Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/34352e3138322e35322e302f32332d3233203d3e20323639323835.roa
File:                     34352e3138322e35322e302f32332d3233203d3e20323639323835.roa (raw, json)
Hash identifier:          EQli3XF2UoNp3nPp41xIQde5xxjV5tnb2ABkEamlz7Q=
Subject key identifier:   09:FA:0B:30:D4:4C:FC:62:02:DC:F7:08:2D:60:7C:1E:48:1D:57:86
Certificate issuer:       /CN=3D4867F11A1D652682FA95ED911B20D81139853D
Certificate serial:       235C052A009968F2D68FC64EDE00E6BE437B17F9
Authority key identifier: 3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/34352e3138322e35322e302f32332d3233203d3e20323639323835.roa
Signing time:             Wed 01 Jul 2026 17:02:44 +0000
ROA not before:           Wed 01 Jul 2026 16:57:44 +0000
ROA not after:            Wed 30 Jun 2027 17:02:44 +0000
asID:                     269285
IP address blocks:        45.182.52.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl
                          rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 26 Jul 2026 02:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:5c:05:2a:00:99:68:f2:d6:8f:c6:4e:de:00:e6:be:43:7b:17:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D4867F11A1D652682FA95ED911B20D81139853D
        Validity
            Not Before: Jul  1 16:57:44 2026 GMT
            Not After : Jun 30 17:02:44 2027 GMT
        Subject: CN=09FA0B30D44CFC6202DCF7082D607C1E481D5786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7b:ec:a3:fa:28:60:b1:45:7f:5c:34:3d:96:
                    9f:0a:88:7e:88:08:69:58:35:48:51:8c:f5:77:ab:
                    fb:6d:20:49:55:47:d9:95:be:d0:c9:c5:74:48:57:
                    28:6b:3a:d8:9d:32:b0:57:18:7d:fa:dd:61:a7:ca:
                    17:f7:65:d0:fb:0b:de:a2:51:e1:d9:9a:d9:8e:b5:
                    67:d3:80:e6:02:94:f4:6d:6e:59:f8:79:59:09:94:
                    ed:41:e6:33:80:f5:6d:7e:a3:45:ea:dd:2d:75:b9:
                    8d:df:10:50:bd:1b:e4:53:64:44:be:87:2c:41:9d:
                    b2:09:f1:c4:06:47:21:bc:65:5b:64:01:09:6e:35:
                    b0:27:c8:d3:2a:eb:2a:95:37:66:f3:c3:97:fe:da:
                    d0:fb:b0:7d:d6:7f:1a:a5:42:59:82:88:4e:4c:f7:
                    6a:9d:aa:f3:88:c8:b5:a8:5d:da:a7:26:3b:25:f1:
                    32:ec:46:27:69:5d:99:25:03:aa:3c:0e:25:23:43:
                    99:a0:82:4f:ae:53:35:8e:9a:00:39:67:da:d4:cc:
                    ac:4f:a2:8c:79:4b:3b:2a:05:2a:04:9a:e2:46:ec:
                    a0:a1:91:eb:57:40:9b:e0:e6:de:8f:0d:5a:0d:2f:
                    98:0e:a3:ca:20:52:9c:7a:6e:a9:68:a9:02:00:41:
                    55:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:FA:0B:30:D4:4C:FC:62:02:DC:F7:08:2D:60:7C:1E:48:1D:57:86
            X509v3 Authority Key Identifier:
