Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3U7tgDixHkFD5EH9yzXWuSfE1DAW7shAf3SSoKwvt722/0/34352e3233372e3138302e302f32322d3234203d3e20323638323833.roa
File:                     34352e3233372e3138302e302f32322d3234203d3e20323638323833.roa (raw, json)
Hash identifier:          madq9DJvR1x86s2jEQqB5hBbH/bYtJxHhuSAtuuA2RQ=
Subject key identifier:   C4:C5:07:BE:78:22:25:D0:64:6D:33:75:DB:93:F4:30:D0:D4:C6:D0
Certificate issuer:       /CN=D9ED078552BAC279662C7AC0E3D7F6EA67DF5694
Certificate serial:       7ED07DB29137572035AB702E4A45736066C7F81A
Authority key identifier: D9:ED:07:85:52:BA:C2:79:66:2C:7A:C0:E3:D7:F6:EA:67:DF:56:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9ED078552BAC279662C7AC0E3D7F6EA67DF5694.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3U7tgDixHkFD5EH9yzXWuSfE1DAW7shAf3SSoKwvt722/0/34352e3233372e3138302e302f32322d3234203d3e20323638323833.roa
Signing time:             Tue 02 Jun 2026 17:35:08 +0000
ROA not before:           Tue 02 Jun 2026 17:30:08 +0000
ROA not after:            Tue 01 Jun 2027 17:35:08 +0000
asID:                     268283
IP address blocks:        45.237.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3U7tgDixHkFD5EH9yzXWuSfE1DAW7shAf3SSoKwvt722/0/D9ED078552BAC279662C7AC0E3D7F6EA67DF5694.crl
                          rsync://rpki-repo.registro.br/repo/3U7tgDixHkFD5EH9yzXWuSfE1DAW7shAf3SSoKwvt722/0/D9ED078552BAC279662C7AC0E3D7F6EA67DF5694.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9ED078552BAC279662C7AC0E3D7F6EA67DF5694.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 12:10:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d0:7d:b2:91:37:57:20:35:ab:70:2e:4a:45:73:60:66:c7:f8:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9ED078552BAC279662C7AC0E3D7F6EA67DF5694
        Validity
            Not Before: Jun  2 17:30:08 2026 GMT
            Not After : Jun  1 17:35:08 2027 GMT
        Subject: CN=C4C507BE782225D0646D3375DB93F430D0D4C6D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ff:85:98:7c:50:68:d9:cc:52:b1:5c:11:11:
                    0f:5b:da:e5:72:e4:b0:3b:54:07:99:26:31:fd:96:
                    2e:87:5f:b3:bf:fb:7e:a6:7d:19:6b:8a:cd:cb:db:
                    b4:56:84:23:a4:f8:af:97:0c:34:c1:d7:15:d9:b6:
                    7b:93:0c:20:6c:c4:e8:34:d8:7b:69:5d:f7:f8:b7:
                    b4:02:4d:f9:c4:e2:74:d5:a5:c2:71:1b:cf:c3:55:
                    b7:bb:24:18:db:f2:1f:7b:d3:4b:2c:6a:af:89:4d:
                    c6:bd:d2:b6:35:4e:51:38:32:ca:c5:bf:81:7b:05:
                    d7:b8:61:ed:15:c2:e1:bd:34:36:e4:c2:50:7c:b5:
                    77:16:cf:ea:82:d5:10:5d:49:51:a6:4a:44:51:fc:
                    fa:a7:2a:1a:fb:4e:a2:5a:52:c1:e1:b7:59:a3:bb:
                    11:e0:39:fb:89:f8:80:bf:49:92:cb:0d:47:f8:43:
                    dd:5f:42:fe:89:83:ba:57:6a:7f:7b:39:95:c0:f4:
                    21:48:9d:49:6b:22:55:85:3b:77:5b:05:5f:b0:0e:
                    75:60:09:2a:bb:bd:8f:ed:2e:c1:a7:20:1a:e7:3d:
                    9c:53:21:a2:d7:13:71:26:bf:38:60:a7:a3:75:3c:
                    ed:b3:47:ff:f5:a2:5d:40:b3:95:5d:fb:89:2a:dd:
                    bd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C5:07:BE:78:22:25:D0:64:6D:33:75:DB:93:F4:30:D0:D4:C6:D0
            X509v3 Authority Key Identifier:
                keyid:D9:ED:07:85:52:BA:C2:79:66:2C:7A:C0:E3:D7:F6:EA:67:DF:56:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3U7tgDixHkFD5EH9yzXWuSfE1DAW7shAf3SSoKwvt722/0/D9ED078552BAC279662C7AC0E3D7F6EA67DF5694.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9ED078552BAC279662C7AC0E3D7F6EA67DF5694.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3U7tgDixHkFD5EH9yzXWuSfE1DAW7shAf3SSoKwvt722/0/34352e3233372e3138302e302f32322d3234203d3e20323638323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:b1:3d:5c:4a:ae:92:64:ab:58:3d:25:34:53:74:b2:d0:dc:
         d1:cb:bf:18:bc:15:cb:60:56:0e:b4:30:52:8d:38:ec:fc:12:
         3f:fc:08:bc:e6:34:ba:7e:44:1a:3a:c6:47:7c:95:b5:a5:f5:
         f9:c5:23:3e:fd:1a:6f:8a:f6:f8:1b:ee:69:e8:b5:41:a2:aa:
         cf:06:e4:f2:df:b9:73:a2:46:00:bb:78:6a:99:20:ef:97:2c:
         2c:2c:3e:f3:fb:63:95:97:90:e7:0c:1c:76:84:63:ee:d4:83:
         06:5f:25:a7:ea:16:5e:ec:85:b8:03:77:07:24:a6:6a:71:8a:
         3e:47:ab:85:48:a6:72:55:0c:c3:6e:76:15:b2:85:19:f5:d3:
         03:ef:fa:f1:e5:46:98:a3:fd:fe:a6:bd:20:14:f0:04:11:2d:
         a5:b9:76:98:f9:58:c2:75:21:f9:43:38:06:b6:16:fd:53:ea:
         84:7b:c8:8c:f7:9d:e6:19:63:0d:77:e5:7c:f0:e7:15:ed:c5:
         61:88:ac:18:6d:ab:52:45:69:89:3d:93:f2:49:24:be:2a:de:
         43:ea:ff:ea:1a:62:ed:99:ce:26:5f:ab:1c:fc:86:c8:22:7a:
         f0:20:85:26:9e:ba:79:f2:50:3f:cc:96:66:7d:ce:26:14:54:
         10:8e:ca:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:38:17 2026 by rpki-client