Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FYdR2d1KcHDvnaA5wJbop4DjqCYKt24riRuT17Fo2sqJ/0/34352e372e3138302e302f32322d3234203d3e20323636353939.roa
File:                     34352e372e3138302e302f32322d3234203d3e20323636353939.roa (raw, json)
Hash identifier:          8XleSGOjXoxbe1we2/jbRE3f7MCm6NsxVAMS/a5TvqE=
Subject key identifier:   FA:21:FF:B8:67:98:07:BD:D7:7C:57:F9:56:CA:1F:30:FF:6F:45:68
Certificate issuer:       /CN=69273B2D38B98BD4DE8EB1058365DB5EAB13F506
Certificate serial:       3EBADBE488931D64A3CAD92DE8475A72FA209A45
Authority key identifier: 69:27:3B:2D:38:B9:8B:D4:DE:8E:B1:05:83:65:DB:5E:AB:13:F5:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69273B2D38B98BD4DE8EB1058365DB5EAB13F506.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYdR2d1KcHDvnaA5wJbop4DjqCYKt24riRuT17Fo2sqJ/0/34352e372e3138302e302f32322d3234203d3e20323636353939.roa
Signing time:             Fri 12 Jun 2026 15:23:38 +0000
ROA not before:           Fri 12 Jun 2026 15:18:38 +0000
ROA not after:            Fri 11 Jun 2027 15:23:38 +0000
asID:                     266599
IP address blocks:        45.7.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FYdR2d1KcHDvnaA5wJbop4DjqCYKt24riRuT17Fo2sqJ/0/69273B2D38B98BD4DE8EB1058365DB5EAB13F506.crl
                          rsync://rpki-repo.registro.br/repo/FYdR2d1KcHDvnaA5wJbop4DjqCYKt24riRuT17Fo2sqJ/0/69273B2D38B98BD4DE8EB1058365DB5EAB13F506.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69273B2D38B98BD4DE8EB1058365DB5EAB13F506.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 08:32:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ba:db:e4:88:93:1d:64:a3:ca:d9:2d:e8:47:5a:72:fa:20:9a:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69273B2D38B98BD4DE8EB1058365DB5EAB13F506
        Validity
            Not Before: Jun 12 15:18:38 2026 GMT
            Not After : Jun 11 15:23:38 2027 GMT
        Subject: CN=FA21FFB8679807BDD77C57F956CA1F30FF6F4568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7f:7e:60:67:10:ae:d9:dd:fb:15:3b:38:2c:
                    0a:e4:fb:1a:ed:c2:d1:05:1c:6f:8f:22:b1:21:57:
                    42:26:d2:56:d6:e8:68:e8:1d:1e:cc:45:a7:58:0e:
                    16:11:a1:22:4a:53:87:cc:52:5e:82:45:88:ae:b2:
                    6f:7e:56:37:b9:5a:7b:18:77:8d:42:4a:0f:44:25:
                    e5:b0:44:f4:60:af:6f:31:85:63:c2:de:16:c1:13:
                    ce:4d:4f:fb:23:b3:61:4a:48:07:78:7f:b7:81:68:
                    2c:7e:3a:30:be:6c:27:d6:76:03:71:9b:20:d0:00:
                    52:0d:f9:99:a7:83:99:f1:69:fc:ec:6e:b8:86:5d:
                    ea:df:1f:10:30:a3:72:af:dd:97:a8:46:c5:16:e1:
                    4a:9f:11:14:43:d5:b5:91:1f:3f:82:d8:38:5c:29:
                    03:70:a9:6f:ca:22:4f:a2:68:fa:d8:4e:5e:08:7c:
                    ff:a1:52:56:a4:35:a2:53:a3:a7:c6:7c:2c:a2:15:
                    6c:ab:4d:e0:51:35:8f:c3:36:80:34:58:07:7d:82:
                    3a:e3:b8:24:aa:9e:a7:04:55:19:d4:41:67:e1:9d:
                    0f:d9:8d:7b:9e:39:cc:62:bf:39:f3:9b:5b:87:96:
                    43:15:5d:94:f1:a6:5d:eb:68:de:0d:6c:d5:7f:c3:
                    8b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:21:FF:B8:67:98:07:BD:D7:7C:57:F9:56:CA:1F:30:FF:6F:45:68
            X509v3 Authority Key Identifier:
                keyid:69:27:3B:2D:38:B9:8B:D4:DE:8E:B1:05:83:65:DB:5E:AB:13:F5:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYdR2d1KcHDvnaA5wJbop4DjqCYKt24riRuT17Fo2sqJ/0/69273B2D38B98BD4DE8EB1058365DB5EAB13F506.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69273B2D38B98BD4DE8EB1058365DB5EAB13F506.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYdR2d1KcHDvnaA5wJbop4DjqCYKt24riRuT17Fo2sqJ/0/34352e372e3138302e302f32322d3234203d3e20323636353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:89:e4:b0:a2:04:0d:c8:1d:49:53:ae:08:59:7d:21:95:5e:
         38:64:bd:02:d3:5b:8e:11:f8:70:65:3a:47:e6:20:f1:83:11:
         9c:24:04:19:e9:a8:f5:43:3e:cf:be:2a:cf:f6:6a:77:1f:83:
         99:44:c2:8c:0f:39:50:59:77:6d:cd:98:3e:ca:01:21:c9:b1:
         d6:bd:a1:92:fe:8b:38:8d:3d:a7:92:c4:da:df:85:f9:ed:f2:
         40:87:0e:ca:e9:93:8a:57:19:81:a7:97:36:8b:60:4e:7b:12:
         54:04:b2:54:60:b1:5e:e0:2a:be:65:dd:72:51:16:ab:9a:67:
         40:3b:56:30:d2:c1:fe:63:af:47:ad:27:fa:a5:b7:20:da:d6:
         00:70:b9:f4:59:04:92:4b:0f:ba:ab:08:95:d0:ff:34:2f:89:
         fb:2f:85:1e:4e:c3:81:2c:4c:78:06:87:55:ae:a6:97:46:bd:
         55:a5:5b:6c:d7:3e:61:88:44:51:c3:3c:2f:39:82:36:0d:9e:
         4f:3d:6e:f7:bc:72:aa:b0:65:49:b5:db:64:53:1b:bb:9f:1e:
         4b:22:67:4d:dd:f5:43:85:d1:2a:e6:01:0a:9c:0b:81:c6:d5:
         b2:9d:60:1d:07:67:94:26:e3:f0:a9:a5:c5:bc:5c:5a:f1:63:
         48:b1:05:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 11:15:36 2026 by rpki-client