Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/34352e3138362e33362e302f32322d3232203d3e20323639343039.roa
File:                     34352e3138362e33362e302f32322d3232203d3e20323639343039.roa (raw, json)
Hash identifier:          ONzqWUxNW04zvvJyxNVfVNsrc7NgBnjZvqVCP2OSs7I=
Subject key identifier:   73:69:03:EF:D7:35:62:F9:1B:0D:88:94:2E:9E:16:BE:12:A4:08:7A
Certificate issuer:       /CN=FF962D3BC2259181BF6817D40CC381E0150C9740
Certificate serial:       2E4730C5F3F1093324ADFD839FE07B11EF6B11EE
Authority key identifier: FF:96:2D:3B:C2:25:91:81:BF:68:17:D4:0C:C3:81:E0:15:0C:97:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF962D3BC2259181BF6817D40CC381E0150C9740.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/34352e3138362e33362e302f32322d3232203d3e20323639343039.roa
Signing time:             Sun 03 May 2026 20:04:07 +0000
ROA not before:           Sun 03 May 2026 19:59:07 +0000
ROA not after:            Sun 02 May 2027 20:04:07 +0000
asID:                     269409
IP address blocks:        45.186.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/FF962D3BC2259181BF6817D40CC381E0150C9740.crl
                          rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/FF962D3BC2259181BF6817D40CC381E0150C9740.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF962D3BC2259181BF6817D40CC381E0150C9740.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:47:30:c5:f3:f1:09:33:24:ad:fd:83:9f:e0:7b:11:ef:6b:11:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF962D3BC2259181BF6817D40CC381E0150C9740
        Validity
            Not Before: May  3 19:59:07 2026 GMT
            Not After : May  2 20:04:07 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3e:45:3d:db:63:a3:4a:54:14:9b:91:b9:78:
                    a4:51:51:49:8f:5a:48:26:a5:3c:17:0e:b5:05:28:
                    e7:e0:3f:b4:aa:d5:74:1d:9d:0e:78:dc:d1:00:d2:
                    e8:08:18:29:ef:82:7e:57:db:36:e8:f9:3e:5c:af:
                    f8:99:57:20:43:d5:6f:29:6f:da:c4:d1:cb:83:7a:
                    0a:21:e4:3e:92:ba:1d:d6:40:79:6d:ca:ac:64:be:
                    cf:94:92:a8:9b:88:cc:40:3b:b1:21:f6:5b:3b:84:
                    c3:30:5e:d2:bd:c7:70:42:b6:e5:8d:6a:58:6e:24:
                    a8:b1:23:6d:d8:85:a9:be:79:6b:03:fa:a0:95:50:
                    59:38:44:bb:e3:8e:ea:19:27:c6:06:e1:1f:00:10:
                    2e:e8:26:e5:e1:0f:ab:5b:22:b3:1c:42:66:db:ad:
                    a7:63:e6:29:b9:d2:6f:89:d7:98:a0:ac:c7:6b:b4:
                    55:f8:c0:71:24:e7:8f:39:f5:2d:ce:6a:02:74:67:
                    79:2e:bd:73:c4:3c:4e:b9:f2:67:c7:aa:98:73:b6:
                    f3:a4:64:fd:3a:bc:05:7f:b5:3c:9e:29:da:83:f2:
                    f5:90:ee:52:b2:41:7c:e5:12:86:06:2b:0c:df:ef:
                    57:58:a1:6d:8d:ee:5e:d7:5a:05:e4:e7:34:c1:e2:
                    38:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:69:03:EF:D7:35:62:F9:1B:0D:88:94:2E:9E:16:BE:12:A4:08:7A
            X509v3 Authority Key Identifier:
                keyid:FF:96:2D:3B:C2:25:91:81:BF:68:17:D4:0C:C3:81:E0:15:0C:97:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/FF962D3BC2259181BF6817D40CC381E0150C9740.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF962D3BC2259181BF6817D40CC381E0150C9740.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/34352e3138362e33362e302f32322d3232203d3e20323639343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:83:08:f1:51:d2:34:8b:37:5e:40:ee:43:95:73:3e:c4:9d:
         43:16:f8:7d:b9:b5:72:b2:3d:81:c2:80:29:72:1c:49:7d:e0:
         c4:38:7b:ec:a3:7c:a3:46:41:0b:6a:71:44:1b:6c:07:b3:73:
         6c:49:6d:f3:98:19:1d:15:c5:7a:90:aa:84:04:18:aa:84:71:
         84:1e:d7:e0:84:0d:d5:c5:ac:c0:f4:98:fe:49:1f:e5:93:5f:
         23:10:7c:9b:42:44:8a:84:bb:8c:d7:27:7e:76:7c:98:6d:75:
         0c:e2:e1:62:e5:9f:8d:49:65:e9:89:d8:0f:0d:ce:06:e1:82:
         a7:18:ee:0d:7a:4a:e6:69:8f:d1:0c:cf:23:cc:81:71:f3:1c:
         f1:75:45:5e:15:f8:94:58:0c:9a:9c:03:7a:7c:39:4e:33:d8:
         b6:57:95:50:9d:42:ac:cd:cf:d4:1f:63:51:4f:d4:5f:7e:cf:
         d2:3f:21:06:dd:5e:6c:60:c2:60:a6:4a:ef:f6:ea:2a:b6:d8:
         fa:2f:72:17:cb:dd:9a:1c:b7:74:07:97:e5:65:e2:0c:94:9a:
         e4:a3:43:3b:f5:f4:63:43:c8:43:70:1b:ca:10:b6:ca:be:95:
         6d:fe:96:0f:72:fe:bf:80:1e:93:9e:a4:fd:9c:ce:0b:49:cb:
         46:6c:ce:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:29:56 2026 by rpki-client