Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9CSH7hhQHsC5ciihaZjkgALtVPW9cs976GoT6XdBqxaL/0/34352e3138322e39362e302f32322d3234203d3e20323639333339.roa
File:                     34352e3138322e39362e302f32322d3234203d3e20323639333339.roa (raw, json)
Hash identifier:          14p5RBMBl+r6gPW+IsIAfc4jVrEYvW+6U4smwBWglzI=
Subject key identifier:   E1:C6:4E:37:F5:E3:A5:28:94:67:F0:D6:70:48:8F:58:F2:68:81:CE
Certificate issuer:       /CN=8031D0E22F282EF7F099D4A03C6628FBA6DB248F
Certificate serial:       780839CB9012FDF5410E8304FFD57AE1F47FBADA
Authority key identifier: 80:31:D0:E2:2F:28:2E:F7:F0:99:D4:A0:3C:66:28:FB:A6:DB:24:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8031D0E22F282EF7F099D4A03C6628FBA6DB248F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9CSH7hhQHsC5ciihaZjkgALtVPW9cs976GoT6XdBqxaL/0/34352e3138322e39362e302f32322d3234203d3e20323639333339.roa
Signing time:             Wed 08 Jul 2026 15:42:42 +0000
ROA not before:           Wed 08 Jul 2026 15:37:42 +0000
ROA not after:            Wed 07 Jul 2027 15:42:42 +0000
asID:                     269339
IP address blocks:        45.182.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9CSH7hhQHsC5ciihaZjkgALtVPW9cs976GoT6XdBqxaL/0/8031D0E22F282EF7F099D4A03C6628FBA6DB248F.crl
                          rsync://rpki-repo.registro.br/repo/9CSH7hhQHsC5ciihaZjkgALtVPW9cs976GoT6XdBqxaL/0/8031D0E22F282EF7F099D4A03C6628FBA6DB248F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8031D0E22F282EF7F099D4A03C6628FBA6DB248F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 23:25:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:08:39:cb:90:12:fd:f5:41:0e:83:04:ff:d5:7a:e1:f4:7f:ba:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8031D0E22F282EF7F099D4A03C6628FBA6DB248F
        Validity
            Not Before: Jul  8 15:37:42 2026 GMT
            Not After : Jul  7 15:42:42 2027 GMT
        Subject: CN=E1C64E37F5E3A5289467F0D670488F58F26881CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0f:c8:01:bb:88:3a:e3:b8:b8:50:d2:d5:48:
                    12:63:a2:14:d3:dc:a9:c5:16:d3:5c:27:45:62:f8:
                    8d:7a:2a:d1:6c:0a:2d:df:4f:f9:49:08:e7:49:e3:
                    2a:fd:e3:bf:cc:11:92:05:92:77:d0:d2:76:d9:d0:
                    2d:7e:e8:ff:2a:fc:c3:0a:b1:17:a5:f6:7e:0f:0d:
                    aa:10:13:90:d1:31:80:80:69:0c:1c:0f:9a:83:6b:
                    c8:92:89:59:e6:e0:a6:3c:0b:69:79:2b:d5:62:83:
                    77:30:22:38:1a:4b:ce:05:6d:a6:72:f4:f9:60:40:
                    f0:06:35:9e:70:94:b8:98:ff:19:57:bc:90:86:0f:
                    ce:15:00:ca:28:37:ae:04:64:89:a9:85:6e:b7:b0:
                    55:85:b3:59:a5:e4:d1:5c:f3:13:bc:db:90:f5:33:
                    52:30:1b:7e:40:d8:8e:2a:91:97:53:79:d0:ea:0e:
                    95:e3:96:cb:db:3f:fd:bb:94:5f:4a:1d:f9:54:7b:
                    3f:30:af:a3:22:49:72:fe:25:a0:54:98:ed:8e:9a:
                    b0:b2:9f:95:10:b3:5c:2e:64:a5:4c:c3:38:ef:4e:
                    c9:b0:e6:94:85:69:6a:a7:71:f6:74:f8:a6:d4:20:
                    f2:e0:d0:6d:e0:ec:ce:af:2c:5b:af:ae:ef:36:ca:
                    8c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C6:4E:37:F5:E3:A5:28:94:67:F0:D6:70:48:8F:58:F2:68:81:CE
            X509v3 Authority Key Identifier:
                keyid:80:31:D0:E2:2F:28:2E:F7:F0:99:D4:A0:3C:66:28:FB:A6:DB:24:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9CSH7hhQHsC5ciihaZjkgALtVPW9cs976GoT6XdBqxaL/0/8031D0E22F282EF7F099D4A03C6628FBA6DB248F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8031D0E22F282EF7F099D4A03C6628FBA6DB248F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9CSH7hhQHsC5ciihaZjkgALtVPW9cs976GoT6XdBqxaL/0/34352e3138322e39362e302f32322d3234203d3e20323639333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:97:7d:78:b6:43:d9:19:f5:4e:3f:b1:ba:55:14:4b:77:11:
         49:18:34:87:26:4a:8e:43:7e:44:5b:54:b3:70:af:44:9c:db:
         10:72:3c:84:28:5f:5b:b0:9c:24:9f:e0:12:4a:d7:9b:c5:60:
         55:fa:54:e0:60:e7:95:9a:76:5f:49:f9:8b:94:4a:c1:c5:07:
         51:9d:ce:24:88:47:47:06:96:ce:66:6c:12:d1:72:7a:6f:a4:
         6c:7f:41:3d:0c:73:ba:28:94:6e:4a:6a:d4:09:9e:48:76:56:
         2d:04:74:e9:4c:20:5f:99:ff:c4:de:a7:f9:d3:d8:41:7d:52:
         86:8f:bc:55:61:59:0f:d5:28:b4:f3:8e:e6:81:6b:6e:32:62:
         74:59:d3:e5:25:9a:bf:88:30:d8:2d:83:9a:13:c4:43:e7:de:
         e1:9c:83:2e:76:a3:74:80:4c:4a:89:6c:da:ed:5c:ab:fc:3b:
         df:2b:d0:dc:5e:25:9c:13:dd:d4:f9:69:b3:db:fb:43:a0:62:
         ed:fd:14:6d:21:e5:94:45:ce:6e:f6:24:60:ec:43:29:2e:7d:
         05:4e:3b:bb:f9:28:14:48:38:cd:9b:d9:e8:94:f5:6a:fe:a3:
         33:ed:eb:9e:f4:18:34:f5:dc:6c:02:a9:f1:64:d8:9a:f8:69:
         4a:29:18:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:19:45 2026 by rpki-client