Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/fvaYirFdgpW5PNBeffE4r2u6QiJiuAPKgpD8DnnpFSm/0/34352e3233382e3133342e302f32332d3233203d3e20323638333237.roa
File:                     34352e3233382e3133342e302f32332d3233203d3e20323638333237.roa (raw, json)
Hash identifier:          6lvmmZ59NKMW53nElGXIfEn4zrI0F1yMEVjOt6rBmvI=
Subject key identifier:   CB:BA:BF:E4:3F:A8:7E:6D:8E:2F:5E:06:F8:BF:C5:CD:83:F2:D1:75
Certificate issuer:       /CN=4557D07B3F9FE20A850E1553C2D0E090F1E55D48
Certificate serial:       0A95D6D80DBD5E7E21E92A47ABBB295D70FC7DA1
Authority key identifier: 45:57:D0:7B:3F:9F:E2:0A:85:0E:15:53:C2:D0:E0:90:F1:E5:5D:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4557D07B3F9FE20A850E1553C2D0E090F1E55D48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/fvaYirFdgpW5PNBeffE4r2u6QiJiuAPKgpD8DnnpFSm/0/34352e3233382e3133342e302f32332d3233203d3e20323638333237.roa
Signing time:             Sat 18 Apr 2026 16:33:58 +0000
ROA not before:           Sat 18 Apr 2026 16:28:58 +0000
ROA not after:            Sat 17 Apr 2027 16:33:58 +0000
asID:                     268327
IP address blocks:        45.238.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/fvaYirFdgpW5PNBeffE4r2u6QiJiuAPKgpD8DnnpFSm/0/4557D07B3F9FE20A850E1553C2D0E090F1E55D48.crl
                          rsync://rpki-repo.registro.br/repo/fvaYirFdgpW5PNBeffE4r2u6QiJiuAPKgpD8DnnpFSm/0/4557D07B3F9FE20A850E1553C2D0E090F1E55D48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4557D07B3F9FE20A850E1553C2D0E090F1E55D48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 12:05:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:95:d6:d8:0d:bd:5e:7e:21:e9:2a:47:ab:bb:29:5d:70:fc:7d:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4557D07B3F9FE20A850E1553C2D0E090F1E55D48
        Validity
            Not Before: Apr 18 16:28:58 2026 GMT
            Not After : Apr 17 16:33:58 2027 GMT
        Subject: CN=CBBABFE43FA87E6D8E2F5E06F8BFC5CD83F2D175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d0:4b:f3:83:d8:3a:75:84:4f:ea:b8:19:13:
                    47:1e:19:86:30:32:90:bb:25:d3:a0:6b:eb:77:48:
                    13:ff:8e:c9:86:48:a4:f8:0f:e4:97:49:b8:10:7b:
                    68:f1:91:61:8c:c6:04:2d:37:49:6f:ab:f2:dc:ed:
                    a8:95:a1:d9:1e:17:bc:91:94:5b:dc:e6:49:06:91:
                    7f:e7:9c:54:6a:54:d6:7a:14:6d:2f:99:a5:44:53:
                    85:db:d5:77:35:64:08:ec:75:54:00:ec:ec:20:30:
                    2c:e1:56:ee:54:21:0e:55:64:a3:d1:61:76:db:4b:
                    48:ce:ea:cf:12:ca:cf:3b:ab:97:37:d8:35:45:91:
                    73:be:94:46:3c:34:aa:87:6a:90:ab:9c:ed:c9:9b:
                    47:6f:4d:6a:3e:a7:60:a3:07:77:f4:b1:c1:49:3c:
                    cf:83:26:5d:4c:90:77:09:86:71:f8:9b:10:68:78:
                    49:a9:9e:9c:70:f0:66:1b:ca:d2:10:78:ca:8c:84:
                    09:f9:5b:a1:e8:49:86:eb:e0:3a:53:41:0b:42:71:
                    f9:29:82:7f:ba:a2:91:b3:5d:c1:5c:a4:4b:04:10:
                    4a:e7:84:9f:fd:1c:41:3f:ea:f7:10:be:45:d5:f2:
                    4f:54:5f:cf:47:fa:09:68:c1:74:a2:f3:c9:21:39:
                    e8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:BA:BF:E4:3F:A8:7E:6D:8E:2F:5E:06:F8:BF:C5:CD:83:F2:D1:75
            X509v3 Authority Key Identifier:
                keyid:45:57:D0:7B:3F:9F:E2:0A:85:0E:15:53:C2:D0:E0:90:F1:E5:5D:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/fvaYirFdgpW5PNBeffE4r2u6QiJiuAPKgpD8DnnpFSm/0/4557D07B3F9FE20A850E1553C2D0E090F1E55D48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4557D07B3F9FE20A850E1553C2D0E090F1E55D48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/fvaYirFdgpW5PNBeffE4r2u6QiJiuAPKgpD8DnnpFSm/0/34352e3233382e3133342e302f32332d3233203d3e20323638333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:8e:6f:f3:df:04:b8:fc:ff:77:ed:39:78:09:74:e2:53:27:
         04:f2:f1:76:0e:ff:a5:8a:c8:03:ec:0a:3e:68:b3:7d:36:36:
         93:25:15:98:6d:99:13:4c:26:59:3a:94:78:0b:65:54:12:af:
         39:5a:5a:44:40:f2:ca:1a:84:b1:f7:69:09:36:4c:79:da:5f:
         02:5d:49:4f:c6:2e:92:a0:f0:e4:eb:a2:f5:71:93:29:14:a0:
         12:8e:13:bc:ac:72:ae:75:ac:c2:cf:42:6b:ad:fc:11:b2:b5:
         3e:56:48:a0:bf:33:bc:18:3b:00:5f:e9:36:48:31:f2:33:3d:
         b1:db:22:7b:8f:17:3f:ec:5d:e7:e7:eb:51:c3:0d:77:89:10:
         a4:04:4d:25:ba:17:6c:0e:1b:46:cc:76:86:6f:d4:46:f6:d7:
         b7:60:38:aa:b4:7b:7b:f1:3a:76:d2:ce:84:9d:20:fd:43:63:
         22:2e:8b:cb:58:f7:f4:7b:b4:5d:74:58:16:5d:2c:23:14:5c:
         05:22:04:da:f0:3f:44:89:c7:e5:b1:c5:6d:47:77:ea:f8:c8:
         a5:75:18:38:9f:10:46:ef:da:3c:cf:ad:03:ca:ce:76:26:7a:
         8d:d2:cd:96:89:34:d3:c7:93:3d:7f:9d:5c:cb:63:dc:bb:60:
         63:c9:12:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:48:05 2026 by rpki-client