Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/34352e3138322e35322e302f32322d3232203d3e20323639323835.roa
File:                     34352e3138322e35322e302f32322d3232203d3e20323639323835.roa (raw, json)
Hash identifier:          puZyp6YGZYSBjt/M3N560MkgzbWydkHN2LvCtoBLDG0=
Subject key identifier:   3E:E3:E8:44:39:79:21:7D:F6:52:DA:C8:C5:23:8F:C0:E5:D6:AE:F5
Certificate issuer:       /CN=3D4867F11A1D652682FA95ED911B20D81139853D
Certificate serial:       7F1EFC3F5A49302AF4975B4326E8ADB463F232DA
Authority key identifier: 3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/34352e3138322e35322e302f32322d3232203d3e20323639323835.roa
Signing time:             Wed 01 Jul 2026 17:02:44 +0000
ROA not before:           Wed 01 Jul 2026 16:57:44 +0000
ROA not after:            Wed 30 Jun 2027 17:02:44 +0000
asID:                     269285
IP address blocks:        45.182.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl
                          rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 26 Jul 2026 02:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:1e:fc:3f:5a:49:30:2a:f4:97:5b:43:26:e8:ad:b4:63:f2:32:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D4867F11A1D652682FA95ED911B20D81139853D
        Validity
            Not Before: Jul  1 16:57:44 2026 GMT
            Not After : Jun 30 17:02:44 2027 GMT
        Subject: CN=3EE3E8443979217DF652DAC8C5238FC0E5D6AEF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e9:fb:6f:80:90:8e:ce:65:74:5d:d1:ea:99:
                    be:9a:ca:20:09:66:cf:98:17:4d:27:48:4d:72:dd:
                    d7:25:40:76:62:6f:49:91:b7:63:f5:6f:b4:20:cd:
                    1e:ec:11:29:c1:ad:46:ce:e9:2c:75:6e:3b:3c:27:
                    6d:6a:48:4b:24:dc:d6:ce:c2:d7:d2:75:11:d4:1e:
                    59:c3:cf:70:c3:ed:52:f0:90:09:82:2d:cf:6d:da:
                    d0:31:15:28:77:96:f1:a3:13:67:1c:ae:6e:21:a7:
                    00:4a:83:dc:77:9d:48:9a:03:e6:1b:e7:c5:df:a0:
                    0e:95:aa:f3:24:19:e9:79:18:7c:f9:30:ee:a3:4f:
                    20:bb:57:d5:f7:f6:12:6c:b7:95:15:2e:f9:45:44:
                    5e:bb:22:19:54:b0:69:ad:7d:a2:cc:72:ed:64:be:
                    1e:e5:74:cd:21:80:60:67:f7:16:50:8b:c2:c5:b5:
                    06:bf:5f:ec:2b:f7:28:c6:d1:7c:94:90:8e:42:89:
                    04:81:0b:77:f8:0f:fa:30:9a:92:04:e0:75:c8:d5:
                    c1:e0:0e:8e:cf:b6:0f:69:ec:5a:9f:5a:06:ba:13:
                    c6:97:f5:07:01:62:d3:c8:67:47:22:4c:0d:43:bd:
                    fc:02:33:7c:24:f0:8b:b6:e3:2f:22:fc:2f:ee:1e:
                    76:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:E3:E8:44:39:79:21:7D:F6:52:DA:C8:C5:23:8F:C0:E5:D6:AE:F5
            X509v3 Authority Key Identifier:
                keyid:3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/34352e3138322e35322e302f32322d3232203d3e20323639323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:21:68:de:6f:5e:2a:f8:4b:9c:7d:84:07:a6:3f:03:80:24:
         92:de:bd:8d:66:33:1a:e0:09:d3:0e:15:bd:fb:e0:90:7a:35:
         94:17:ea:9e:bd:c5:78:52:cd:59:5b:d9:e6:7d:9f:19:06:e2:
         f9:fa:56:6b:63:d1:bc:ae:ec:0f:00:6b:ce:3c:5a:38:d0:22:
         d7:3e:3a:c0:5d:9c:28:e6:ba:c3:bf:94:a8:e7:be:06:47:c4:
         4c:09:99:65:0f:7d:59:77:42:98:9f:41:5d:ee:49:fa:f9:36:
         a7:27:60:57:1b:e9:46:a6:a8:f6:67:7b:5d:2b:ea:0b:aa:10:
         d8:ba:06:8d:7b:01:c6:60:20:2b:c3:c2:74:2d:a8:54:31:d8:
         97:01:ae:34:75:15:24:5d:68:40:fc:9f:f1:b0:36:5c:79:a6:
         15:d6:24:10:da:3e:ea:1a:3a:0a:1c:72:c9:b0:da:2d:ea:89:
         ed:09:f0:1e:f3:e6:af:bc:e0:e3:3c:f4:5c:33:70:97:99:8d:
         54:37:71:e5:c8:e2:18:f2:b1:3b:d9:b8:2d:63:7e:65:f6:77:
         7e:11:90:37:25:b3:14:14:ed:99:3e:84:78:52:82:51:fb:3a:
         a5:6a:2a:91:6a:00:17:56:5b:03:cb:3d:0e:a2:49:07:be:70:
         ce:94:43:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:25:48 2026 by rpki-client