Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEkfVedQopHejdTfHNXx8ucNrsjDjHQFLagrn7LtrF5F/0/34352e3138302e33322e302f32322d3332203d3e20323639313632.roa
File:                     34352e3138302e33322e302f32322d3332203d3e20323639313632.roa (raw, json)
Hash identifier:          RG8gxCz8pxxRyQiRFYJKtOLr6pLOXT2Khi+en1tnFZg=
Subject key identifier:   4F:C2:10:E8:26:3B:DA:D2:5A:0E:29:5F:61:DE:E3:C5:12:52:14:A2
Certificate issuer:       /CN=A126D1120D5D651106DDC682FBEC6933CF34427F
Certificate serial:       0D9AB64AAF7F1C30EA08E35CC4A3963D0891807C
Authority key identifier: A1:26:D1:12:0D:5D:65:11:06:DD:C6:82:FB:EC:69:33:CF:34:42:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A126D1120D5D651106DDC682FBEC6933CF34427F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEkfVedQopHejdTfHNXx8ucNrsjDjHQFLagrn7LtrF5F/0/34352e3138302e33322e302f32322d3332203d3e20323639313632.roa
Signing time:             Tue 14 Jul 2026 02:24:04 +0000
ROA not before:           Tue 14 Jul 2026 02:19:04 +0000
ROA not after:            Tue 13 Jul 2027 02:24:04 +0000
asID:                     269162
IP address blocks:        45.180.32.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HEkfVedQopHejdTfHNXx8ucNrsjDjHQFLagrn7LtrF5F/0/A126D1120D5D651106DDC682FBEC6933CF34427F.crl
                          rsync://rpki-repo.registro.br/repo/HEkfVedQopHejdTfHNXx8ucNrsjDjHQFLagrn7LtrF5F/0/A126D1120D5D651106DDC682FBEC6933CF34427F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A126D1120D5D651106DDC682FBEC6933CF34427F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 08:46:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:9a:b6:4a:af:7f:1c:30:ea:08:e3:5c:c4:a3:96:3d:08:91:80:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A126D1120D5D651106DDC682FBEC6933CF34427F
        Validity
            Not Before: Jul 14 02:19:04 2026 GMT
            Not After : Jul 13 02:24:04 2027 GMT
        Subject: CN=4FC210E8263BDAD25A0E295F61DEE3C5125214A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d2:ec:2f:e6:1c:d5:f5:8e:1f:bd:48:2f:0d:
                    1f:c7:43:6b:02:6b:ff:3b:24:f1:44:77:90:28:44:
                    a3:e9:4a:19:9e:07:e7:39:a3:ee:e9:97:33:1b:36:
                    86:75:bc:56:05:30:f9:74:ec:d4:2f:05:1b:47:e7:
                    64:a4:27:88:6e:85:9b:d6:a4:81:71:9e:ed:3d:e4:
                    bf:e9:92:fb:e3:23:b7:8a:7b:f4:fa:4a:8f:c1:3b:
                    25:2f:e3:4e:57:b3:08:1a:71:97:3b:f9:9a:ad:86:
                    57:bd:1f:a6:39:a9:fd:fb:6f:55:4d:12:6a:c5:77:
                    91:6d:50:11:ed:2b:92:56:ca:55:1d:ad:d9:8f:c0:
                    32:fc:b5:eb:64:16:52:57:69:36:61:65:01:70:55:
                    a0:4b:64:19:d9:d3:7e:cd:75:d8:d2:ef:79:2b:bd:
                    50:c2:e2:13:9e:0e:03:80:0b:bd:d3:30:83:2f:b9:
                    6e:a4:8e:b7:a9:59:ad:22:66:90:b3:6d:36:6b:e3:
                    2b:8e:4e:7c:cb:1c:04:8f:36:f1:1c:51:24:e9:80:
                    fe:54:99:dc:73:37:cc:06:4d:0e:f0:d6:75:3c:00:
                    c3:d2:84:d3:89:cc:bb:9c:15:40:29:ab:5b:69:28:
                    87:8f:96:a2:15:fb:f3:5c:5f:bf:bd:82:de:05:24:
                    f9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C2:10:E8:26:3B:DA:D2:5A:0E:29:5F:61:DE:E3:C5:12:52:14:A2
            X509v3 Authority Key Identifier:
                keyid:A1:26:D1:12:0D:5D:65:11:06:DD:C6:82:FB:EC:69:33:CF:34:42:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEkfVedQopHejdTfHNXx8ucNrsjDjHQFLagrn7LtrF5F/0/A126D1120D5D651106DDC682FBEC6933CF34427F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A126D1120D5D651106DDC682FBEC6933CF34427F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEkfVedQopHejdTfHNXx8ucNrsjDjHQFLagrn7LtrF5F/0/34352e3138302e33322e302f32322d3332203d3e20323639313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:ff:ab:30:0c:69:3e:97:36:f3:8e:c8:2d:ec:b8:22:33:b6:
         8e:93:59:fd:1e:37:e4:2c:da:21:1b:9c:73:52:e1:0c:6f:b9:
         0c:9b:40:29:38:cf:40:62:2f:80:1b:8c:34:71:18:af:be:7f:
         c6:60:16:1d:7c:89:57:d2:f4:58:4e:b7:c3:9d:9a:aa:c8:d4:
         23:f9:26:5a:07:81:85:03:99:75:80:b4:a8:19:a3:59:08:2c:
         95:49:39:a0:49:3f:24:8f:a2:ba:b2:ac:d4:93:de:1d:b6:d0:
         c2:5f:c3:e7:e6:54:3e:f9:f4:1f:33:1d:44:eb:50:04:6a:9c:
         b8:04:00:96:d5:dd:37:a1:34:23:13:78:f2:ba:35:7a:d7:04:
         29:94:ac:e1:88:70:bc:0c:8d:16:00:40:6c:6c:f9:37:e9:02:
         21:85:d9:eb:94:03:0a:34:34:ef:b5:45:79:4e:d6:0c:e0:59:
         00:a1:80:bd:f2:e5:75:aa:17:d3:70:32:b5:a9:a7:03:e0:44:
         4f:01:2c:1b:f1:37:5c:b9:1a:c5:94:2f:5e:38:06:d7:ad:7c:
         fd:85:cc:54:8b:82:a2:2e:d7:66:7f:65:87:f4:ff:b1:ce:1a:
         78:55:a8:13:12:28:57:66:2f:c6:50:1a:b6:40:83:24:29:5b:
         0e:d8:ca:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:34:08 2026 by rpki-client