Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e382e302f32342d3234203d3e20323639353636.roa
File:                     34352e3138382e382e302f32342d3234203d3e20323639353636.roa (raw, json)
Hash identifier:          ngqM3y+SQkYjjhp4w6S3p48KiIdt3+V961cwZbcBlY8=
Subject key identifier:   FC:0C:CF:BC:5D:94:6D:05:CD:73:A7:97:8D:23:C9:3A:F4:24:BF:AE
Certificate issuer:       /CN=A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE
Certificate serial:       6AC690CE1602A906D25F205A36077ADC57DC6186
Authority key identifier: A4:E5:5E:18:A5:18:ED:BF:14:B0:96:3D:7B:F0:9E:3D:FF:66:69:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e382e302f32342d3234203d3e20323639353636.roa
Signing time:             Tue 28 Apr 2026 20:47:28 +0000
ROA not before:           Tue 28 Apr 2026 20:42:28 +0000
ROA not after:            Tue 27 Apr 2027 20:47:28 +0000
asID:                     269566
IP address blocks:        45.188.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE.crl
                          rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 16:34:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c6:90:ce:16:02:a9:06:d2:5f:20:5a:36:07:7a:dc:57:dc:61:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE
        Validity
            Not Before: Apr 28 20:42:28 2026 GMT
            Not After : Apr 27 20:47:28 2027 GMT
        Subject: CN=FC0CCFBC5D946D05CD73A7978D23C93AF424BFAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c5:04:b7:e2:18:75:50:8f:16:c1:74:70:ac:
                    3d:ef:75:c2:03:ba:22:f6:85:1d:4f:7b:36:c9:06:
                    79:ef:94:75:d7:4b:fe:d5:a4:54:64:4b:95:1f:49:
                    48:64:48:9d:e8:50:f7:33:71:0e:11:b2:80:d0:c3:
                    db:3f:83:28:24:79:01:28:8b:44:fe:0d:ed:0c:bb:
                    ff:b5:cc:23:41:35:2f:c5:cd:61:b4:09:1f:4f:27:
                    ff:74:29:8e:b5:1e:c0:f8:ea:14:cd:db:dd:4e:3b:
                    b2:17:8f:70:ba:b3:ba:6b:23:9f:6c:4f:6e:0a:32:
                    11:16:bd:11:d2:d1:60:4d:e8:ba:b8:71:5c:93:9d:
                    1b:43:3f:62:a8:a5:b0:28:f9:0a:cb:b3:76:91:e2:
                    d4:3f:6a:24:53:c7:af:6a:6c:f2:cf:c8:b8:72:be:
                    ed:c9:de:cc:3b:68:d8:72:b4:4b:33:97:cb:17:d8:
                    b5:37:20:d2:a1:9c:55:40:ef:0b:72:bf:12:53:03:
                    b2:ac:71:42:50:a6:cc:20:36:fd:58:f3:6a:e1:95:
                    9b:38:c9:22:b6:02:83:46:7d:37:b1:81:c8:c2:15:
                    e9:45:ee:16:e7:58:44:93:e4:7b:f1:ce:84:c6:43:
                    45:17:c0:64:6d:d8:3e:7f:09:18:e0:db:38:2e:58:
                    81:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:0C:CF:BC:5D:94:6D:05:CD:73:A7:97:8D:23:C9:3A:F4:24:BF:AE
            X509v3 Authority Key Identifier:
                keyid:A4:E5:5E:18:A5:18:ED:BF:14:B0:96:3D:7B:F0:9E:3D:FF:66:69:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e382e302f32342d3234203d3e20323639353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:78:a1:02:26:f3:7a:0a:f7:85:cc:8d:7c:aa:96:f7:d8:d2:
         5c:c3:0d:1f:a5:9e:84:52:53:9a:69:74:5b:f2:b7:8f:5e:c6:
         ea:20:53:14:b6:31:42:49:2a:d9:ce:c1:49:31:87:a6:5a:59:
         b4:a6:c1:d3:04:b3:dc:11:10:06:b2:27:5f:01:08:86:56:a8:
         c8:6c:9d:d5:86:1d:98:a8:a7:d3:9e:13:f8:88:c8:58:c3:dc:
         5c:97:44:5c:70:df:36:ee:3e:bd:1c:09:60:1e:b4:b2:57:d6:
         2f:2f:fa:9f:4a:06:88:9d:93:7e:78:6f:c0:6a:6f:9a:a9:24:
         f8:98:79:4b:54:a5:51:df:3a:34:63:b6:43:6d:db:48:ad:f9:
         cd:e6:c8:da:70:f1:04:cd:f2:52:5e:85:09:de:aa:bb:e3:1a:
         85:6e:d5:51:7a:cf:9b:d2:5b:99:4b:22:67:a6:c0:43:0d:ac:
         74:41:d9:0a:de:82:cb:dd:5e:a9:6f:39:e8:d5:4a:c0:c6:c1:
         72:83:25:8e:6f:76:f4:43:0a:60:49:07:49:30:4e:97:dc:0c:
         5f:24:c6:0e:3c:a3:dc:3b:c1:23:10:76:9f:63:08:48:e2:28:
         95:e3:1a:76:af:66:95:93:12:e0:6f:e6:3c:13:56:06:c4:a7:
         4f:92:52:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:34:33 2026 by rpki-client