Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/34352e3232362e3132302e302f32322d3234203d3e20323636343333.roa
File:                     34352e3232362e3132302e302f32322d3234203d3e20323636343333.roa (raw, json)
Hash identifier:          bq/avHgFH0HsgcbQt50baog36Chbp0nGRozXBFCTEGg=
Subject key identifier:   5B:45:08:FB:3D:5E:E9:AB:9F:1E:65:61:A4:A5:8F:6B:CD:F0:18:C6
Certificate issuer:       /CN=E4B0FA124B3B7D199E6A099F05777631A9F2C102
Certificate serial:       447E9D36058F4383CF33D894CC43A95355D0412E
Authority key identifier: E4:B0:FA:12:4B:3B:7D:19:9E:6A:09:9F:05:77:76:31:A9:F2:C1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/34352e3232362e3132302e302f32322d3234203d3e20323636343333.roa
Signing time:             Mon 11 May 2026 19:49:45 +0000
ROA not before:           Mon 11 May 2026 19:44:45 +0000
ROA not after:            Mon 10 May 2027 19:49:45 +0000
asID:                     266433
IP address blocks:        45.226.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.crl
                          rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 07:47:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:7e:9d:36:05:8f:43:83:cf:33:d8:94:cc:43:a9:53:55:d0:41:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4B0FA124B3B7D199E6A099F05777631A9F2C102
        Validity
            Not Before: May 11 19:44:45 2026 GMT
            Not After : May 10 19:49:45 2027 GMT
        Subject: CN=5B4508FB3D5EE9AB9F1E6561A4A58F6BCDF018C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0f:c5:cb:79:62:a3:ba:5a:33:15:58:58:4a:
                    2a:8c:7a:27:7f:37:e4:e9:73:f3:c1:ac:df:b1:83:
                    cb:5d:8d:d1:9c:b8:d2:99:7c:a9:eb:93:1f:32:cc:
                    f3:27:75:de:61:98:91:54:10:61:5e:26:7c:e3:84:
                    2c:f2:f5:62:99:99:80:42:4a:8a:83:2d:5f:7b:07:
                    c4:5a:08:37:32:f5:d3:4e:41:8a:89:4d:0b:99:24:
                    bf:3a:52:30:e1:3c:51:f6:98:99:83:39:41:25:66:
                    a0:e6:61:00:88:0c:8c:b1:38:a4:e2:5f:76:7f:ec:
                    43:e5:0e:a8:51:fb:e1:60:81:32:82:ed:af:58:ce:
                    7e:9a:7e:ba:87:68:7d:71:d7:38:38:68:10:61:88:
                    9b:35:41:3f:87:3d:58:cc:ad:53:39:54:41:b9:7b:
                    4c:4b:7e:4f:bf:7c:b0:38:a8:6b:6f:0f:c4:e2:b3:
                    4f:f7:1e:ad:aa:22:1a:4d:6b:1d:1c:4d:25:e2:e8:
                    da:19:67:ac:95:e5:72:d8:6a:e1:e8:4e:de:67:3f:
                    1c:8e:5d:44:70:4f:81:5f:b0:74:a6:32:15:86:4d:
                    49:c2:66:5b:da:a6:15:6d:c7:a1:ab:24:31:7b:d5:
                    71:2d:cc:94:e1:2d:17:af:37:4b:83:54:3b:e2:29:
                    61:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:45:08:FB:3D:5E:E9:AB:9F:1E:65:61:A4:A5:8F:6B:CD:F0:18:C6
            X509v3 Authority Key Identifier:
                keyid:E4:B0:FA:12:4B:3B:7D:19:9E:6A:09:9F:05:77:76:31:A9:F2:C1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/34352e3232362e3132302e302f32322d3234203d3e20323636343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:c3:de:cd:0c:60:25:02:ff:ec:7a:07:8e:e2:48:03:1c:3b:
         5c:5e:d8:a7:51:f7:09:c4:3e:1b:5c:a5:38:af:56:50:58:65:
         d4:30:d5:73:d2:6f:59:17:8f:f9:1c:9f:c8:9c:5c:7a:1e:f8:
         0e:ad:7c:32:3a:93:ad:4d:82:76:0c:67:76:49:bd:49:c6:49:
         14:b3:5c:3a:25:90:a2:06:14:4e:80:88:b3:f1:6c:f1:6f:69:
         99:4b:11:53:1c:ae:5e:80:cd:88:84:cf:da:59:78:df:6f:06:
         31:ec:9a:1e:e1:93:aa:c4:f9:f8:1c:07:c8:6e:24:38:eb:32:
         38:bf:2e:25:e8:5f:63:0a:3a:04:7f:67:df:52:37:30:89:54:
         59:cd:56:0f:1a:4b:20:ec:cf:7a:14:5a:13:cb:95:eb:09:ba:
         8b:1f:49:9d:2a:ed:6d:c7:4a:52:e3:ff:a6:15:b1:ad:fb:c5:
         7f:b9:93:70:f2:47:47:5e:5a:99:72:fa:7d:02:8d:70:93:97:
         89:c7:ee:13:6c:a5:7f:26:b6:a1:19:62:63:3d:d2:22:32:f2:
         11:b8:0c:2b:f0:ab:58:43:b0:65:7e:dc:73:a7:10:44:12:de:
         7c:ae:5e:35:67:db:1e:46:e5:ad:2a:8f:17:f3:9d:d6:30:f7:
         4e:e3:26:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:29:27 2026 by rpki-client