Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/0/34352e3233392e302e302f32322d3234203d3e20323638333438.roa
File:                     34352e3233392e302e302f32322d3234203d3e20323638333438.roa (raw, json)
Hash identifier:          9UMnmJBVrnhlItqtFq+KCkjs350k7VA+dZ9keslAdj8=
Subject key identifier:   83:4A:A3:59:E5:F5:7A:B8:25:4A:F4:1A:58:3F:73:3D:8E:E2:82:5F
Certificate issuer:       /CN=9080903A299EBD0161B705C6952E6E14943A6082
Certificate serial:       1A9B3860680405771A4AE5D53606DC8047EBEAFC
Authority key identifier: 90:80:90:3A:29:9E:BD:01:61:B7:05:C6:95:2E:6E:14:94:3A:60:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9080903A299EBD0161B705C6952E6E14943A6082.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/0/34352e3233392e302e302f32322d3234203d3e20323638333438.roa
Signing time:             Tue 09 Jun 2026 12:39:01 +0000
ROA not before:           Tue 09 Jun 2026 12:34:01 +0000
ROA not after:            Tue 08 Jun 2027 12:39:01 +0000
asID:                     268348
IP address blocks:        45.239.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/0/9080903A299EBD0161B705C6952E6E14943A6082.crl
                          rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/0/9080903A299EBD0161B705C6952E6E14943A6082.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9080903A299EBD0161B705C6952E6E14943A6082.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 02:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:9b:38:60:68:04:05:77:1a:4a:e5:d5:36:06:dc:80:47:eb:ea:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9080903A299EBD0161B705C6952E6E14943A6082
        Validity
            Not Before: Jun  9 12:34:01 2026 GMT
            Not After : Jun  8 12:39:01 2027 GMT
        Subject: CN=834AA359E5F57AB8254AF41A583F733D8EE2825F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:da:c8:e1:6d:94:a7:27:79:06:ec:55:2b:cf:
                    b4:a3:8d:7e:e0:cf:bd:87:d0:4a:ae:a3:c6:c5:60:
                    5a:60:a2:d2:33:c1:0a:43:76:b6:ee:f4:ad:75:29:
                    17:0e:d2:91:3a:8d:f5:ce:80:2f:cc:da:cc:0b:7e:
                    6b:91:f3:97:1a:6d:8f:dc:67:81:96:c0:be:2b:a3:
                    ed:1c:8b:76:3d:b7:86:5f:0d:78:7d:23:35:26:5b:
                    98:c7:dd:af:40:4f:dd:f1:18:76:7a:7d:b0:1a:c8:
                    14:f8:0b:48:74:92:16:14:20:fd:e7:37:14:5a:8a:
                    46:b0:95:25:4b:7f:c8:ab:cb:2e:07:95:9d:15:25:
                    99:50:4f:1c:de:e3:41:80:dd:45:d8:4f:50:bb:06:
                    53:98:29:8f:1c:5b:90:77:42:ea:12:a3:0d:62:b2:
                    60:74:64:62:de:b7:8f:2d:6c:15:79:4c:7c:a6:6e:
                    f5:c7:f0:19:2c:ad:67:4b:b1:98:1d:07:75:fc:34:
                    5c:bd:7e:e7:fd:ff:26:b4:29:44:5e:c5:0c:c1:91:
                    2d:d1:b9:04:1a:3d:62:29:ba:fc:e0:31:39:a7:3b:
                    2b:b1:13:c5:4c:5d:9a:5c:da:6e:ef:7b:fb:0c:19:
                    04:2e:2d:82:0a:0b:2e:a7:2d:6d:a9:59:35:b7:51:
                    2d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:4A:A3:59:E5:F5:7A:B8:25:4A:F4:1A:58:3F:73:3D:8E:E2:82:5F
            X509v3 Authority Key Identifier:
                keyid:90:80:90:3A:29:9E:BD:01:61:B7:05:C6:95:2E:6E:14:94:3A:60:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/0/9080903A299EBD0161B705C6952E6E14943A6082.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9080903A299EBD0161B705C6952E6E14943A6082.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/0/34352e3233392e302e302f32322d3234203d3e20323638333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:f1:c6:01:52:e3:54:b7:25:cc:76:f8:32:f1:fd:03:2d:34:
         c2:7d:8b:55:c2:61:03:4d:12:02:21:a1:6c:a5:11:85:d5:86:
         45:90:15:88:4b:c0:c8:59:08:f9:38:83:f4:be:55:60:6e:dc:
         14:c3:5a:dd:7d:9b:5d:7b:e2:e6:21:ad:9b:16:2c:56:a6:cc:
         7b:17:bc:ac:f3:9c:b7:56:07:91:02:b1:f6:f1:f2:90:76:68:
         65:02:4b:ae:de:57:9b:74:13:89:12:dd:37:ff:11:9f:74:4e:
         7a:d6:7f:97:47:dc:77:72:2a:49:0d:2e:eb:f3:ac:8e:4a:bd:
         9c:78:03:3c:c0:1a:be:f2:a9:31:a6:6d:fa:a6:5f:3a:32:c4:
         bd:cc:04:ec:96:3d:b1:cc:ef:53:d0:17:95:78:16:28:9a:0f:
         14:51:92:7f:de:81:e7:f5:4f:b7:01:dd:5c:80:21:5a:6e:8c:
         82:80:57:95:a7:e0:6c:c9:ff:c8:df:cf:d8:56:76:0d:e1:0b:
         4b:b4:d5:a7:cf:9d:3c:9d:23:54:c8:a9:50:40:17:22:07:66:
         9b:34:6a:65:a9:dc:63:a4:64:02:ce:a2:4e:86:da:43:ab:96:
         36:6e:3a:81:56:31:b2:2d:bf:b8:51:8f:0c:91:e4:66:f9:52:
         d3:b7:e4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:17:25 2026 by rpki-client