Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/34352e3138362e3234342e302f32322d3234203d3e20323639353236.roa
File:                     34352e3138362e3234342e302f32322d3234203d3e20323639353236.roa (raw, json)
Hash identifier:          rqIW7JiynhPLOMCIsloNDhZhPT/ItyyVwAza0u5BAX8=
Subject key identifier:   85:85:62:34:19:BC:65:C0:12:41:C7:2C:91:A0:27:88:69:DD:FA:DE
Certificate issuer:       /CN=992B3C07770D8B3613B80C9A82155291F2D9E544
Certificate serial:       66FE179757021658B399145F90CE9CE18F9D436B
Authority key identifier: 99:2B:3C:07:77:0D:8B:36:13:B8:0C:9A:82:15:52:91:F2:D9:E5:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/992B3C07770D8B3613B80C9A82155291F2D9E544.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/34352e3138362e3234342e302f32322d3234203d3e20323639353236.roa
Signing time:             Thu 23 Apr 2026 17:53:55 +0000
ROA not before:           Thu 23 Apr 2026 17:48:55 +0000
ROA not after:            Thu 22 Apr 2027 17:53:55 +0000
asID:                     269526
IP address blocks:        45.186.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/992B3C07770D8B3613B80C9A82155291F2D9E544.crl
                          rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/992B3C07770D8B3613B80C9A82155291F2D9E544.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/992B3C07770D8B3613B80C9A82155291F2D9E544.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 02:36:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:fe:17:97:57:02:16:58:b3:99:14:5f:90:ce:9c:e1:8f:9d:43:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=992B3C07770D8B3613B80C9A82155291F2D9E544
        Validity
            Not Before: Apr 23 17:48:55 2026 GMT
            Not After : Apr 22 17:53:55 2027 GMT
        Subject: CN=8585623419BC65C01241C72C91A0278869DDFADE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f7:95:77:fa:7e:3e:9a:a8:93:bd:d2:a8:af:
                    d2:1c:7d:d0:27:80:27:33:44:b9:9d:06:1a:0e:fc:
                    5d:64:b7:c3:77:2c:a6:5a:2c:46:de:73:59:30:be:
                    60:34:93:e7:45:5f:4d:69:78:b6:df:a5:5d:ad:6e:
                    26:63:d1:72:c3:c5:fe:18:3e:e7:34:4c:82:0e:f0:
                    9b:de:10:46:57:ee:4a:90:02:d4:14:1a:52:2d:5e:
                    7b:db:9e:cb:bb:54:9f:c3:26:58:48:cd:6d:2e:9e:
                    c2:c0:04:cc:d3:35:02:ea:e3:6f:15:ae:d0:e8:ff:
                    e5:5c:65:3c:1f:dd:7d:03:46:0d:23:c8:b8:d1:ce:
                    0b:21:5b:ac:d3:75:30:73:6b:58:d4:98:02:0c:b3:
                    79:ab:70:84:62:5c:99:e0:cc:29:c2:b1:6b:d3:cf:
                    4a:d8:29:54:18:b8:a8:31:6c:5f:33:f0:75:87:59:
                    64:dd:69:cd:c7:14:02:52:6c:66:46:dc:fd:ed:ad:
                    25:da:17:08:7e:6d:ac:86:93:54:19:15:b1:00:e9:
                    84:c0:4d:fa:ef:e1:30:63:61:b1:9a:62:2d:f9:ea:
                    63:38:46:92:7c:6d:03:40:65:9d:41:02:7a:55:2f:
                    1e:f9:17:79:e9:cd:ca:89:6a:69:61:22:fb:dd:ea:
                    cd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:85:62:34:19:BC:65:C0:12:41:C7:2C:91:A0:27:88:69:DD:FA:DE
            X509v3 Authority Key Identifier:
                keyid:99:2B:3C:07:77:0D:8B:36:13:B8:0C:9A:82:15:52:91:F2:D9:E5:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/992B3C07770D8B3613B80C9A82155291F2D9E544.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/992B3C07770D8B3613B80C9A82155291F2D9E544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/34352e3138362e3234342e302f32322d3234203d3e20323639353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:a1:b2:88:f5:5b:1e:53:71:95:fd:04:03:d8:47:15:36:f7:
         0e:f8:8f:5d:52:72:98:ff:82:ed:d4:72:5b:ea:22:c3:34:17:
         2d:e1:b9:68:9b:d0:3a:55:7d:8f:1d:e6:1f:2d:b1:bf:5a:d6:
         43:66:45:f9:70:d8:fb:cf:a2:92:30:5a:ea:e7:73:86:31:22:
         1c:ed:b5:1b:d1:ee:46:15:e8:d8:8e:1f:b1:5c:bd:fb:75:80:
         69:13:d9:75:27:02:dd:a3:ab:80:4d:37:0d:54:f7:17:74:5c:
         1a:1d:18:db:8d:b3:f1:de:96:a8:bc:ea:52:1a:e7:3c:14:b6:
         55:3f:93:94:8a:1b:03:fb:1e:5e:03:73:12:43:29:ba:50:05:
         27:c2:35:1c:8b:36:ff:17:3d:7a:ff:bf:25:ff:f1:89:54:5b:
         22:55:4f:7d:9f:89:5e:93:92:01:cc:7c:c1:80:40:86:29:3a:
         3e:a7:13:71:c1:ac:4d:f4:56:71:af:fd:c5:b3:fd:59:34:2c:
         f3:45:cc:ec:33:42:a9:07:f0:84:2d:b5:fa:87:98:24:de:92:
         bd:fe:7f:05:4c:02:5d:86:5c:ef:97:e6:36:c2:11:10:9c:88:
         0b:ac:84:bc:6a:3c:19:dc:0b:50:c8:24:ff:84:66:4e:d0:f1:
         36:64:1e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:36:28 2026 by rpki-client