Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNMvoa3uRJ4xSP1f1RLMfwaDDRXU9g6xmvj2VqNjHzcW/0/34352e3136392e36382e302f32322d3332203d3e20323632343633.roa
File:                     34352e3136392e36382e302f32322d3332203d3e20323632343633.roa (raw, json)
Hash identifier:          LGLTlpobctUyNfRQiQNPQA8Sv6usg9/zOXkxTh7FnPI=
Subject key identifier:   E4:3A:F0:CF:75:62:34:73:87:A1:26:C6:0B:5C:62:EF:86:A6:00:A2
Certificate issuer:       /CN=5259EBF7121D2082AF3146252CEDBEC0A195A8F7
Certificate serial:       44D4CF5CDFBF308B8A69956ADDF51890B5B88E54
Authority key identifier: 52:59:EB:F7:12:1D:20:82:AF:31:46:25:2C:ED:BE:C0:A1:95:A8:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5259EBF7121D2082AF3146252CEDBEC0A195A8F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNMvoa3uRJ4xSP1f1RLMfwaDDRXU9g6xmvj2VqNjHzcW/0/34352e3136392e36382e302f32322d3332203d3e20323632343633.roa
Signing time:             Fri 20 Mar 2026 15:46:33 +0000
ROA not before:           Fri 20 Mar 2026 15:41:33 +0000
ROA not after:            Fri 19 Mar 2027 15:46:33 +0000
asID:                     262463
IP address blocks:        45.169.68.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DNMvoa3uRJ4xSP1f1RLMfwaDDRXU9g6xmvj2VqNjHzcW/0/5259EBF7121D2082AF3146252CEDBEC0A195A8F7.crl
                          rsync://rpki-repo.registro.br/repo/DNMvoa3uRJ4xSP1f1RLMfwaDDRXU9g6xmvj2VqNjHzcW/0/5259EBF7121D2082AF3146252CEDBEC0A195A8F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5259EBF7121D2082AF3146252CEDBEC0A195A8F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 21:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:d4:cf:5c:df:bf:30:8b:8a:69:95:6a:dd:f5:18:90:b5:b8:8e:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5259EBF7121D2082AF3146252CEDBEC0A195A8F7
        Validity
            Not Before: Mar 20 15:41:33 2026 GMT
            Not After : Mar 19 15:46:33 2027 GMT
        Subject: CN=E43AF0CF7562347387A126C60B5C62EF86A600A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e2:a4:45:98:b4:8f:cd:d7:71:68:ad:12:31:
                    b0:db:bb:0b:b9:35:9f:7f:80:e4:7f:78:45:43:a4:
                    51:33:f3:6f:5f:25:b3:ca:cd:d1:d5:d5:57:6c:65:
                    ad:d9:fc:3a:97:18:df:02:b1:93:12:86:9e:d5:e2:
                    50:26:75:bb:80:bb:24:7b:9b:ed:df:f3:74:9a:08:
                    b2:e6:e8:64:13:34:6f:b9:ff:f0:da:7e:4d:4f:89:
                    4c:04:91:f6:98:95:7a:bf:c4:ff:48:34:90:b9:d4:
                    c1:9d:f3:34:cc:70:9f:af:ef:ba:ad:9e:ac:fb:12:
                    07:1c:80:d1:e0:4d:16:1e:49:d8:ae:ea:67:07:78:
                    b8:96:0e:79:66:1b:6d:5e:ac:5c:91:9f:7b:59:37:
                    2a:7c:57:8d:93:c0:bd:ba:19:7c:74:32:e3:ce:7b:
                    94:f3:89:2e:c5:8f:65:fa:d4:6b:7a:52:8b:11:64:
                    6b:5b:e7:57:92:a0:e1:8d:19:c6:a8:ee:d6:51:09:
                    59:6c:71:7b:f7:1f:3e:f4:1f:68:1e:84:e5:43:32:
                    9a:9b:aa:ef:34:91:6e:a3:2c:38:95:c0:ab:50:76:
                    20:51:0b:5e:87:db:18:53:db:d4:c5:44:18:a8:d0:
                    07:ac:87:8a:90:52:0d:48:9b:84:12:99:7d:28:48:
                    f2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3A:F0:CF:75:62:34:73:87:A1:26:C6:0B:5C:62:EF:86:A6:00:A2
            X509v3 Authority Key Identifier:
                keyid:52:59:EB:F7:12:1D:20:82:AF:31:46:25:2C:ED:BE:C0:A1:95:A8:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNMvoa3uRJ4xSP1f1RLMfwaDDRXU9g6xmvj2VqNjHzcW/0/5259EBF7121D2082AF3146252CEDBEC0A195A8F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5259EBF7121D2082AF3146252CEDBEC0A195A8F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNMvoa3uRJ4xSP1f1RLMfwaDDRXU9g6xmvj2VqNjHzcW/0/34352e3136392e36382e302f32322d3332203d3e20323632343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:10:c5:4f:6f:c7:d1:a7:3a:51:bf:c0:a9:2b:61:bd:ab:a1:
         18:33:95:cb:b7:8b:18:e0:29:21:64:d0:74:4c:79:d9:92:d7:
         d6:fc:18:7b:21:51:cb:46:14:92:cb:e4:bc:7c:36:cb:40:e7:
         0c:a8:8d:ac:60:bd:b5:65:e5:64:e1:0d:1d:30:eb:cf:bc:47:
         58:7d:3f:9e:28:6d:22:97:cc:ed:1c:d4:20:89:e1:16:3e:bc:
         68:0e:7a:a6:07:d7:24:8d:d3:b5:52:c9:33:46:f1:4e:f1:04:
         3f:87:27:d0:63:7d:77:52:2b:84:40:74:8c:be:92:ca:a3:91:
         aa:b1:39:8a:71:d6:f1:d2:b9:7a:40:76:6b:65:20:dc:df:3a:
         55:ad:70:7a:72:84:62:9d:16:d7:04:aa:b3:54:0f:89:c6:56:
         3c:db:5e:24:e8:8c:13:6e:e8:15:35:57:12:cc:97:ce:28:cc:
         05:bc:4f:0c:11:77:e6:8f:0c:4e:5c:f4:60:ba:55:2a:b3:18:
         f1:e6:75:51:60:98:45:ba:6f:89:fe:c5:d5:e3:df:4d:31:18:
         0f:d4:11:55:97:96:1a:21:a6:1b:d1:23:d0:a0:f0:80:67:d1:
         83:4d:fe:60:82:6d:24:29:84:0c:d8:ab:1d:94:7e:9b:9f:d4:
         03:e4:e2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:52:16 2026 by rpki-client