Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/34352e3138362e33362e302f32342d3234203d3e20323639343039.roa
File:                     34352e3138362e33362e302f32342d3234203d3e20323639343039.roa (raw, json)
Hash identifier:          EIcvQ0buFOAwHfOIicaDOyMjPbxCZdtF0kVrwsCnG80=
Subject key identifier:   E3:80:D7:56:45:11:71:B7:B7:45:4C:51:35:51:6D:93:DB:C6:B5:51
Certificate issuer:       /CN=FF962D3BC2259181BF6817D40CC381E0150C9740
Certificate serial:       42D13006108A7735991084AE92A4B6CF77D2A57C
Authority key identifier: FF:96:2D:3B:C2:25:91:81:BF:68:17:D4:0C:C3:81:E0:15:0C:97:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF962D3BC2259181BF6817D40CC381E0150C9740.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/34352e3138362e33362e302f32342d3234203d3e20323639343039.roa
Signing time:             Sun 03 May 2026 20:04:16 +0000
ROA not before:           Sun 03 May 2026 19:59:16 +0000
ROA not after:            Sun 02 May 2027 20:04:16 +0000
asID:                     269409
IP address blocks:        45.186.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/FF962D3BC2259181BF6817D40CC381E0150C9740.crl
                          rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/FF962D3BC2259181BF6817D40CC381E0150C9740.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF962D3BC2259181BF6817D40CC381E0150C9740.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:d1:30:06:10:8a:77:35:99:10:84:ae:92:a4:b6:cf:77:d2:a5:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF962D3BC2259181BF6817D40CC381E0150C9740
        Validity
            Not Before: May  3 19:59:16 2026 GMT
            Not After : May  2 20:04:16 2027 GMT
        Subject: CN=3082010A0282010100CAC54D30D7B73EA7F3E756D00AA4A9CA0FE300E448E64C9DB3ED6CD595A2E05BC72BBC34FE6508F3A6DE75F91824E7AB595AD8012155062673161E2CF62416A80A0D856D57AD811A4F977EE96980D5083D98FB52AF3C1B16B9F8B3355103630F9662440937B167786AF0372DC67372FB8610FE5F07BA411713130E5A9396AF00EC4B8104E157D0A9B1CD7043E9AA6B4BE9306F0CA9BF0616FF5801F3363115788FAC87EFEB765062D8CDF88F6F5F7F3D0F3C5E37243B8B5EDF493E5381ED40E136D8EADC19DD42F84BD1483E450959D4A941D7602E731313A5E1E8B14A1ACBC44FA1A342AD6F6951750196661A1EAE5D3B9F34816E9EB0D66B5F839D75F83BF30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c5:4d:30:d7:b7:3e:a7:f3:e7:56:d0:0a:a4:
                    a9:ca:0f:e3:00:e4:48:e6:4c:9d:b3:ed:6c:d5:95:
                    a2:e0:5b:c7:2b:bc:34:fe:65:08:f3:a6:de:75:f9:
                    18:24:e7:ab:59:5a:d8:01:21:55:06:26:73:16:1e:
                    2c:f6:24:16:a8:0a:0d:85:6d:57:ad:81:1a:4f:97:
                    7e:e9:69:80:d5:08:3d:98:fb:52:af:3c:1b:16:b9:
                    f8:b3:35:51:03:63:0f:96:62:44:09:37:b1:67:78:
                    6a:f0:37:2d:c6:73:72:fb:86:10:fe:5f:07:ba:41:
                    17:13:13:0e:5a:93:96:af:00:ec:4b:81:04:e1:57:
                    d0:a9:b1:cd:70:43:e9:aa:6b:4b:e9:30:6f:0c:a9:
                    bf:06:16:ff:58:01:f3:36:31:15:78:8f:ac:87:ef:
                    eb:76:50:62:d8:cd:f8:8f:6f:5f:7f:3d:0f:3c:5e:
                    37:24:3b:8b:5e:df:49:3e:53:81:ed:40:e1:36:d8:
                    ea:dc:19:dd:42:f8:4b:d1:48:3e:45:09:59:d4:a9:
                    41:d7:60:2e:73:13:13:a5:e1:e8:b1:4a:1a:cb:c4:
                    4f:a1:a3:42:ad:6f:69:51:75:01:96:66:1a:1e:ae:
                    5d:3b:9f:34:81:6e:9e:b0:d6:6b:5f:83:9d:75:f8:
                    3b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:80:D7:56:45:11:71:B7:B7:45:4C:51:35:51:6D:93:DB:C6:B5:51
            X509v3 Authority Key Identifier:
                keyid:FF:96:2D:3B:C2:25:91:81:BF:68:17:D4:0C:C3:81:E0:15:0C:97:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/FF962D3BC2259181BF6817D40CC381E0150C9740.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF962D3BC2259181BF6817D40CC381E0150C9740.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/34352e3138362e33362e302f32342d3234203d3e20323639343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:64:c8:11:9c:42:de:7d:d9:34:e4:62:78:98:47:d1:66:1e:
         02:dc:8b:79:b8:5f:06:04:1b:0b:5a:d1:af:fa:54:98:b0:7b:
         01:17:c8:96:6c:3f:17:d4:1b:2b:4a:64:16:bc:5d:b3:d9:85:
         84:0e:e5:1e:79:a2:fd:0a:4a:0a:0e:fb:4f:23:1d:b4:5c:a3:
         de:3f:0f:88:74:b8:86:a4:b7:10:c8:ca:68:c9:78:e3:36:86:
         fe:5f:37:c0:87:b6:0c:75:ad:5d:c8:ac:e4:ac:af:7c:65:9c:
         fd:2b:57:23:00:d7:ad:83:3f:0d:0b:de:98:56:a9:ce:68:5b:
         6f:8d:8e:b4:34:24:3e:e8:1f:a5:86:2a:b5:7d:7a:a8:60:b6:
         7c:d3:3d:44:da:9c:18:09:db:73:fc:32:dc:60:ab:4b:03:48:
         19:4a:33:ba:56:4c:a2:3d:4c:98:8a:16:e3:f9:ba:1b:56:8b:
         e6:3b:9f:dc:be:52:88:e0:69:b2:80:af:e8:11:be:bb:0a:56:
         d8:6c:e5:af:b3:7d:54:b8:0e:02:ef:38:9e:59:f0:a7:a0:a4:
         7c:70:d6:dc:aa:84:95:66:0f:b5:1c:5b:12:cf:66:f9:2e:0d:
         fa:65:5f:cd:d7:d0:f6:44:db:88:66:30:55:68:69:ae:19:c5:
         cf:4a:66:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:29:47 2026 by rpki-client