Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/34352e3138342e3139362e302f32332d3233203d3e20323639333432.roa
File:                     34352e3138342e3139362e302f32332d3233203d3e20323639333432.roa (raw, json)
Hash identifier:          6FPxOBSX70/y1vu//csOii62Wa92xYvXgzqKD1WEXCA=
Subject key identifier:   C4:95:23:D1:F5:8E:76:AA:F8:01:B4:13:3D:89:73:3B:2E:0A:33:AD
Certificate issuer:       /CN=DDEDE0E3E533477AAAB19E2CB811C826B145F53E
Certificate serial:       0671D95403F791FE6CDB0B3EAE89D2BAD0F84707
Authority key identifier: DD:ED:E0:E3:E5:33:47:7A:AA:B1:9E:2C:B8:11:C8:26:B1:45:F5:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDEDE0E3E533477AAAB19E2CB811C826B145F53E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/34352e3138342e3139362e302f32332d3233203d3e20323639333432.roa
Signing time:             Fri 05 Jun 2026 11:03:48 +0000
ROA not before:           Fri 05 Jun 2026 10:58:48 +0000
ROA not after:            Fri 04 Jun 2027 11:03:48 +0000
asID:                     269342
IP address blocks:        45.184.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/DDEDE0E3E533477AAAB19E2CB811C826B145F53E.crl
                          rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/DDEDE0E3E533477AAAB19E2CB811C826B145F53E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDEDE0E3E533477AAAB19E2CB811C826B145F53E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 19:24:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:71:d9:54:03:f7:91:fe:6c:db:0b:3e:ae:89:d2:ba:d0:f8:47:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDEDE0E3E533477AAAB19E2CB811C826B145F53E
        Validity
            Not Before: Jun  5 10:58:48 2026 GMT
            Not After : Jun  4 11:03:48 2027 GMT
        Subject: CN=C49523D1F58E76AAF801B4133D89733B2E0A33AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ba:c7:de:ec:43:46:15:03:da:e8:81:24:76:
                    46:28:5f:0e:55:2b:7c:1c:09:4a:d3:17:29:be:0b:
                    2c:c2:1f:11:86:ef:da:8e:87:ea:06:f5:69:b2:66:
                    21:39:45:ca:04:68:0a:85:4a:14:99:3a:ee:71:7c:
                    86:f5:4b:de:5b:70:d4:71:f5:60:97:2f:65:d9:44:
                    08:46:8d:37:44:3d:8b:88:cd:e1:23:c8:c8:de:11:
                    6d:fe:2f:c1:1e:2b:64:a5:b3:e1:80:fd:e0:96:f9:
                    8d:bb:37:4b:9b:5d:fe:3b:fb:77:2d:6f:e9:24:c0:
                    8e:f6:7b:3e:e6:a9:9a:23:7c:70:70:6f:d3:d9:7c:
                    52:a8:1c:26:52:d7:82:19:a4:16:05:d2:78:b8:30:
                    3a:e2:f3:b0:28:7b:92:28:e9:06:fc:33:00:76:7f:
                    68:87:8a:92:61:f3:9b:9d:87:42:8b:dc:22:8d:65:
                    76:43:16:e5:fe:a7:60:87:53:4f:ac:86:4c:18:8a:
                    03:a3:1a:c8:a3:68:24:ed:c3:d4:83:d1:9b:ce:01:
                    74:72:a9:78:7c:54:7a:69:5f:0a:22:9b:3b:4d:42:
                    0c:f0:61:d6:28:0f:a6:8f:e3:30:b3:88:f6:80:32:
                    98:93:4a:1e:a9:50:99:b7:6d:0b:fd:86:27:d3:ea:
                    3e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:95:23:D1:F5:8E:76:AA:F8:01:B4:13:3D:89:73:3B:2E:0A:33:AD
            X509v3 Authority Key Identifier:
