Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/fvaYirFdgpW5PNBeffE4r2u6QiJiuAPKgpD8DnnpFSm/0/34352e3233382e3133352e302f32342d3234203d3e20323638333237.roa
File:                     34352e3233382e3133352e302f32342d3234203d3e20323638333237.roa (raw, json)
Hash identifier:          MsNR1QDIr1DjPwnpwLf77/9IeS5zb6WX1Gez2dYahhw=
Subject key identifier:   A8:41:27:0C:ED:72:DB:4E:D0:BB:60:70:35:1E:D4:3B:79:01:99:B0
Certificate issuer:       /CN=4557D07B3F9FE20A850E1553C2D0E090F1E55D48
Certificate serial:       64B51ECF872B47ADCA07FC0D32FC0C5357B4A09A
Authority key identifier: 45:57:D0:7B:3F:9F:E2:0A:85:0E:15:53:C2:D0:E0:90:F1:E5:5D:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4557D07B3F9FE20A850E1553C2D0E090F1E55D48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/fvaYirFdgpW5PNBeffE4r2u6QiJiuAPKgpD8DnnpFSm/0/34352e3233382e3133352e302f32342d3234203d3e20323638333237.roa
Signing time:             Sat 18 Apr 2026 16:33:49 +0000
ROA not before:           Sat 18 Apr 2026 16:28:49 +0000
ROA not after:            Sat 17 Apr 2027 16:33:49 +0000
asID:                     268327
IP address blocks:        45.238.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/fvaYirFdgpW5PNBeffE4r2u6QiJiuAPKgpD8DnnpFSm/0/4557D07B3F9FE20A850E1553C2D0E090F1E55D48.crl
                          rsync://rpki-repo.registro.br/repo/fvaYirFdgpW5PNBeffE4r2u6QiJiuAPKgpD8DnnpFSm/0/4557D07B3F9FE20A850E1553C2D0E090F1E55D48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4557D07B3F9FE20A850E1553C2D0E090F1E55D48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 12:05:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b5:1e:cf:87:2b:47:ad:ca:07:fc:0d:32:fc:0c:53:57:b4:a0:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4557D07B3F9FE20A850E1553C2D0E090F1E55D48
        Validity
            Not Before: Apr 18 16:28:49 2026 GMT
            Not After : Apr 17 16:33:49 2027 GMT
        Subject: CN=A841270CED72DB4ED0BB6070351ED43B790199B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b5:42:40:d6:be:f1:48:48:1a:cf:f4:89:30:
                    d9:72:d3:e2:19:3a:e9:5b:d7:6c:7a:12:15:63:fb:
                    d1:6c:9b:d8:54:bb:79:7e:db:bb:46:32:1e:8b:65:
                    bb:be:f8:94:63:04:0e:b1:2c:36:14:6b:b6:f4:6f:
                    71:3d:bd:40:32:6d:51:dd:e2:ec:23:18:62:f5:68:
                    d0:ed:08:86:50:87:f6:25:b2:38:b6:fb:11:66:6f:
                    86:cc:8a:ef:7c:56:86:85:7d:89:b0:b6:32:bb:63:
                    8a:4d:c4:2e:37:c5:45:d6:46:84:c7:04:f8:60:1e:
                    e2:75:5a:80:d5:c3:1c:4e:c8:cc:1a:af:d5:d0:8a:
                    b5:4c:ca:b0:18:18:19:cd:1c:8f:89:64:a5:c3:df:
                    90:32:88:72:e7:5f:4e:b6:c1:28:1c:22:b2:02:25:
                    a7:27:9a:c2:40:bf:30:ac:df:45:0c:7b:ee:a2:99:
                    d3:3b:4e:2a:76:48:85:9a:c8:a2:df:32:4c:9f:e9:
                    30:60:8c:79:01:b2:2e:67:a3:af:d5:4c:8a:0a:cb:
                    dc:f3:2c:e1:46:85:40:8c:c0:75:a6:b5:23:f6:1b:
                    b7:79:94:53:d6:76:2b:33:13:90:26:87:ac:18:4d:
                    e6:56:df:67:74:d8:c8:48:80:c8:0a:e8:7c:3f:51:
                    be:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:41:27:0C:ED:72:DB:4E:D0:BB:60:70:35:1E:D4:3B:79:01:99:B0
            X509v3 Authority Key Identifier:
                keyid:45:57:D0:7B:3F:9F:E2:0A:85:0E:15:53:C2:D0:E0:90:F1:E5:5D:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/fvaYirFdgpW5PNBeffE4r2u6QiJiuAPKgpD8DnnpFSm/0/4557D07B3F9FE20A850E1553C2D0E090F1E55D48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4557D07B3F9FE20A850E1553C2D0E090F1E55D48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/fvaYirFdgpW5PNBeffE4r2u6QiJiuAPKgpD8DnnpFSm/0/34352e3233382e3133352e302f32342d3234203d3e20323638333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:19:26:26:10:3f:45:3f:81:99:21:71:76:5b:20:9b:03:e6:
         aa:35:cc:42:89:30:b1:01:e0:23:7e:00:0f:95:a7:c7:b7:a1:
         42:81:68:72:8d:6f:d4:a2:48:36:12:9f:85:4d:01:df:a6:ee:
         5b:17:49:22:84:c7:c3:54:ef:4b:d5:09:8e:0d:39:13:95:2e:
         75:af:4c:25:c8:b9:fb:e3:0f:5c:87:7b:b4:1f:17:44:0f:bc:
         3a:8f:85:c4:fd:96:9c:12:28:eb:3a:12:94:17:c1:ee:36:8b:
         45:f5:f2:6f:92:4a:31:84:9e:9e:ee:a4:b3:04:54:fd:f3:8f:
         3c:b1:91:6a:78:4d:89:a9:87:03:0c:b4:cf:eb:17:ef:c0:e8:
         ac:31:1f:63:7c:57:82:da:e7:fe:13:fe:c7:f3:43:d9:cf:63:
         0f:e6:4e:2a:e5:69:e0:ed:20:5b:25:ba:72:00:49:f8:6a:c3:
         fa:8b:eb:43:30:2a:42:a0:52:2c:ce:0c:ae:51:60:a8:7c:03:
         30:53:3d:d6:13:c3:b6:97:25:06:33:9e:0c:7f:a4:f8:ee:62:
         12:74:c9:55:8d:e4:9c:84:e2:56:db:72:13:8f:12:04:45:e5:
         b9:11:36:18:b6:14:19:f7:36:38:2a:e7:d1:65:9e:ea:f7:b0:
         57:f6:27:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:15:54 2026 by rpki-client