Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/34352e3136382e35322e302f32322d3232203d3e20323638303239.roa
File:                     34352e3136382e35322e302f32322d3232203d3e20323638303239.roa (raw, json)
Hash identifier:          CcxcMm7DuDc4CdQR5u9xeLDzRQSIApunKj0r7EbfiZ0=
Subject key identifier:   53:9B:69:C4:B0:51:84:5D:25:62:D6:F5:07:1E:12:D6:54:53:E8:0C
Certificate issuer:       /CN=4C754589EB8CD9171C812BC04CC781FCF43209CE
Certificate serial:       054052D6FFF3074F442DB509252035D46D3E1F7C
Authority key identifier: 4C:75:45:89:EB:8C:D9:17:1C:81:2B:C0:4C:C7:81:FC:F4:32:09:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C754589EB8CD9171C812BC04CC781FCF43209CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/34352e3136382e35322e302f32322d3232203d3e20323638303239.roa
Signing time:             Tue 17 Mar 2026 14:01:17 +0000
ROA not before:           Tue 17 Mar 2026 13:56:17 +0000
ROA not after:            Tue 16 Mar 2027 14:01:17 +0000
asID:                     268029
IP address blocks:        45.168.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/4C754589EB8CD9171C812BC04CC781FCF43209CE.crl
                          rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/4C754589EB8CD9171C812BC04CC781FCF43209CE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C754589EB8CD9171C812BC04CC781FCF43209CE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 19:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:40:52:d6:ff:f3:07:4f:44:2d:b5:09:25:20:35:d4:6d:3e:1f:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C754589EB8CD9171C812BC04CC781FCF43209CE
        Validity
            Not Before: Mar 17 13:56:17 2026 GMT
            Not After : Mar 16 14:01:17 2027 GMT
        Subject: CN=539B69C4B051845D2562D6F5071E12D65453E80C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3e:da:f7:9a:22:61:fd:b3:65:28:8b:ff:ef:
                    91:3f:14:73:ea:f9:4d:08:e9:3f:89:2b:fd:62:5e:
                    5c:37:95:8c:6d:15:5d:08:9a:4c:06:8a:bc:a3:5c:
                    7c:9e:22:de:96:db:cd:07:fc:46:b6:5b:a6:e7:a6:
                    10:91:9b:0c:fd:44:54:7a:2a:0d:40:80:24:c0:2f:
                    7b:da:ea:61:38:aa:ed:d6:3f:ea:67:db:c8:28:38:
                    4a:ea:69:87:30:d1:bb:f6:15:a4:86:e2:b0:1b:34:
                    e5:34:51:0c:1a:7c:59:1d:f5:77:2d:9a:57:ab:6b:
                    e4:59:3f:49:72:ba:84:43:f9:d1:1c:d6:db:3f:3d:
                    81:0c:3e:78:41:0b:b0:38:32:ff:e3:31:a2:ab:46:
                    e2:80:d9:e8:e2:6f:be:ef:a1:b2:71:0e:d6:f2:20:
                    0d:2f:13:0c:67:ca:6a:db:16:16:c5:d9:f3:88:80:
                    61:d0:2a:1b:17:63:68:b6:ef:bf:81:de:93:34:f3:
                    57:65:3c:5b:bb:be:52:c2:31:96:0e:ab:2c:01:8a:
                    b6:77:8f:00:d9:e3:f4:c2:41:39:77:b0:dd:dd:ed:
                    db:d3:98:82:8a:92:a9:a9:44:01:7c:9d:df:9e:53:
                    8e:d5:cd:4b:ae:3d:9e:36:21:35:df:f2:93:10:33:
                    fe:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:9B:69:C4:B0:51:84:5D:25:62:D6:F5:07:1E:12:D6:54:53:E8:0C
            X509v3 Authority Key Identifier:
                keyid:4C:75:45:89:EB:8C:D9:17:1C:81:2B:C0:4C:C7:81:FC:F4:32:09:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/4C754589EB8CD9171C812BC04CC781FCF43209CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C754589EB8CD9171C812BC04CC781FCF43209CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/34352e3136382e35322e302f32322d3232203d3e20323638303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:ac:87:4d:5f:c6:0c:95:1d:fd:09:19:66:95:23:1b:08:52:
         ff:9d:3c:1f:bd:3b:aa:1a:84:a8:49:7b:f1:56:53:44:67:70:
         7a:51:7c:86:90:7d:cf:6f:e3:d9:77:a2:0b:45:80:cb:64:94:
         bc:0d:bb:dc:46:43:9c:df:62:66:19:23:90:36:6c:58:47:01:
         dd:63:38:a7:4c:f4:db:1d:71:50:33:02:2f:2d:7c:7e:57:07:
         97:07:55:18:89:fb:79:1a:e9:36:90:38:cf:e5:ef:ed:77:ee:
         4c:84:c8:a0:a1:04:da:16:1f:56:67:a0:c8:04:6a:1a:73:2c:
         9e:ef:ee:01:21:6c:e0:6b:65:2f:d7:43:96:7c:9c:18:9f:c6:
         e7:4d:c9:4a:60:c6:0d:b4:23:89:a7:eb:0d:49:75:de:e4:59:
         1b:79:b9:e2:9e:09:cd:e4:74:41:73:3e:51:b9:1d:0f:5e:00:
         ce:0f:8a:ba:95:42:97:53:e6:68:ea:06:c5:07:c4:5b:fc:b0:
         7a:3b:0c:3f:57:4c:e7:31:47:42:7c:12:51:c5:fd:3e:d9:b7:
         df:1c:41:71:3c:a3:bc:da:17:09:8e:83:e6:7f:bd:c8:84:3f:
         56:b3:0d:e7:9b:a8:bf:48:2e:56:8c:92:ef:11:99:44:2d:8a:
         f7:27:8c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:21:36 2026 by rpki-client