                keyid:DD:ED:E0:E3:E5:33:47:7A:AA:B1:9E:2C:B8:11:C8:26:B1:45:F5:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/DDEDE0E3E533477AAAB19E2CB811C826B145F53E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDEDE0E3E533477AAAB19E2CB811C826B145F53E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/34352e3138342e3139362e302f32332d3233203d3e20323639333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:68:16:e5:64:0e:5d:e4:9d:f0:e6:1c:97:09:1d:df:7a:26:
         88:58:ef:49:a7:0b:4a:45:8e:29:c0:84:3b:af:c3:fc:5c:a0:
         5f:fc:29:78:23:85:5a:9f:4d:e2:e9:6d:83:8d:12:0e:10:8d:
         35:c6:dc:06:f4:d9:e5:f4:9b:08:e4:d3:02:2a:14:c7:7c:fb:
         34:f3:42:29:f6:15:b9:c6:bd:93:90:2f:9d:b2:6e:e9:6a:0d:
         b1:ee:05:52:3a:2f:b2:01:88:79:de:cc:24:4d:d0:93:4b:53:
         d2:5e:ee:ad:aa:44:6c:dc:1b:6a:3e:09:13:40:cb:43:3a:82:
         04:90:d2:0b:00:cc:5d:f9:fc:9e:68:ce:bb:e8:b6:14:ca:62:
         b8:69:c1:e5:7e:2a:83:e0:45:8e:1f:c3:ef:15:02:1b:14:88:
         62:10:56:2f:d6:8f:4b:7c:24:60:d1:0c:96:66:d3:40:9c:a5:
         ce:19:ae:ed:ab:2e:74:a8:04:f6:35:07:1d:bb:b2:cc:1b:13:
         3a:55:8a:7a:af:7c:95:e8:c0:56:a9:34:2c:e2:52:d4:8b:fb:
         2e:da:53:73:9a:3f:9e:a5:b1:4d:16:6f:d9:f6:99:fc:03:9e:
         bc:8e:19:dd:87:fe:0c:7a:54:dc:98:ae:95:93:28:55:ec:be:
         a2:55:db:ce
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBnHZVAP3kf5s2ws+ronSutD4RwcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRERFREUwRTNFNTMzNDc3QUFBQjE5RTJDQjgxMUM4MjZC
MTQ1RjUzRTAeFw0yNjA2MDUxMDU4NDhaFw0yNzA2MDQxMTAzNDhaMDMxMTAvBgNV
BAMTKEM0OTUyM0QxRjU4RTc2QUFGODAxQjQxMzNEODk3MzNCMkUwQTMzQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpusfe7ENGFQPa6IEkdkYoXw5V
K3wcCUrTFym+CyzCHxGG79qOh+oG9WmyZiE5RcoEaAqFShSZOu5xfIb1S95bcNRx
9WCXL2XZRAhGjTdEPYuIzeEjyMjeEW3+L8EeK2Sls+GA/eCW+Y27N0ubXf47+3ct
b+kkwI72ez7mqZojfHBwb9PZfFKoHCZS14IZpBYF0ni4MDri87Aoe5Io6Qb8MwB2
f2iHipJh85udh0KL3CKNZXZDFuX+p2CHU0+shkwYigOjGsijaCTtw9SD0ZvOAXRy
qXh8VHppXwoimztNQgzwYdYoD6aP4zCziPaAMpiTSh6pUJm3bQv9hifT6j5hAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUxJUj0fWOdqr4AbQTPYlzOy4KM60wHwYDVR0j
BBgwFoAU3e3g4+UzR3qqsZ4suBHIJrFF9T4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNENOeHlHQW1wNGpSWUdBUGVWZWk0Tml0eGtwaWVTMnRnNzhYbnV5MVdm
ak0vMC9EREVERTBFM0U1MzM0NzdBQUFCMTlFMkNCODExQzgyNkIxNDVGNTNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RERURFMEUzRTUzMzQ3N0FB
QUIxOUUyQ0I4MTFDODI2QjE0NUY1M0UuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRDTnh5R0FtcDRqUllHQVBlVmVpNE5pdHhrcGllUzJ0Zzc4WG51eTFXZmpNLzAv
MzQzNTJlMzEzODM0MmUzMTM5MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzkzMzM0MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtuMQwDQYJKoZIhvcNAQELBQADggEBAGJoFuVk
Dl3knfDmHJcJHd96JohY70mnC0pFjinAhDuvw/xcoF/8KXgjhVqfTeLpbYONEg4Q
jTXG3Ab02eX0mwjk0wIqFMd8+zTzQin2FbnGvZOQL52ybulqDbHuBVI6L7IBiHne
zCRN0JNLU9Je7q2qRGzcG2o+CRNAy0M6ggSQ0gsAzF35/J5ozrvothTKYrhpweV+
KoPgRY4fw+8VAhsUiGIQVi/Wj0t8JGDRDJZm00Ccpc4Zru2rLnSoBPY1Bx27sswb
EzpVinqvfJXowFapNCziUtSL+y7aU3OaP56lsU0Wb9n2mfwDnryOGd2H/gx6VNyY
rpWTKFXsvqJV284=
-----END CERTIFICATE-----
Generated at Sun Jun 14 09:11:52 2026 by rpki-client