Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/34352e3136312e33362e302f32322d3332203d3e20323638353030.roa
File:                     34352e3136312e33362e302f32322d3332203d3e20323638353030.roa (raw, json)
Hash identifier:          CdPYwUu7fVvOkXjvhbDpdhmwiaHnZvqvWSgEG/PmFHE=
Subject key identifier:   4D:F3:34:2F:DF:A5:B1:53:86:B9:6F:0C:C9:37:DE:C2:1C:1C:26:F1
Certificate issuer:       /CN=09D8D4A67069580E34F16AB047420BD4A08D4FF0
Certificate serial:       7CF4F8DA20EC5A0EB5C13301194BB6130FD17C69
Authority key identifier: 09:D8:D4:A6:70:69:58:0E:34:F1:6A:B0:47:42:0B:D4:A0:8D:4F:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/34352e3136312e33362e302f32322d3332203d3e20323638353030.roa
Signing time:             Wed 01 Jul 2026 17:02:45 +0000
ROA not before:           Wed 01 Jul 2026 16:57:45 +0000
ROA not after:            Wed 30 Jun 2027 17:02:45 +0000
asID:                     268500
IP address blocks:        45.161.36.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl
                          rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 19:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:f4:f8:da:20:ec:5a:0e:b5:c1:33:01:19:4b:b6:13:0f:d1:7c:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09D8D4A67069580E34F16AB047420BD4A08D4FF0
        Validity
            Not Before: Jul  1 16:57:45 2026 GMT
            Not After : Jun 30 17:02:45 2027 GMT
        Subject: CN=4DF3342FDFA5B15386B96F0CC937DEC21C1C26F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:da:e2:56:a9:27:26:db:d5:62:71:f7:96:67:
                    6c:b7:63:50:37:76:1d:55:c7:c3:db:57:0f:4b:76:
                    6c:c5:9e:71:a2:f4:ad:39:6d:12:47:5a:0e:80:21:
                    e0:87:1f:75:c6:7e:64:3b:c2:4a:a2:92:bd:ce:1b:
                    6f:51:63:aa:38:48:5e:a5:4a:eb:40:59:f7:c4:b1:
                    61:33:76:32:f5:c7:6e:2a:e3:dc:5e:e4:bc:83:4f:
                    0e:5c:3d:ef:5c:f3:f9:1d:3e:4d:b5:00:bc:e2:a7:
                    a3:72:f3:b7:69:16:67:b4:99:64:84:04:dc:ee:a2:
                    c6:3b:ce:d3:69:86:ae:da:59:0c:9f:e5:d4:34:72:
                    c2:c9:44:33:01:87:37:db:71:92:96:e4:19:17:0a:
                    a8:f2:da:e9:23:94:6c:7d:4e:24:39:b1:40:38:46:
                    aa:05:4d:ea:e4:6c:35:cb:69:e8:19:5c:a8:77:32:
                    c0:61:08:6c:91:41:47:9f:e6:1b:d8:8f:3f:ef:30:
                    e3:4e:42:60:6b:ff:00:b9:1a:d1:e0:ed:4a:f0:ed:
                    65:95:7d:77:19:d9:00:78:87:b6:c9:59:6e:94:a1:
                    46:a4:bb:de:b3:05:1e:03:a0:03:42:e5:f4:56:61:
                    e1:8a:41:1e:a0:be:48:f8:f5:1b:5b:24:d5:d4:31:
                    09:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F3:34:2F:DF:A5:B1:53:86:B9:6F:0C:C9:37:DE:C2:1C:1C:26:F1
            X509v3 Authority Key Identifier:
                keyid:09:D8:D4:A6:70:69:58:0E:34:F1:6A:B0:47:42:0B:D4:A0:8D:4F:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/34352e3136312e33362e302f32322d3332203d3e20323638353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:c9:f1:f8:20:f7:28:7e:f2:98:2b:69:cf:66:ea:ea:6a:fd:
         cf:ad:d8:aa:cb:a6:8b:9e:57:9b:f5:e9:3b:02:15:d5:8e:2c:
         5e:eb:75:32:15:86:53:df:09:26:5c:dd:6d:7d:43:b4:2a:ee:
         d7:de:3f:c2:b2:d5:96:40:d3:5c:f7:a0:1c:f9:11:6f:d6:a2:
         c3:2d:ce:30:ac:00:38:35:8d:cc:55:ad:d2:b6:54:d8:cd:5e:
         5b:76:6d:96:b7:10:6e:a9:39:04:49:2e:17:a9:96:bc:62:d5:
         24:f4:5f:e6:a5:b5:0a:49:1a:3f:1b:20:62:6c:11:05:ea:6d:
         8a:d3:6d:4a:9c:8a:12:d3:82:38:cf:06:0b:7e:c7:2b:9a:82:
         a1:62:9e:3a:4d:0c:46:35:4b:c5:51:b6:8a:f4:d7:b0:50:ce:
         60:af:0a:2e:97:2b:c0:99:22:69:0e:29:e0:70:b1:f7:fb:0a:
         83:30:cc:6b:fa:28:9c:e4:5c:dd:99:79:25:92:a3:34:bd:33:
         00:66:67:ed:cc:68:3d:8d:a7:81:74:19:75:d6:6c:5e:29:2a:
         50:a9:06:73:3a:4d:5e:7d:86:52:b2:81:8b:00:b5:b4:b8:17:
         22:9a:81:6e:20:16:37:a2:8e:91:5c:ef:05:42:c6:77:6f:f1:
         a6:00:1c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:31:05 2026 by rpki-client