Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/34352e3136392e3138392e302f32342d3234203d3e20323638313331.roa
File:                     34352e3136392e3138392e302f32342d3234203d3e20323638313331.roa (raw, json)
Hash identifier:          78Ed8RgPuO2Dt5Xo6ZcYbl8CSJSW4jLIbs3IowpnX+4=
Subject key identifier:   3F:DD:8A:BF:40:1D:90:04:39:BE:05:E7:81:8D:B9:3D:BE:F6:ED:97
Certificate issuer:       /CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11
Certificate serial:       4EA9E7EED48168396CCDD11913ADC79F6D4C209C
Authority key identifier: A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/34352e3136392e3138392e302f32342d3234203d3e20323638313331.roa
Signing time:             Tue 05 May 2026 17:09:42 +0000
ROA not before:           Tue 05 May 2026 17:04:42 +0000
ROA not after:            Tue 04 May 2027 17:09:42 +0000
asID:                     268131
IP address blocks:        45.169.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl
                          rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 03:34:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:a9:e7:ee:d4:81:68:39:6c:cd:d1:19:13:ad:c7:9f:6d:4c:20:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11
        Validity
            Not Before: May  5 17:04:42 2026 GMT
            Not After : May  4 17:09:42 2027 GMT
        Subject: CN=3FDD8ABF401D900439BE05E7818DB93DBEF6ED97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8c:a5:b9:b1:74:47:11:15:46:ac:80:60:6d:
                    67:7e:98:d2:88:1b:7d:e5:68:52:2c:a3:09:57:6f:
                    e9:1d:b3:c0:fa:c7:8b:f4:50:1a:49:4d:05:fb:3c:
                    7e:d5:e5:87:42:8b:6e:0c:76:8a:54:be:cf:1b:f3:
                    d6:a8:e6:ce:84:22:6b:71:77:9c:d3:34:23:d4:62:
                    88:da:c3:c1:03:fb:67:7d:d1:cb:85:99:e8:b6:5a:
                    2d:65:4e:2f:de:15:00:f2:5c:84:05:02:f5:74:dc:
                    42:de:63:b2:e2:1d:b6:8d:8f:ab:e2:91:8f:c2:80:
                    7c:20:c9:a4:79:c0:50:52:4e:ae:55:89:a8:49:9c:
                    9b:79:2b:9a:df:5a:0e:06:92:aa:73:7b:b2:af:d8:
                    48:8c:f6:39:00:0f:c7:00:72:af:f4:8b:1e:33:13:
                    60:44:ae:9f:0f:a8:a4:37:dc:9d:8f:29:6b:ca:d2:
                    f1:62:77:70:f5:a5:a6:ce:0a:a9:9a:32:e9:2d:fc:
                    c0:0c:da:40:e6:10:50:c0:ae:78:4a:f6:e8:49:9f:
                    61:63:d4:50:fc:9c:a8:91:1a:d7:08:cb:51:7a:92:
                    a8:75:9c:27:f1:69:94:be:59:f9:ff:47:ee:7c:fe:
                    04:47:9f:23:d1:68:e5:b4:35:5a:81:fe:86:3d:63:
                    70:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:DD:8A:BF:40:1D:90:04:39:BE:05:E7:81:8D:B9:3D:BE:F6:ED:97
            X509v3 Authority Key Identifier:
                keyid:A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/34352e3136392e3138392e302f32342d3234203d3e20323638313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:84:f6:b8:37:50:2d:aa:fd:74:31:a4:9e:85:9e:8b:e7:42:
         1e:18:60:ab:37:49:98:b3:67:ef:9f:cf:42:f9:27:3a:a1:1c:
         38:e9:cb:cd:08:de:9c:15:79:6c:9d:e9:20:22:b1:a4:20:a2:
         2f:48:7f:78:fa:e2:d1:53:43:6e:5e:50:87:e3:08:86:f9:d8:
         bc:42:06:26:4e:4d:7e:d1:1c:47:43:23:06:be:4f:dc:e2:cf:
         c3:96:1e:66:cb:b2:7d:a5:f7:66:dd:5a:ce:ce:f7:d2:96:d2:
         93:0d:b5:dd:93:d3:54:43:37:89:ae:04:0f:62:1a:85:d0:89:
         05:e6:60:dc:c5:5f:78:46:d4:d6:6c:88:d2:65:62:e5:b4:26:
         f5:b2:9c:2a:23:db:1a:ad:7f:28:8e:e8:1e:9b:7f:08:7a:9a:
         8f:65:1e:be:71:1f:74:60:88:f0:fb:eb:71:69:d0:af:69:8e:
         ea:b2:78:9c:43:aa:44:57:0f:cf:26:b4:98:59:e8:07:35:10:
         83:42:42:5b:d6:d1:25:6d:5a:be:bb:eb:23:af:8f:bb:6e:7b:
         13:ce:ab:f3:92:08:ad:7c:14:5d:54:0b:93:a1:ab:95:f4:90:
         13:69:23:96:79:23:81:b4:c8:ae:e8:d7:b8:d5:60:79:0b:8a:
         83:57:cf:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:44:16 2026 by rpki-client