Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/0/34352e3138302e33362e302f32322d3332203d3e20323639313234.roa
File:                     34352e3138302e33362e302f32322d3332203d3e20323639313234.roa (raw, json)
Hash identifier:          AS/Uf/06fMQYfSUSPxSHHojS2dnMCmMKeJdYFEiXLQE=
Subject key identifier:   F8:51:7A:9B:A4:28:0A:00:79:20:E2:CF:D6:62:64:4A:37:BC:44:AA
Certificate issuer:       /CN=4C79F517A1913929AA15B616101CEEEFA57F07B4
Certificate serial:       4B80AFCFB8E25C84F9421631DCAD840D42B88CC1
Authority key identifier: 4C:79:F5:17:A1:91:39:29:AA:15:B6:16:10:1C:EE:EF:A5:7F:07:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C79F517A1913929AA15B616101CEEEFA57F07B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/0/34352e3138302e33362e302f32322d3332203d3e20323639313234.roa
Signing time:             Mon 01 Jun 2026 13:46:57 +0000
ROA not before:           Mon 01 Jun 2026 13:41:57 +0000
ROA not after:            Mon 31 May 2027 13:46:57 +0000
asID:                     269124
IP address blocks:        45.180.36.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/0/4C79F517A1913929AA15B616101CEEEFA57F07B4.crl
                          rsync://rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/0/4C79F517A1913929AA15B616101CEEEFA57F07B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C79F517A1913929AA15B616101CEEEFA57F07B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 05:11:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:80:af:cf:b8:e2:5c:84:f9:42:16:31:dc:ad:84:0d:42:b8:8c:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C79F517A1913929AA15B616101CEEEFA57F07B4
        Validity
            Not Before: Jun  1 13:41:57 2026 GMT
            Not After : May 31 13:46:57 2027 GMT
        Subject: CN=F8517A9BA4280A007920E2CFD662644A37BC44AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b0:b5:fd:39:81:0e:cf:0f:db:53:c9:c9:c8:
                    cc:94:b2:a3:6f:4d:23:93:c0:fb:73:a4:c4:34:64:
                    28:c6:61:80:29:57:bc:e1:cc:f8:76:08:c6:58:b0:
                    04:ce:a1:b9:d5:52:f5:e6:90:93:3e:f4:28:23:8f:
                    e8:fb:ae:4e:51:42:31:89:a4:3b:39:9d:b9:ae:20:
                    9c:6f:09:8b:a6:03:27:73:ec:aa:c9:4d:3c:d3:c3:
                    51:cb:26:5b:55:72:8f:ae:1c:b3:85:c2:ce:bd:7f:
                    a7:89:8e:42:d7:12:b9:69:0d:cc:5f:78:86:78:fc:
                    29:9a:51:b8:fe:f3:8a:b2:a0:d3:10:c0:32:45:da:
                    01:c1:c8:e4:7d:31:07:8f:e5:75:ea:c5:6d:4d:54:
                    95:1b:ac:ad:27:0d:a0:96:f1:b4:4d:0b:b8:2e:24:
                    75:a0:e5:8d:1e:64:e1:95:10:88:4b:fa:11:da:8d:
                    5e:6a:de:59:65:a0:10:08:d4:c6:97:84:38:b3:e0:
                    4d:00:6e:5a:9a:1d:9b:4e:d7:65:2a:c7:0c:c6:b0:
                    cc:37:42:bd:dd:ed:d4:0d:95:66:b2:20:23:26:0d:
                    78:67:11:44:bc:12:31:cb:1f:48:0d:4d:ff:77:8b:
                    0b:4d:da:a5:80:2e:d5:ce:2d:95:ad:ca:22:d6:c7:
                    e0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:51:7A:9B:A4:28:0A:00:79:20:E2:CF:D6:62:64:4A:37:BC:44:AA
            X509v3 Authority Key Identifier:
                keyid:4C:79:F5:17:A1:91:39:29:AA:15:B6:16:10:1C:EE:EF:A5:7F:07:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/0/4C79F517A1913929AA15B616101CEEEFA57F07B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C79F517A1913929AA15B616101CEEEFA57F07B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/0/34352e3138302e33362e302f32322d3332203d3e20323639313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:4c:16:2f:8d:0f:92:87:1b:7d:f7:e7:62:54:16:b4:db:10:
         be:06:56:b9:ed:2c:87:50:77:1c:a0:bc:e4:df:4d:87:3c:51:
         25:a0:62:04:32:89:bf:a6:f1:d4:15:fd:c3:42:a3:84:83:91:
         bf:93:81:c2:fa:05:2d:d0:45:59:49:92:09:a3:72:33:e0:c1:
         13:c6:92:f8:43:69:b5:9a:83:73:dc:14:34:75:82:36:e3:eb:
         83:ae:3f:13:7a:6f:e5:bc:33:1b:7f:27:a9:f3:ac:80:97:e6:
         83:81:38:df:e8:70:14:97:6d:f9:f8:40:ea:c1:d5:9c:fd:93:
         fe:0e:c5:38:6a:72:5f:a3:8b:b0:21:a2:5e:05:cc:41:b8:05:
         27:07:a1:b6:a8:23:ce:e4:06:a1:c3:ed:c7:f4:26:ec:a6:52:
         8f:12:73:11:40:e3:ab:00:6c:a8:bf:cd:92:86:7e:21:36:75:
         71:6e:48:cd:59:f4:29:f6:0c:15:19:f1:44:2f:ad:5e:96:40:
         8c:71:6d:d4:a6:75:92:be:9f:93:e4:bc:ac:5c:e9:45:a9:a0:
         cf:a6:fe:67:1d:17:30:cc:5b:97:61:d5:72:3c:93:83:56:d5:
         1a:79:d1:2d:21:e0:db:2a:c6:94:20:66:e5:4b:4e:bd:96:73:
         58:1b:20:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:55:06 2026 by rpki-client