Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/34352e3232362e37362e302f32322d3234203d3e20323636393834.roa
File:                     34352e3232362e37362e302f32322d3234203d3e20323636393834.roa (raw, json)
Hash identifier:          lOcTDJfGWob1Dl3otxCaGlEuHD1alcCsYR0UoduogT8=
Subject key identifier:   B9:66:56:90:B0:81:A2:C8:BC:2E:98:AC:3B:B4:DE:57:C8:FE:C4:25
Certificate issuer:       /CN=41107F8D71D8B83AE0B9185D5C53CC2EE346B47B
Certificate serial:       2B5CD8443E1F12EA6818A090A8A64D116A322350
Authority key identifier: 41:10:7F:8D:71:D8:B8:3A:E0:B9:18:5D:5C:53:CC:2E:E3:46:B4:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41107F8D71D8B83AE0B9185D5C53CC2EE346B47B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/34352e3232362e37362e302f32322d3234203d3e20323636393834.roa
Signing time:             Thu 04 Jun 2026 21:00:24 +0000
ROA not before:           Thu 04 Jun 2026 20:55:24 +0000
ROA not after:            Thu 03 Jun 2027 21:00:24 +0000
asID:                     266984
IP address blocks:        45.226.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/41107F8D71D8B83AE0B9185D5C53CC2EE346B47B.crl
                          rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/41107F8D71D8B83AE0B9185D5C53CC2EE346B47B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41107F8D71D8B83AE0B9185D5C53CC2EE346B47B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 18:50:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:5c:d8:44:3e:1f:12:ea:68:18:a0:90:a8:a6:4d:11:6a:32:23:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41107F8D71D8B83AE0B9185D5C53CC2EE346B47B
        Validity
            Not Before: Jun  4 20:55:24 2026 GMT
            Not After : Jun  3 21:00:24 2027 GMT
        Subject: CN=B9665690B081A2C8BC2E98AC3BB4DE57C8FEC425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f2:7e:0b:f8:2e:25:ef:7f:8e:f2:42:72:c7:
                    87:db:c2:ed:1d:bc:fc:f5:1b:6c:81:fb:ee:63:0f:
                    2b:81:00:3f:8f:8e:3f:33:b1:7d:33:9f:d2:e3:ad:
                    1b:50:d8:96:dd:ae:7f:5e:03:d7:4f:0d:55:4e:b5:
                    d3:ca:6a:8c:5c:bf:0e:79:4d:ac:8b:ba:eb:85:0b:
                    84:2e:56:76:eb:1d:85:35:a7:f6:ce:69:fb:37:5b:
                    02:76:fd:fe:95:7e:02:fa:22:2b:98:50:e8:d7:7a:
                    4e:7d:92:39:b4:4f:e3:45:82:03:06:d9:f3:66:94:
                    4f:15:e3:b3:33:4f:85:b6:91:13:78:0d:c2:85:9e:
                    ef:c9:11:eb:62:b1:c9:26:52:05:c4:6e:11:be:ad:
                    d6:d8:44:56:ba:81:12:64:9d:92:8a:89:bf:3b:26:
                    4f:27:e8:7c:a0:db:26:6a:06:a4:10:0d:e1:07:22:
                    ef:7f:5b:fc:a8:67:eb:31:7e:47:f4:98:eb:b1:1d:
                    23:e2:8a:34:33:61:81:61:ee:a2:52:82:3d:0a:03:
                    b7:95:c9:4b:23:9e:55:d0:21:4d:87:c6:24:4b:bc:
                    4c:b5:de:96:f8:d3:1e:d0:5a:ac:99:a4:3f:91:8f:
                    5e:e5:b3:c2:4b:13:bd:74:0d:15:85:91:f8:49:ed:
                    41:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:66:56:90:B0:81:A2:C8:BC:2E:98:AC:3B:B4:DE:57:C8:FE:C4:25
            X509v3 Authority Key Identifier:
                keyid:41:10:7F:8D:71:D8:B8:3A:E0:B9:18:5D:5C:53:CC:2E:E3:46:B4:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/41107F8D71D8B83AE0B9185D5C53CC2EE346B47B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41107F8D71D8B83AE0B9185D5C53CC2EE346B47B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/34352e3232362e37362e302f32322d3234203d3e20323636393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:06:59:74:7a:b0:b5:df:dd:90:d7:4b:05:ec:9f:6b:3a:25:
         61:78:d0:6c:9c:19:eb:36:b6:ed:35:7d:f3:37:4e:96:d9:44:
         f0:75:9f:2a:42:98:e8:10:ef:a9:f3:10:3c:ae:6d:ca:48:65:
         c0:0d:c4:84:51:90:e2:03:7d:74:b0:cc:b1:3c:77:d4:9a:df:
         8d:d0:33:2f:ea:05:40:36:8e:c9:3e:46:a1:e5:ae:45:3e:68:
         96:39:97:91:43:cf:bc:7f:9b:a8:ad:6c:ea:ee:49:8f:d5:a4:
         26:07:0f:aa:b1:c8:1f:41:f1:8f:46:a2:2f:a9:c5:cd:8b:25:
         4d:ea:36:a4:22:12:89:a7:6f:c7:2b:29:c5:20:37:34:76:1c:
         30:a9:ae:c8:59:98:ef:eb:90:15:13:81:86:4f:e0:a3:97:68:
         57:81:2d:7e:46:11:6d:bb:f0:db:76:8f:57:28:fb:78:e3:2a:
         41:eb:fd:a5:14:07:dc:66:18:9f:dc:79:b2:81:21:c1:a7:dc:
         85:8b:bb:f3:0a:a7:67:b6:78:e4:4b:9e:92:9f:dc:1d:81:f4:
         12:53:35:a4:9f:2d:fd:c8:0e:fa:12:bd:04:af:3f:a0:0b:f4:
         c6:df:9f:8b:60:6e:2b:8b:eb:4f:c1:28:d9:88:0d:06:01:5f:
         ae:4d:a5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:44:59 2026 by rpki-client