312e35322e302f32342d3332203d3e20323639313732.roa
Signing time:             Wed 29 Apr 2026 12:59:00 +0000
ROA not before:           Wed 29 Apr 2026 12:54:00 +0000
ROA not after:            Wed 28 Apr 2027 12:59:00 +0000
asID:                     269172
IP address blocks:        45.181.52.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4vudqjw7dHsEsckGb6JjqXtKZp483DgxXQzvRo8mEoBq/0/A1ACAB9FCA6EF588548AD2B6BDF8A61AC75940EE.crl
                          rsync://rpki-repo.registro.br/repo/4vudqjw7dHsEsckGb6JjqXtKZp483DgxXQzvRo8mEoBq/0/A1ACAB9FCA6EF588548AD2B6BDF8A61AC75940EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1ACAB9FCA6EF588548AD2B6BDF8A61AC75940EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:51:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:bf:a1:d6:46:e4:ad:6a:3c:fa:bb:f2:57:6a:d0:58:03:58:c5:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1ACAB9FCA6EF588548AD2B6BDF8A61AC75940EE
        Validity
            Not Before: Apr 29 12:54:00 2026 GMT
            Not After : Apr 28 12:59:00 2027 GMT
        Subject: CN=D57BBDA445A2931BB31F4A51F98E120595FF6D46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c7:91:61:67:9f:a1:a7:b7:df:34:7d:68:fd:
                    78:77:49:5c:cb:c0:7e:6e:92:a3:c3:45:c3:18:0a:
                    a3:ea:ba:35:78:d9:35:83:6b:06:60:cf:43:f9:eb:
                    3e:cb:9a:a8:7d:a4:d4:1a:5a:49:ea:bf:46:08:6a:
                    f4:11:64:e7:02:1e:53:47:ae:70:dd:4d:9e:63:7b:
                    83:8f:ad:e0:f4:74:b4:1b:e6:6c:db:7b:7d:40:a1:
                    ac:b4:5b:b0:00:6d:32:76:aa:af:63:a9:4f:89:d6:
                    9c:6b:03:ac:46:e1:2e:a5:dc:36:1c:18:42:a4:3c:
                    b8:c5:4d:e9:4b:a7:c3:55:88:01:d4:04:7f:b5:99:
                    62:35:b7:0f:b8:5e:b4:d0:c5:c3:02:c2:29:6e:15:
                    3b:de:5c:08:93:11:07:a7:84:9a:75:f1:43:e8:36:
                    75:cb:0a:a7:3e:e4:5e:d7:54:5f:2f:38:91:b3:d8:
                    3d:94:ba:22:f5:ac:31:88:78:74:7b:25:cf:e5:ca:
                    5d:08:4d:50:ac:71:da:c5:5c:42:b4:2c:55:5d:15:
                    48:53:c5:86:40:05:5a:76:ab:36:d5:4c:4c:58:7e:
                    59:04:b2:3a:6f:2d:a4:cc:ff:90:9c:dc:bf:c6:01:
                    4c:89:47:64:d9:dc:9c:43:09:ee:76:b3:33:49:97:
                    f1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:7B:BD:A4:45:A2:93:1B:B3:1F:4A:51:F9:8E:12:05:95:FF:6D:46
            X509v3 Authority Key Identifier:
                keyid:A1:AC:AB:9F:CA:6E:F5:88:54:8A:D2:B6:BD:F8:A6:1A:C7:59:40:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4vudqjw7dHsEsckGb6JjqXtKZp483DgxXQzvRo8mEoBq/0/A1ACAB9FCA6EF588548AD2B6BDF8A61AC75940EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1ACAB9FCA6EF588548AD2B6BDF8A61AC75940EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4vudqjw7dHsEsckGb6JjqXtKZp483DgxXQzvRo8mEoBq/0/34352e3138312e35322e302f32342d3332203d3e20323639313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:e8:fb:5c:63:98:29:ac:02:97:ff:e5:ea:36:c3:7a:9d:89:
         5a:6c:49:ef:f8:09:ea:b8:e9:3b:57:7a:46:e5:c4:52:09:5b:
         94:12:78:27:a7:1a:ea:db:91:7c:63:46:41:23:d6:2e:ba:d0:
         63:d5:8b:63:e6:e3:29:3e:9e:27:46:8e:34:60:87:72:78:fe:
         c9:59:b3:e9:17:96:2c:76:06:60:32:41:b0:95:69:f4:3a:ff:
         f9:c2:6e:b1:92:43:b3:1d:d6:77:e2:4b:b9:dc:70:13:0e:85:
         94:04:53:2a:8f:18:35:4c:3b:06:37:44:25:fa:d6:14:f2:f0:
         25:1a:96:60:73:1b:e0:6b:ed:c9:28:2f:9c:29:a3:8e:81:db:
         f2:15:6e:dc:19:18:6d:31:c0:0d:9f:63:c7:5b:0c:42:2f:b5:
         f6:a3:c5:2a:d0:48:59:40:fd:77:91:3f:3c:9d:97:33:df:dc:
         ec:c5:d2:f9:f4:05:1e:0f:b5:6d:2f:45:43:3d:ce:9d:9b:6c:
         58:a7:d2:99:fb:34:5a:58:6f:c7:2a:f4:22:09:47:8a:2d:19:
         b4:d6:bb:d5:71:43:4e:64:a7:4c:ca:d6:73:0b:f3:d4:c6:d8:
         ea:3b:c7:df:4e:ce:8d:8b:8a:60:a9:1e:da:5b:7b:ce:b4:e4:
         16:03:06:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:04:42 2026 by rpki-client