Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/34352e3138342e3139382e302f32342d3234203d3e20323639333432.roa
File:                     34352e3138342e3139382e302f32342d3234203d3e20323639333432.roa (raw, json)
Hash identifier:          kVWJjAxIKX1rEI9IAMHUZy0vxbROE7RNEeuKnH3VBa0=
Subject key identifier:   B6:F8:33:5A:26:AA:F9:F8:A5:1A:2A:90:E5:C2:E5:32:46:A5:ED:9F
Certificate issuer:       /CN=DDEDE0E3E533477AAAB19E2CB811C826B145F53E
Certificate serial:       2A31F4EC48B701ECA158B43EBAC720CDC5ECC466
Authority key identifier: DD:ED:E0:E3:E5:33:47:7A:AA:B1:9E:2C:B8:11:C8:26:B1:45:F5:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDEDE0E3E533477AAAB19E2CB811C826B145F53E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/34352e3138342e3139382e302f32342d3234203d3e20323639333432.roa
Signing time:             Fri 05 Jun 2026 11:03:48 +0000
ROA not before:           Fri 05 Jun 2026 10:58:48 +0000
ROA not after:            Fri 04 Jun 2027 11:03:48 +0000
asID:                     269342
IP address blocks:        45.184.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/DDEDE0E3E533477AAAB19E2CB811C826B145F53E.crl
                          rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/DDEDE0E3E533477AAAB19E2CB811C826B145F53E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDEDE0E3E533477AAAB19E2CB811C826B145F53E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 19:24:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:31:f4:ec:48:b7:01:ec:a1:58:b4:3e:ba:c7:20:cd:c5:ec:c4:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDEDE0E3E533477AAAB19E2CB811C826B145F53E
        Validity
            Not Before: Jun  5 10:58:48 2026 GMT
            Not After : Jun  4 11:03:48 2027 GMT
        Subject: CN=B6F8335A26AAF9F8A51A2A90E5C2E53246A5ED9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:20:80:22:a2:9c:93:65:37:7d:e8:b8:bf:d9:
                    12:73:a6:55:1f:83:fa:0e:bb:ad:d3:07:9a:99:61:
                    82:0b:84:87:ca:94:17:ad:00:57:66:9e:a2:16:31:
                    9f:74:39:52:51:a6:89:b7:92:a4:37:dd:b2:69:ed:
                    b3:81:46:40:2f:cd:fd:ec:4d:72:fa:2b:57:ff:77:
                    7b:e9:51:81:97:b0:99:a9:33:2e:00:93:e4:93:7f:
                    67:24:e5:d7:74:c0:24:71:b4:cc:07:e0:7f:46:d0:
                    34:13:1f:6b:37:6b:89:df:6f:7a:99:a9:db:b3:94:
                    72:6a:78:01:36:06:cb:44:4c:25:b3:4d:1c:f3:51:
                    c9:e8:11:42:57:00:d8:8d:bd:0d:be:c2:b5:04:19:
                    89:1c:7f:96:46:cf:a2:b7:51:af:13:58:20:85:1c:
                    56:9f:c5:5d:42:26:44:6f:3f:05:e6:be:9c:59:2a:
                    9a:96:09:5b:65:66:9f:a4:e9:eb:da:50:cc:86:da:
                    39:c4:37:cc:b5:68:47:0d:c8:f6:c6:31:bb:37:57:
                    07:af:63:fe:ca:45:8d:a4:7e:6a:ee:2d:a6:40:55:
                    27:5a:90:e7:94:79:32:18:e2:76:64:38:9c:78:6b:
                    ee:e8:6c:f2:09:c6:47:24:16:16:b9:17:21:37:e4:
                    97:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F8:33:5A:26:AA:F9:F8:A5:1A:2A:90:E5:C2:E5:32:46:A5:ED:9F
            X509v3 Authority Key Identifier:
                keyid:DD:ED:E0:E3:E5:33:47:7A:AA:B1:9E:2C:B8:11:C8:26:B1:45:F5:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/DDEDE0E3E533477AAAB19E2CB811C826B145F53E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDEDE0E3E533477AAAB19E2CB811C826B145F53E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/34352e3138342e3139382e302f32342d3234203d3e20323639333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:23:8c:df:f0:4d:af:bc:c3:7b:04:e7:bd:00:60:4c:45:9a:
         38:1b:e7:f5:48:9c:6e:06:2a:e0:1f:30:7e:ba:62:b1:85:dd:
         c0:df:d5:60:8c:44:db:55:0c:e8:4a:a6:22:a2:79:eb:bb:67:
         26:9b:96:28:46:0d:5a:eb:c5:67:ad:59:fc:0b:ef:cd:8a:a2:
         ec:82:23:5a:db:14:ee:49:71:38:27:88:55:ee:17:9b:26:bf:
         86:98:7e:5a:98:ca:c0:63:10:29:36:d5:8f:96:94:84:06:31:
         ea:04:fe:4d:af:7b:a1:9e:bb:de:62:99:a9:00:3a:fc:d0:ac:
         91:80:46:dc:fc:79:1d:c0:a6:d0:39:fa:56:4c:6a:40:92:df:
         2c:75:fe:ad:44:31:1c:0a:3f:f5:c0:68:a7:e8:91:20:54:51:
         1b:d7:ca:b3:e1:9f:25:0b:d7:b7:40:99:18:3d:1c:ce:b6:22:
         82:b6:f2:f2:ec:36:45:25:70:2d:b6:1c:7a:44:52:69:bf:91:
         30:13:36:e8:c1:db:80:1a:3a:fd:da:ca:db:d6:11:89:e4:ea:
         9e:d0:30:73:72:1d:80:30:6e:ad:95:3d:06:7a:b9:7c:7c:99:
         a0:80:27:85:02:65:da:3f:d4:47:f4:36:67:af:51:dc:a7:1b:
         da:58:51:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:11:51 2026 by rpki-client