Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/fvaYirFdgpW5PNBeffE4r2u6QiJiuAPKgpD8DnnpFSm/0/34352e3233382e3133342e302f32342d3234203d3e20323638333237.roa
File:                     34352e3233382e3133342e302f32342d3234203d3e20323638333237.roa (raw, json)
Hash identifier:          xa4ll0Qr6RRsi+BQNvqE/Ds9fhgC36Hx6O21nbkLLcE=
Subject key identifier:   F4:67:1C:CA:66:0F:99:CB:AE:15:05:69:73:F2:07:32:F0:0E:B7:C8
Certificate issuer:       /CN=4557D07B3F9FE20A850E1553C2D0E090F1E55D48
Certificate serial:       438BEE6F1074F646C30A45A6DA8DD6781CD7AF3F
Authority key identifier: 45:57:D0:7B:3F:9F:E2:0A:85:0E:15:53:C2:D0:E0:90:F1:E5:5D:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4557D07B3F9FE20A850E1553C2D0E090F1E55D48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/fvaYirFdgpW5PNBeffE4r2u6QiJiuAPKgpD8DnnpFSm/0/34352e3233382e3133342e302f32342d3234203d3e20323638333237.roa
Signing time:             Sat 18 Apr 2026 16:33:53 +0000
ROA not before:           Sat 18 Apr 2026 16:28:53 +0000
ROA not after:            Sat 17 Apr 2027 16:33:53 +0000
asID:                     268327
IP address blocks:        45.238.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/fvaYirFdgpW5PNBeffE4r2u6QiJiuAPKgpD8DnnpFSm/0/4557D07B3F9FE20A850E1553C2D0E090F1E55D48.crl
                          rsync://rpki-repo.registro.br/repo/fvaYirFdgpW5PNBeffE4r2u6QiJiuAPKgpD8DnnpFSm/0/4557D07B3F9FE20A850E1553C2D0E090F1E55D48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4557D07B3F9FE20A850E1553C2D0E090F1E55D48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 12:05:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:8b:ee:6f:10:74:f6:46:c3:0a:45:a6:da:8d:d6:78:1c:d7:af:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4557D07B3F9FE20A850E1553C2D0E090F1E55D48
        Validity
            Not Before: Apr 18 16:28:53 2026 GMT
            Not After : Apr 17 16:33:53 2027 GMT
        Subject: CN=F4671CCA660F99CBAE15056973F20732F00EB7C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:58:af:61:65:db:18:16:c3:7a:0c:ac:39:d1:
                    2d:46:cb:3e:1a:ae:0c:38:3f:08:b1:01:4f:f0:5b:
                    03:f3:5c:b5:d5:ef:02:ac:d6:52:28:5a:fa:a2:12:
                    ba:61:af:76:19:c8:ae:cc:a9:c2:fe:60:a2:09:fb:
                    d5:cd:2f:e7:75:96:34:f7:03:5a:27:51:52:cf:a6:
                    4d:c1:4b:15:88:51:47:d4:b5:3f:7b:9f:65:c7:28:
                    4b:b2:80:52:d6:15:17:4e:5f:2c:e4:cf:81:08:02:
                    b1:31:6a:65:e9:3b:56:8a:b8:b5:c3:9e:4a:21:74:
                    8c:8c:e3:4b:b2:66:26:89:2f:a0:2c:9f:d6:26:f5:
                    86:63:2e:7f:dc:f1:03:63:52:b3:96:0b:a3:f1:b9:
                    73:99:ff:81:f5:e2:da:90:bb:f6:84:19:6d:76:91:
                    b3:0f:65:e3:43:10:72:36:b3:15:93:b1:ee:37:b5:
                    58:2b:53:3b:5f:71:aa:fb:e0:0c:39:e2:ff:28:ac:
                    be:97:25:09:39:9a:35:cb:d7:cf:87:cb:a0:83:7f:
                    1e:e9:82:21:af:c9:a3:7f:db:9b:6e:88:eb:0f:40:
                    a1:6c:8d:6b:1d:ed:32:d6:e4:0c:71:11:8c:78:9e:
                    a3:73:47:2d:03:b7:dd:c8:73:28:82:b0:db:cc:05:
                    2f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:67:1C:CA:66:0F:99:CB:AE:15:05:69:73:F2:07:32:F0:0E:B7:C8
            X509v3 Authority Key Identifier:
                keyid:45:57:D0:7B:3F:9F:E2:0A:85:0E:15:53:C2:D0:E0:90:F1:E5:5D:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/fvaYirFdgpW5PNBeffE4r2u6QiJiuAPKgpD8DnnpFSm/0/4557D07B3F9FE20A850E1553C2D0E090F1E55D48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4557D07B3F9FE20A850E1553C2D0E090F1E55D48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/fvaYirFdgpW5PNBeffE4r2u6QiJiuAPKgpD8DnnpFSm/0/34352e3233382e3133342e302f32342d3234203d3e20323638333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:ba:5b:4d:c8:a7:69:bb:f8:61:20:73:9c:d0:6b:87:28:4b:
         9f:ba:65:e4:bd:a1:c7:eb:07:70:a2:cc:28:17:c7:8d:d3:2a:
         aa:3f:5c:1f:8c:a4:d5:b4:ce:ec:bb:72:9c:42:65:7b:a0:c8:
         ad:70:66:97:cf:b3:7e:de:a4:c7:aa:a0:cf:91:3b:a0:d3:49:
         4b:00:4f:d0:e0:a8:88:f8:1a:15:9e:1c:24:03:b9:03:7a:bb:
         ca:75:66:58:04:c4:21:3e:b5:b4:f6:70:e4:60:eb:ae:72:30:
         ef:1b:dc:cc:ac:2f:bf:7e:f1:fd:95:cd:63:7f:79:1c:57:7b:
         ec:76:3b:3e:98:47:3b:86:18:e8:8d:63:18:c6:ff:30:c7:58:
         0f:15:61:60:52:5e:47:7e:3c:f6:9b:c9:a3:e2:8c:3d:bc:37:
         0b:a5:15:12:8c:84:1f:88:91:49:31:e0:dd:38:12:c6:91:e8:
         51:6c:98:4a:da:67:f3:a5:24:fb:d9:30:47:f2:2a:6c:2e:e2:
         25:d6:a9:1a:9d:47:a2:0e:a6:6f:fa:f6:06:33:25:7d:22:4e:
         e6:fb:64:47:ea:e6:6f:30:27:6b:04:c1:f0:c4:b4:ab:ad:ca:
         f8:f9:b4:7e:fc:b6:a2:2c:8a:7a:cf:04:74:3e:38:d5:a3:b2:
         d3:3d:d6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:47:58 2026 by rpki-client