Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4zeKsdUXbymv9AsnTETiKAxRqCbXcHtptdW5Bf83wm34/0/34352e3136322e3134342e302f32322d3332203d3e20323638353331.roa
File:                     34352e3136322e3134342e302f32322d3332203d3e20323638353331.roa (raw, json)
Hash identifier:          H2OsEVv4KIfar4HFFdIJ9PYlTihigEWHxfUjhGYj7nE=
Subject key identifier:   E3:40:78:81:FC:23:B1:98:FD:01:07:74:A8:7C:6F:18:7A:50:26:6B
Certificate issuer:       /CN=E3FDD968BE1362BE6AB4C5E8CEF82802E604C205
Certificate serial:       7A6D19F878B76E00EF42C4EAB1F52B3C95FD2782
Authority key identifier: E3:FD:D9:68:BE:13:62:BE:6A:B4:C5:E8:CE:F8:28:02:E6:04:C2:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3FDD968BE1362BE6AB4C5E8CEF82802E604C205.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4zeKsdUXbymv9AsnTETiKAxRqCbXcHtptdW5Bf83wm34/0/34352e3136322e3134342e302f32322d3332203d3e20323638353331.roa
Signing time:             Fri 10 Jul 2026 16:00:56 +0000
ROA not before:           Fri 10 Jul 2026 15:55:56 +0000
ROA not after:            Fri 09 Jul 2027 16:00:56 +0000
asID:                     268531
IP address blocks:        45.162.144.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4zeKsdUXbymv9AsnTETiKAxRqCbXcHtptdW5Bf83wm34/0/E3FDD968BE1362BE6AB4C5E8CEF82802E604C205.crl
                          rsync://rpki-repo.registro.br/repo/4zeKsdUXbymv9AsnTETiKAxRqCbXcHtptdW5Bf83wm34/0/E3FDD968BE1362BE6AB4C5E8CEF82802E604C205.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3FDD968BE1362BE6AB4C5E8CEF82802E604C205.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:6d:19:f8:78:b7:6e:00:ef:42:c4:ea:b1:f5:2b:3c:95:fd:27:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3FDD968BE1362BE6AB4C5E8CEF82802E604C205
        Validity
            Not Before: Jul 10 15:55:56 2026 GMT
            Not After : Jul  9 16:00:56 2027 GMT
        Subject: CN=E3407881FC23B198FD010774A87C6F187A50266B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:60:49:aa:ba:89:60:8b:b4:95:87:48:cf:47:
                    af:cf:c2:cb:c1:85:cb:5f:80:5c:68:c5:11:ab:33:
                    b7:73:6b:ab:6f:44:bd:f5:80:ba:0c:cb:59:8b:26:
                    66:b8:a3:05:8c:68:b1:d8:51:01:03:66:0c:bd:e8:
                    78:af:c2:2b:e0:31:b9:86:4e:56:44:9e:59:0d:be:
                    5a:6b:bf:d4:ae:6d:0e:59:d0:0d:b7:a6:86:6c:98:
                    15:82:66:27:eb:3d:69:b4:25:26:f2:55:fa:ed:53:
                    8c:ea:02:9c:17:61:54:28:60:ef:81:da:ce:92:45:
                    08:ac:0d:12:bd:88:84:af:a3:95:24:59:5b:45:7f:
                    4e:5f:b5:5b:2c:b1:06:d4:08:69:38:fb:b5:43:92:
                    2e:17:33:e7:4d:f0:9a:55:fd:32:77:fb:5e:eb:3f:
                    a4:c2:c7:7a:63:ee:7a:89:66:3c:5c:8a:03:48:fd:
                    c0:fb:b2:eb:4e:d4:3e:01:b0:37:98:66:b8:e7:22:
                    ab:b0:cc:bc:7d:17:21:f8:a9:32:87:42:1a:8c:03:
                    20:ee:3b:d8:53:9f:86:c3:d2:67:e8:de:33:f7:99:
                    6f:26:b0:32:92:1c:32:c7:41:0e:33:80:73:20:8b:
                    0c:f0:06:ec:5b:61:69:cf:29:04:be:7e:68:dc:0d:
                    50:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:40:78:81:FC:23:B1:98:FD:01:07:74:A8:7C:6F:18:7A:50:26:6B
            X509v3 Authority Key Identifier:
                keyid:E3:FD:D9:68:BE:13:62:BE:6A:B4:C5:E8:CE:F8:28:02:E6:04:C2:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4zeKsdUXbymv9AsnTETiKAxRqCbXcHtptdW5Bf83wm34/0/E3FDD968BE1362BE6AB4C5E8CEF82802E604C205.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3FDD968BE1362BE6AB4C5E8CEF82802E604C205.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4zeKsdUXbymv9AsnTETiKAxRqCbXcHtptdW5Bf83wm34/0/34352e3136322e3134342e302f32322d3332203d3e20323638353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:4e:2f:e2:03:93:7a:35:c2:08:a1:d7:80:bb:84:9c:92:c2:
         73:60:64:e6:b6:8c:7f:ac:00:74:a1:bb:4f:dd:08:7c:f1:12:
         7c:25:a5:2d:2a:af:a4:3a:ea:95:42:b7:13:5c:7a:3f:9d:9e:
         0c:7c:84:b6:96:e6:6d:ed:b1:df:ec:d8:44:15:4d:e2:91:94:
         92:64:f6:b2:3c:51:bb:79:20:f2:ff:8a:a6:9b:e4:62:7f:63:
         a0:2f:79:8a:eb:a4:3e:ed:2f:b9:5c:e2:3e:9f:f4:7d:36:52:
         8d:22:0d:73:66:d4:30:61:88:2c:c0:e7:62:e3:67:4d:f7:4e:
         1e:e7:fe:df:fb:9b:d7:bb:63:da:b5:48:b5:10:84:c6:5d:22:
         2a:3c:6f:39:32:47:06:b0:ac:ba:ca:84:c0:76:a9:d9:78:36:
         7d:88:25:da:62:fe:cc:f1:7e:eb:73:5c:2c:93:76:44:f9:db:
         53:7b:b3:f2:34:71:78:70:df:9d:c2:6e:ad:08:b7:e5:91:d7:
         b0:8c:44:a2:65:25:20:6b:bf:7f:3e:7f:5a:d5:08:78:d7:37:
         1b:c8:25:91:fc:bd:d6:a5:81:87:19:60:4e:5a:cb:bc:be:06:
         70:d3:5f:e8:e2:ac:80:12:07:b8:f0:46:81:ea:f7:f6:f1:6a:
         b1:0b:e9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:36:08 2026 by rpki-client