Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/34352e3233362e3230302e302f32322d3234203d3e20323638323433.roa
File:                     34352e3233362e3230302e302f32322d3234203d3e20323638323433.roa (raw, json)
Hash identifier:          ct/CPXLqkloXYaEVKeNpGFNOeFZYWaou0eXSJUqkoPg=
Subject key identifier:   0A:E1:CD:36:8E:0F:6F:69:7E:25:EB:27:0B:8B:B3:F6:9D:28:3C:1F
Certificate issuer:       /CN=2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE
Certificate serial:       31FBEE2CF4C6AAE06CB0A3B9207395856E546A59
Authority key identifier: 2E:0D:8C:A9:FB:9B:93:5A:BD:E6:72:6B:E1:EA:2A:85:70:F4:EF:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/34352e3233362e3230302e302f32322d3234203d3e20323638323433.roa
Signing time:             Wed 03 Jun 2026 14:46:12 +0000
ROA not before:           Wed 03 Jun 2026 14:41:12 +0000
ROA not after:            Wed 02 Jun 2027 14:46:12 +0000
asID:                     268243
IP address blocks:        45.236.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.crl
                          rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 00:53:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:fb:ee:2c:f4:c6:aa:e0:6c:b0:a3:b9:20:73:95:85:6e:54:6a:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE
        Validity
            Not Before: Jun  3 14:41:12 2026 GMT
            Not After : Jun  2 14:46:12 2027 GMT
        Subject: CN=0AE1CD368E0F6F697E25EB270B8BB3F69D283C1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4b:89:90:fa:71:84:31:ca:7f:cc:e2:1b:12:
                    aa:7d:dc:cc:0e:13:85:f7:a0:a1:5a:fa:38:81:4e:
                    89:aa:b2:6d:07:81:35:5e:14:2c:66:e9:0f:da:45:
                    8c:09:34:d5:7f:fb:57:83:ad:7f:54:ec:7b:b7:2c:
                    77:af:b7:6e:26:26:c0:b0:f8:4a:0b:c4:d0:8f:aa:
                    4c:3a:bc:18:af:cb:d2:98:dd:13:80:7e:91:2b:98:
                    90:e2:de:1f:81:87:dc:bc:a0:dc:e2:37:dc:03:5b:
                    7d:99:2b:c7:d9:1f:81:f4:73:d4:06:7b:4b:da:0e:
                    22:49:68:5a:a9:4a:c8:42:83:14:96:7a:c5:88:86:
                    50:b6:8e:cc:6a:6a:03:f8:82:76:23:de:89:86:9e:
                    e0:2c:ba:13:bc:35:9b:4c:69:91:76:e2:2b:9a:46:
                    31:b5:d7:fb:cd:ee:f1:90:b2:55:a0:97:b8:5a:17:
                    51:a2:47:8b:0a:fb:b7:69:73:00:15:35:5b:90:27:
                    05:3a:75:c5:55:fb:dd:19:c5:60:9b:27:9c:46:5c:
                    47:71:a5:a8:bf:f6:03:86:00:0a:21:c6:92:d1:da:
                    e2:12:31:7c:ff:ca:18:6a:3b:70:d6:7a:93:bc:70:
                    ff:dc:e6:98:81:d7:b3:b7:d1:d7:b6:ff:77:da:ee:
                    cf:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E1:CD:36:8E:0F:6F:69:7E:25:EB:27:0B:8B:B3:F6:9D:28:3C:1F
            X509v3 Authority Key Identifier:
                keyid:2E:0D:8C:A9:FB:9B:93:5A:BD:E6:72:6B:E1:EA:2A:85:70:F4:EF:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/34352e3233362e3230302e302f32322d3234203d3e20323638323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:02:cd:67:7e:1d:48:d1:85:3a:27:2a:de:ec:db:f8:b3:11:
         ff:6c:a3:ee:97:b4:4c:a5:41:a9:81:c2:5c:ea:f5:db:5e:d1:
         fc:1c:e6:39:97:79:72:65:0f:16:4b:1f:86:e0:dc:ea:24:26:
         6e:d1:a5:81:e1:a3:99:f2:09:e6:0c:5c:be:23:81:ce:af:df:
         30:df:35:cd:47:88:cd:e8:d0:b9:6c:00:d3:dc:ef:39:c9:3a:
         cd:bc:84:5b:21:2f:a6:be:47:15:2d:e3:7b:20:54:c2:f7:4c:
         3f:0a:51:3f:27:42:73:58:d0:58:b0:6f:8e:15:25:90:86:4b:
         8a:19:89:f4:6d:29:22:4f:eb:00:c4:e5:3c:75:09:6b:95:82:
         a1:0d:93:5d:f1:08:fc:c7:91:3e:ec:d1:21:b6:63:b3:59:0e:
         4d:ac:06:5c:67:9e:9e:1f:1a:e1:ab:2a:a1:4c:a1:22:96:6f:
         c6:9c:85:a4:02:c3:95:84:4f:c8:dc:8d:48:55:b1:be:1f:99:
         15:1c:07:c4:d2:19:dd:c9:52:43:be:a5:66:3d:f5:8c:70:7f:
         8d:10:15:85:f0:39:45:e0:92:eb:35:97:3e:bb:64:f5:ee:4f:
         2c:d0:ed:d2:13:65:24:76:4d:5a:50:f3:6c:ad:bb:1e:c4:82:
         38:c4:ef:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:54:00 2026 by rpki-client