Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdsBUmK3wUSpMneBWz694VPoRujxFudFpSKy47sgAnJu/0/34352e3139302e3233322e302f32322d3234203d3e20323639363534.roa
File:                     34352e3139302e3233322e302f32322d3234203d3e20323639363534.roa (raw, json)
Hash identifier:          BX6D6o1/t/lqBKAc0J6zv9UsLyl72SAJC6jhjIfHDcg=
Subject key identifier:   EB:C4:3D:03:D7:E8:C9:FC:CF:04:03:5A:EA:2A:F1:74:2A:33:30:26
Certificate issuer:       /CN=09E4273A68D797D63840748E60E804BC3FFF247D
Certificate serial:       20D335CB4FC06E736B847DA7953C813B3D67A605
Authority key identifier: 09:E4:27:3A:68:D7:97:D6:38:40:74:8E:60:E8:04:BC:3F:FF:24:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09E4273A68D797D63840748E60E804BC3FFF247D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdsBUmK3wUSpMneBWz694VPoRujxFudFpSKy47sgAnJu/0/34352e3139302e3233322e302f32322d3234203d3e20323639363534.roa
Signing time:             Mon 11 May 2026 14:26:58 +0000
ROA not before:           Mon 11 May 2026 14:21:58 +0000
ROA not after:            Mon 10 May 2027 14:26:58 +0000
asID:                     269654
IP address blocks:        45.190.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FdsBUmK3wUSpMneBWz694VPoRujxFudFpSKy47sgAnJu/0/09E4273A68D797D63840748E60E804BC3FFF247D.crl
                          rsync://rpki-repo.registro.br/repo/FdsBUmK3wUSpMneBWz694VPoRujxFudFpSKy47sgAnJu/0/09E4273A68D797D63840748E60E804BC3FFF247D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09E4273A68D797D63840748E60E804BC3FFF247D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:30:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:d3:35:cb:4f:c0:6e:73:6b:84:7d:a7:95:3c:81:3b:3d:67:a6:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09E4273A68D797D63840748E60E804BC3FFF247D
        Validity
            Not Before: May 11 14:21:58 2026 GMT
            Not After : May 10 14:26:58 2027 GMT
        Subject: CN=EBC43D03D7E8C9FCCF04035AEA2AF1742A333026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:87:b8:d5:98:68:1b:f8:25:b5:bd:2a:27:99:
                    07:f2:e9:87:51:4f:0f:c6:0e:ba:52:12:44:b9:bc:
                    bf:88:48:f4:d8:aa:aa:b9:65:8d:17:fc:19:27:36:
                    fa:64:70:3a:8c:d4:f6:4b:24:58:f2:47:6a:10:b3:
                    2a:e3:05:07:08:e3:1a:33:b5:4d:c5:01:0e:76:ba:
                    1b:1f:a2:1e:05:97:3e:ba:75:d5:3a:14:c8:e8:8e:
                    3d:d0:de:d0:19:8b:4a:8c:77:dc:ee:22:ad:fc:da:
                    14:7c:7b:e9:4a:1c:0e:1e:ef:6d:2d:1e:d3:9e:da:
                    ac:1a:42:42:d9:7f:47:03:5c:9a:10:32:fd:59:6a:
                    05:5d:81:da:85:f3:e3:65:8e:ca:44:d6:2e:90:e2:
                    08:91:0a:8e:6e:5f:55:e3:78:8a:68:f8:52:61:2a:
                    64:4a:2b:95:bc:78:0f:d3:63:de:cc:43:5e:4c:d0:
                    3b:7a:4b:e9:42:d3:fd:16:ad:96:be:02:80:ef:0c:
                    2d:ae:1d:c5:f7:3b:e3:77:41:4e:8c:fd:5c:2e:7a:
                    2a:35:c5:d4:d3:07:43:54:99:21:c1:15:28:5d:2b:
                    12:15:a1:f8:14:df:41:30:bf:21:12:fc:1a:a1:5c:
                    69:1e:f7:3a:af:8d:d5:7c:c9:4d:e4:68:b2:e4:f0:
                    4d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C4:3D:03:D7:E8:C9:FC:CF:04:03:5A:EA:2A:F1:74:2A:33:30:26
            X509v3 Authority Key Identifier:
                keyid:09:E4:27:3A:68:D7:97:D6:38:40:74:8E:60:E8:04:BC:3F:FF:24:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdsBUmK3wUSpMneBWz694VPoRujxFudFpSKy47sgAnJu/0/09E4273A68D797D63840748E60E804BC3FFF247D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09E4273A68D797D63840748E60E804BC3FFF247D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdsBUmK3wUSpMneBWz694VPoRujxFudFpSKy47sgAnJu/0/34352e3139302e3233322e302f32322d3234203d3e20323639363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:7f:ad:00:5a:f9:34:38:dc:0f:24:0d:96:7d:63:ce:9d:6e:
         db:fe:d4:bc:3b:13:ef:fb:b6:a1:ff:35:7c:0d:86:ae:5c:98:
         ab:25:14:42:06:30:ea:70:60:e4:04:d8:47:4d:c7:c3:38:71:
         8d:d0:68:af:05:80:f2:29:ea:b5:72:f1:d1:63:b6:c5:57:7b:
         e1:d0:c1:4c:f6:a1:5d:7f:b3:26:01:5f:16:5e:81:0e:6c:a8:
         1e:6d:a9:2d:f8:12:9b:7a:9a:7a:67:05:7c:ab:47:bd:53:8b:
         a1:5f:79:af:2b:6e:f2:fb:0f:f3:34:c3:4e:bb:4c:90:4d:fb:
         31:35:32:c0:c1:58:f2:1b:16:60:cc:ca:64:25:33:04:1d:aa:
         eb:b0:c3:47:7d:44:a4:4d:23:42:98:14:16:eb:bf:89:26:ff:
         62:b9:58:9e:2f:b5:06:28:1b:90:e9:65:63:25:d8:64:78:3f:
         f4:56:eb:ef:b5:b9:0f:9b:9c:99:ed:8f:f4:3e:ef:93:2c:3a:
         13:ce:df:d9:a0:bc:7c:7d:b8:4e:22:4a:af:2c:b6:5e:66:d2:
         00:11:d7:86:78:f0:c0:13:62:8f:cc:42:2b:eb:7f:68:64:2c:
         4d:a0:ba:e1:cb:f1:d5:1e:a5:f5:fd:be:6a:cb:9f:e9:c5:0f:
         0b:80:c5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:49:20 2026 by rpki-client