Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/34352e3138362e33362e302f32332d3233203d3e20323639343039.roa
File:                     34352e3138362e33362e302f32332d3233203d3e20323639343039.roa (raw, json)
Hash identifier:          mGrFcNzSLWR0WLO+pzrhyeytcisd01niXadluRtEl7o=
Subject key identifier:   A8:87:60:CD:A1:A5:8B:25:3D:A9:4E:D5:DB:BC:6A:28:EF:AF:7E:B7
Certificate issuer:       /CN=FF962D3BC2259181BF6817D40CC381E0150C9740
Certificate serial:       4118B7497B9EECABBE446B99B1974FCAEF2134B8
Authority key identifier: FF:96:2D:3B:C2:25:91:81:BF:68:17:D4:0C:C3:81:E0:15:0C:97:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF962D3BC2259181BF6817D40CC381E0150C9740.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/34352e3138362e33362e302f32332d3233203d3e20323639343039.roa
Signing time:             Sun 03 May 2026 20:04:12 +0000
ROA not before:           Sun 03 May 2026 19:59:12 +0000
ROA not after:            Sun 02 May 2027 20:04:12 +0000
asID:                     269409
IP address blocks:        45.186.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/FF962D3BC2259181BF6817D40CC381E0150C9740.crl
                          rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/FF962D3BC2259181BF6817D40CC381E0150C9740.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF962D3BC2259181BF6817D40CC381E0150C9740.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:18:b7:49:7b:9e:ec:ab:be:44:6b:99:b1:97:4f:ca:ef:21:34:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF962D3BC2259181BF6817D40CC381E0150C9740
        Validity
            Not Before: May  3 19:59:12 2026 GMT
            Not After : May  2 20:04:12 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:c9:67:93:fc:5b:f6:88:a4:28:de:55:26:13:
                    2b:c6:66:f8:ef:93:1b:90:b6:ff:d2:22:82:f1:35:
                    9e:db:44:34:da:fb:68:80:9a:8f:fa:31:8e:27:30:
                    52:2a:97:d1:35:fa:61:2c:7a:17:30:d3:30:33:61:
                    d8:17:0b:01:89:09:ca:f6:23:97:65:31:24:a0:0f:
                    69:b0:18:e1:f3:4e:54:4d:3a:17:83:01:b0:9d:f7:
                    6f:10:ca:3f:5c:a6:e0:ee:41:90:96:14:6f:c5:b6:
                    9f:11:e0:82:da:55:77:71:89:03:46:2d:ad:b9:39:
                    15:1e:85:0c:b7:57:57:d6:ad:57:e1:e4:a4:a0:94:
                    86:89:5f:6b:1f:6f:4e:03:f3:c3:66:89:f5:78:ac:
                    27:01:72:51:88:58:32:aa:de:73:56:56:45:cf:ff:
                    11:fe:55:2a:1a:5c:26:dd:c4:7e:a0:32:5e:3a:10:
                    0b:31:b9:d2:af:f0:e1:2b:32:62:90:7d:dd:b5:b6:
                    28:d7:e1:8f:68:f6:de:cb:f7:c6:1b:24:50:ed:ee:
                    1b:53:3d:0c:37:27:bb:7a:2b:ae:c4:d0:de:e7:db:
                    88:fb:c4:08:44:bf:76:79:44:7d:8c:e6:8b:b0:49:
                    e8:6e:53:d4:bd:ca:b0:d1:57:db:fe:9c:15:ba:bf:
                    dc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:87:60:CD:A1:A5:8B:25:3D:A9:4E:D5:DB:BC:6A:28:EF:AF:7E:B7
            X509v3 Authority Key Identifier:
                keyid:FF:96:2D:3B:C2:25:91:81:BF:68:17:D4:0C:C3:81:E0:15:0C:97:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/FF962D3BC2259181BF6817D40CC381E0150C9740.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF962D3BC2259181BF6817D40CC381E0150C9740.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/34352e3138362e33362e302f32332d3233203d3e20323639343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:01:2a:16:33:e7:bb:a0:0b:ba:dd:d1:59:0a:2e:17:73:0e:
         be:7f:05:cc:9e:4b:4f:b2:9c:2a:cb:97:60:cf:a0:01:4f:29:
         96:a5:0a:85:ff:75:f1:f4:94:ac:d7:d9:91:67:a1:70:02:14:
         61:24:dd:b1:89:6d:56:13:f7:c5:06:8f:e5:0b:12:c2:cb:62:
         6e:9a:4b:66:7b:b2:e5:39:05:fe:0d:86:2c:04:bc:38:7c:60:
         20:8c:be:00:aa:1d:95:2c:d6:70:53:32:c9:2d:87:51:89:87:
         59:f6:cd:5c:b2:13:e5:0a:1a:46:22:9b:15:7a:c2:8b:3d:fe:
         af:e5:84:16:48:b4:13:04:ca:9b:37:35:ab:85:bf:41:0e:76:
         44:38:b3:20:1b:ee:2a:ae:46:a4:99:b5:28:3b:2b:81:0c:13:
         ba:37:d5:bd:9d:39:bb:ee:55:47:f3:7f:1b:d3:9f:ea:af:6d:
         da:7c:a5:21:0d:65:0e:96:a7:b7:23:9a:2d:26:60:bd:d8:03:
         d4:1a:f5:42:be:5c:23:24:48:e4:7a:1a:1e:30:7b:62:29:10:
         d8:30:e9:d0:65:33:0e:1e:3a:de:1e:08:8a:4c:a5:a8:ef:4e:
         85:7e:31:c4:cd:2a:de:b5:fa:c7:5d:91:8b:2a:c5:aa:2c:cf:
         1e:47:4f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:01:26 2026 by rpki-client