Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E29vThBtBVyfDZCDxeEwmD6mStM5mbKDFPrqNqD9wyTA/0/34352e3139302e3136302e302f32322d3234203d3e20323639363537.roa
File:                     34352e3139302e3136302e302f32322d3234203d3e20323639363537.roa (raw, json)
Hash identifier:          3CHT14x0XQobxytat/FXQl5+MeDtV9yYu8qrpY14vc0=
Subject key identifier:   A3:A4:2D:8B:07:B1:87:3A:2C:45:C1:2F:75:AA:A5:EE:F4:EC:BC:E1
Certificate issuer:       /CN=BABDA1E5DD18978FE597220650BC081786688477
Certificate serial:       52354EC4AEA97D7095CBE745CEBD342E2289254A
Authority key identifier: BA:BD:A1:E5:DD:18:97:8F:E5:97:22:06:50:BC:08:17:86:68:84:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BABDA1E5DD18978FE597220650BC081786688477.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E29vThBtBVyfDZCDxeEwmD6mStM5mbKDFPrqNqD9wyTA/0/34352e3139302e3136302e302f32322d3234203d3e20323639363537.roa
Signing time:             Mon 20 Apr 2026 14:37:37 +0000
ROA not before:           Mon 20 Apr 2026 14:32:37 +0000
ROA not after:            Mon 19 Apr 2027 14:37:37 +0000
asID:                     269657
IP address blocks:        45.190.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E29vThBtBVyfDZCDxeEwmD6mStM5mbKDFPrqNqD9wyTA/0/BABDA1E5DD18978FE597220650BC081786688477.crl
                          rsync://rpki-repo.registro.br/repo/E29vThBtBVyfDZCDxeEwmD6mStM5mbKDFPrqNqD9wyTA/0/BABDA1E5DD18978FE597220650BC081786688477.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BABDA1E5DD18978FE597220650BC081786688477.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 08:50:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:35:4e:c4:ae:a9:7d:70:95:cb:e7:45:ce:bd:34:2e:22:89:25:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BABDA1E5DD18978FE597220650BC081786688477
        Validity
            Not Before: Apr 20 14:32:37 2026 GMT
            Not After : Apr 19 14:37:37 2027 GMT
        Subject: CN=A3A42D8B07B1873A2C45C12F75AAA5EEF4ECBCE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:80:54:be:cf:ff:cc:89:ac:43:dc:c9:ff:0d:
                    a5:cc:ec:d2:8d:87:45:6e:87:ae:6d:18:06:9f:44:
                    3f:54:4c:df:19:2e:d3:b0:eb:37:35:58:de:df:f4:
                    cf:3d:c1:03:40:8b:56:f8:64:67:d7:fb:b2:90:71:
                    b0:4a:65:bb:1b:a8:c6:f2:e8:95:3e:1d:bd:ff:26:
                    2b:27:e7:3e:1c:88:75:dc:1e:2e:39:5d:b9:76:4c:
                    61:e3:1a:e4:f9:cc:68:d0:07:1a:fd:cb:45:e2:b8:
                    f0:99:87:a3:3b:20:4a:e6:fb:d2:d2:1f:34:95:92:
                    80:3e:d3:e8:09:26:6a:7a:35:35:b2:4c:74:bc:f5:
                    76:8f:20:d7:0a:4b:6a:e6:0b:34:b8:cd:f5:5a:33:
                    cc:c9:3e:de:df:17:0b:0a:a1:b8:3e:95:be:d8:d4:
                    5f:f6:c0:26:31:7f:53:e9:c3:a8:21:39:6a:3e:49:
                    ea:75:87:4e:76:0c:c7:25:02:4f:63:24:00:67:3e:
                    66:0e:4b:3a:11:de:76:bf:fa:c7:ce:ec:d3:b0:f1:
                    3b:54:42:a0:13:16:dd:60:5f:55:a3:04:37:59:a9:
                    ed:7a:76:e2:2e:fd:ec:12:0e:61:bb:f5:3a:92:b3:
                    f0:4c:50:c6:f3:89:0b:5f:c0:2b:9b:64:ab:7b:61:
                    99:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A4:2D:8B:07:B1:87:3A:2C:45:C1:2F:75:AA:A5:EE:F4:EC:BC:E1
            X509v3 Authority Key Identifier:
                keyid:BA:BD:A1:E5:DD:18:97:8F:E5:97:22:06:50:BC:08:17:86:68:84:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E29vThBtBVyfDZCDxeEwmD6mStM5mbKDFPrqNqD9wyTA/0/BABDA1E5DD18978FE597220650BC081786688477.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BABDA1E5DD18978FE597220650BC081786688477.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E29vThBtBVyfDZCDxeEwmD6mStM5mbKDFPrqNqD9wyTA/0/34352e3139302e3136302e302f32322d3234203d3e20323639363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:5a:8b:c5:29:36:4f:db:12:e2:89:0c:60:4e:ab:8d:7b:12:
         07:ad:e8:8e:ed:20:7a:2a:b7:c7:cb:da:fe:e6:f2:8a:08:6f:
         a0:7e:44:b3:ad:8b:5a:82:08:bc:63:fe:af:e0:16:10:87:94:
         40:35:c7:f5:be:93:5f:bd:5f:27:f0:94:aa:e5:a7:e5:8f:c7:
         4c:dc:b3:65:1c:40:73:ca:2f:9f:fe:82:ab:18:97:82:3f:1e:
         f4:b9:f8:bb:b9:a4:f4:8b:23:58:33:c5:4a:48:81:3e:1d:97:
         42:98:97:9b:f2:93:d9:b8:3b:cc:32:87:0f:04:32:e2:aa:d1:
         24:4f:b5:f0:a4:ed:54:d5:e0:b8:a2:2c:ea:90:84:7e:6f:af:
         42:3c:fe:5a:7b:60:86:7b:18:52:9a:2e:02:63:54:8d:7c:03:
         36:ac:9f:f3:5d:f8:0f:2b:41:0f:ab:27:09:6a:0e:30:55:bb:
         ca:57:04:05:0a:0a:5a:c2:6a:c9:2b:db:b5:f2:c4:4e:d8:91:
         ed:24:83:17:dc:1e:32:16:4c:4a:b0:5c:e6:26:39:fd:87:01:
         83:a4:0a:df:7f:5c:5d:3d:b2:cb:0f:1c:06:07:a0:c2:fc:60:
         90:4c:8f:1e:98:7c:e3:7e:c2:38:8d:8e:52:35:b4:2d:a6:ba:
         46:70:22:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:36:44 2026 by rpki-client