                keyid:3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/34352e3138322e35322e302f32332d3233203d3e20323639323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:b3:7b:cf:cd:62:88:aa:3d:ab:11:8b:57:b1:b1:45:2c:d9:
         7e:7c:18:98:9f:13:b6:3a:65:30:0b:c4:72:58:55:bb:7d:e7:
         8c:bd:bf:6b:4f:80:02:f7:60:c9:b0:34:ba:f7:dd:8e:6a:e5:
         2c:e2:e3:44:58:96:97:80:a7:49:6a:99:c3:8e:56:15:4d:1f:
         e3:56:70:61:f6:dc:df:b3:2f:77:5d:a7:6c:85:d0:38:d0:b3:
         17:32:2a:d4:f8:e6:96:73:d7:3f:66:19:1d:39:b2:66:26:2c:
         69:57:2b:a4:97:af:87:e1:15:e7:e1:20:df:12:11:bd:74:64:
         93:a7:5d:6b:26:ab:15:4d:52:77:d9:c3:d8:42:e0:9d:b6:87:
         0e:0d:3d:6e:19:ae:7b:b9:d7:74:98:c7:08:23:8c:ea:d3:a1:
         a0:f7:97:4e:26:65:fa:8f:fb:88:f8:a8:b6:2b:12:f0:e4:65:
         c7:39:54:ad:75:65:16:9b:29:ed:a5:7f:2f:44:ce:b4:54:a2:
         b0:ea:11:9c:df:43:32:0b:67:33:20:00:42:8f:bf:67:cf:5f:
         32:74:06:b5:e6:c2:f9:4e:14:13:fc:00:7a:67:e0:7c:18:4e:
         b6:93:58:dd:a5:01:5e:b6:f9:b1:42:8a:36:ff:23:17:e6:50:
         af:aa:92:53
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUI1wFKgCZaPLWj8ZO3gDmvkN7F/kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q0ODY3RjExQTFENjUyNjgyRkE5NUVEOTExQjIwRDgx
MTM5ODUzRDAeFw0yNjA3MDExNjU3NDRaFw0yNzA2MzAxNzAyNDRaMDMxMTAvBgNV
BAMTKDA5RkEwQjMwRDQ0Q0ZDNjIwMkRDRjcwODJENjA3QzFFNDgxRDU3ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9e+yj+ihgsUV/XDQ9lp8KiH6I
CGlYNUhRjPV3q/ttIElVR9mVvtDJxXRIVyhrOtidMrBXGH363WGnyhf3ZdD7C96i
UeHZmtmOtWfTgOYClPRtbln4eVkJlO1B5jOA9W1+o0Xq3S11uY3fEFC9G+RTZES+
hyxBnbIJ8cQGRyG8ZVtkAQluNbAnyNMq6yqVN2bzw5f+2tD7sH3WfxqlQlmCiE5M
92qdqvOIyLWoXdqnJjsl8TLsRidpXZklA6o8DiUjQ5mggk+uUzWOmgA5Z9rUzKxP
oox5SzsqBSoEmuJG7KChketXQJvg5t6PDVoNL5gOo8ogUpx6bqloqQIAQVVPAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUCfoLMNRM/GIC3PcILWB8HkgdV4YwHwYDVR0j
BBgwFoAUPUhn8RodZSaC+pXtkRsg2BE5hT0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTJuZ1UyUGtlVFJoZEFqQnpwVTRlaFVCcGV5UHJNQnF0ekdnYXdwbXE3
aWQvMC8zRDQ4NjdGMTFBMUQ2NTI2ODJGQTk1RUQ5MTFCMjBEODExMzk4NTNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNENDg2N0YxMUExRDY1MjY4
MkZBOTVFRDkxMUIyMEQ4MTEzOTg1M0QuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzUybmdVMlBrZVRSaGRBakJ6cFU0ZWhVQnBleVByTUJxdHpHZ2F3cG1xN2lkLzAv
MzQzNTJlMzEzODMyMmUzNTMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM5
MzIzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLbY0MA0GCSqGSIb3DQEBCwUAA4IBAQASs3vPzWKI
qj2rEYtXsbFFLNl+fBiYnxO2OmUwC8RyWFW7feeMvb9rT4AC92DJsDS6992OauUs
4uNEWJaXgKdJapnDjlYVTR/jVnBh9tzfsy93XadshdA40LMXMirU+OaWc9c/Zhkd
ObJmJixpVyukl6+H4RXn4SDfEhG9dGSTp11rJqsVTVJ32cPYQuCdtocODT1uGa57
udd0mMcII4zq06Gg95dOJmX6j/uI+Ki2KxLw5GXHOVStdWUWmyntpX8vRM60VKKw
6hGc30MyC2czIABCj79nz18ydAa15sL5ThQT/AB6Z+B8GE62k1jdpQFetvmxQoo2
/yMX5lCvqpJT
-----END CERTIFICATE-----
Generated at Sat Jul 25 03:35:46 2026 by rpki-client