Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/34352e3136392e38322e302f32342d3234203d3e20323638313033.roa
File:                     34352e3136392e38322e302f32342d3234203d3e20323638313033.roa (raw, json)
Hash identifier:          1rJFb3gy6W3CuyJgTebBKhryH8qF0bdRyB3qZjxqPgM=
Subject key identifier:   46:DC:7F:A5:F2:13:D8:22:C5:06:E5:BF:5F:9A:FE:DF:68:1E:09:5D
Certificate issuer:       /CN=39F1F6C3A26D816A2FCB216B7D6FC224391E0DED
Certificate serial:       3394075490FD8FE73B4A84DB444C48F64A1D3CE3
Authority key identifier: 39:F1:F6:C3:A2:6D:81:6A:2F:CB:21:6B:7D:6F:C2:24:39:1E:0D:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39F1F6C3A26D816A2FCB216B7D6FC224391E0DED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/34352e3136392e38322e302f32342d3234203d3e20323638313033.roa
Signing time:             Wed 22 Jul 2026 04:01:04 +0000
ROA not before:           Wed 22 Jul 2026 03:56:04 +0000
ROA not after:            Wed 21 Jul 2027 04:01:04 +0000
asID:                     268103
IP address blocks:        45.169.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/39F1F6C3A26D816A2FCB216B7D6FC224391E0DED.crl
                          rsync://rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/39F1F6C3A26D816A2FCB216B7D6FC224391E0DED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39F1F6C3A26D816A2FCB216B7D6FC224391E0DED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 11:51:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:94:07:54:90:fd:8f:e7:3b:4a:84:db:44:4c:48:f6:4a:1d:3c:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39F1F6C3A26D816A2FCB216B7D6FC224391E0DED
        Validity
            Not Before: Jul 22 03:56:04 2026 GMT
            Not After : Jul 21 04:01:04 2027 GMT
        Subject: CN=46DC7FA5F213D822C506E5BF5F9AFEDF681E095D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cc:2a:23:4d:e5:27:93:aa:bd:6d:75:75:fc:
                    67:75:31:a7:e7:c9:88:8c:67:7b:3e:42:c8:ba:88:
                    ea:ba:98:80:87:de:1d:f7:88:a3:42:bb:04:61:98:
                    ef:1e:62:40:8d:ed:c8:56:4b:38:0c:05:6b:15:1a:
                    7b:1d:b9:37:db:a9:cd:49:02:73:cb:8a:b7:e0:6d:
                    46:a1:66:aa:ba:b4:2e:a8:41:c8:8d:b0:a8:87:1d:
                    b5:9a:6b:69:e6:f2:cf:00:bb:6a:ad:6c:0d:4c:f1:
                    c5:c2:cf:9e:18:cb:34:67:6a:9b:45:6e:15:8e:06:
                    ae:ea:f9:2e:ff:cf:ec:d0:2d:ef:95:4e:6b:a4:6f:
                    ad:7a:3c:a7:39:0c:56:78:d1:c1:5b:c3:07:29:fc:
                    56:8e:a1:59:f3:70:55:e8:da:77:22:82:df:84:e2:
                    f4:77:c6:3a:ec:66:08:13:5d:fe:49:ce:69:e9:64:
                    bb:84:6f:45:0a:13:32:72:c3:5d:20:f2:7a:48:48:
                    ff:0e:7d:34:7a:53:60:c5:50:13:d3:50:20:ea:54:
                    d9:94:99:96:8d:ff:1d:ae:e7:73:c9:77:8c:97:29:
                    50:94:fc:8c:3b:59:9d:fe:37:e5:45:78:40:8b:3c:
                    a0:9b:13:25:33:4f:0c:6b:e8:c3:69:a0:ac:5c:a2:
                    54:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:DC:7F:A5:F2:13:D8:22:C5:06:E5:BF:5F:9A:FE:DF:68:1E:09:5D
            X509v3 Authority Key Identifier:
                keyid:39:F1:F6:C3:A2:6D:81:6A:2F:CB:21:6B:7D:6F:C2:24:39:1E:0D:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/39F1F6C3A26D816A2FCB216B7D6FC224391E0DED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39F1F6C3A26D816A2FCB216B7D6FC224391E0DED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/34352e3136392e38322e302f32342d3234203d3e20323638313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:c3:27:c4:7b:32:46:76:08:f5:a7:b2:ab:60:fe:55:7d:2c:
         2f:52:62:3c:e8:b2:6f:4f:c2:b0:e3:14:ed:f4:5c:cf:94:48:
         34:16:3a:56:a0:37:93:c7:ac:fc:15:9a:be:57:d6:9a:53:e3:
         88:67:d6:6e:69:77:18:51:57:44:b8:72:89:ec:9a:70:5c:81:
         bb:e3:f0:0f:1e:fe:dc:a8:df:19:04:24:bf:b6:10:da:76:b1:
         5a:f4:ee:8c:02:85:fc:fd:53:ce:2d:37:8c:e8:4a:4c:c0:89:
         82:a2:92:66:ac:8c:7d:b3:2d:bd:fa:d9:e2:e3:d1:9a:de:a2:
         7f:7d:2d:5a:86:0b:3c:ca:11:43:b0:80:09:82:27:4f:0d:be:
         a3:ab:da:c0:29:f1:99:f9:df:62:73:6f:cf:ea:05:0e:ba:cf:
         79:2c:45:a0:6f:60:db:fe:13:8e:59:55:a7:24:c0:2e:6d:d7:
         78:88:4a:27:91:ca:88:e7:cf:31:dd:3f:68:bb:b4:7b:46:d9:
         17:38:7f:d9:f9:5c:4d:b2:5a:5d:a8:89:af:b4:52:c9:e1:ae:
         ae:98:af:37:78:77:79:bf:e1:d7:34:e9:3f:da:d9:ee:32:ac:
         d9:30:8e:16:ca:73:59:35:23:ba:dd:6b:89:f9:1c:8b:7f:44:
         63:ff:16:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:53:40 2026 by rpki-client