Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/34352e3136322e342e302f32322d3234203d3e20323638343932.roa
File:                     34352e3136322e342e302f32322d3234203d3e20323638343932.roa (raw, json)
Hash identifier:          hxp3qIb5LoBB2ogX6BHZ9AGWJED5h4eAsse/deXwqN4=
Subject key identifier:   5C:1C:71:CD:D2:E1:0B:64:B1:1A:4D:2A:A7:72:FA:86:DF:81:DD:60
Certificate issuer:       /CN=300EF0D4A22607B70ACDD408162E82D502B579B4
Certificate serial:       0532E147943DFB9E5750A83C8D8A4D5D4F7FA65B
Authority key identifier: 30:0E:F0:D4:A2:26:07:B7:0A:CD:D4:08:16:2E:82:D5:02:B5:79:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/300EF0D4A22607B70ACDD408162E82D502B579B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/34352e3136322e342e302f32322d3234203d3e20323638343932.roa
Signing time:             Fri 17 Apr 2026 13:51:08 +0000
ROA not before:           Fri 17 Apr 2026 13:46:08 +0000
ROA not after:            Fri 16 Apr 2027 13:51:08 +0000
asID:                     268492
IP address blocks:        45.162.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/300EF0D4A22607B70ACDD408162E82D502B579B4.crl
                          rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/300EF0D4A22607B70ACDD408162E82D502B579B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/300EF0D4A22607B70ACDD408162E82D502B579B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 08:59:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:32:e1:47:94:3d:fb:9e:57:50:a8:3c:8d:8a:4d:5d:4f:7f:a6:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=300EF0D4A22607B70ACDD408162E82D502B579B4
        Validity
            Not Before: Apr 17 13:46:08 2026 GMT
            Not After : Apr 16 13:51:08 2027 GMT
        Subject: CN=5C1C71CDD2E10B64B11A4D2AA772FA86DF81DD60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:94:63:1b:8b:8e:85:aa:49:f0:7a:5f:5c:14:
                    87:d9:69:f8:f1:95:4d:15:c2:69:50:0f:3f:90:34:
                    ee:e4:5e:5b:97:59:fe:cf:ac:8c:4e:17:6b:12:5a:
                    d3:df:7e:e6:58:84:8a:48:4e:9a:f8:7c:91:29:65:
                    bb:2a:e1:ff:dc:c6:13:2c:ad:0c:5a:1e:7f:b7:11:
                    a1:40:f7:8c:0c:ed:a4:85:df:88:5a:37:bb:52:ab:
                    b4:04:91:fe:bd:e9:40:cc:77:dd:96:71:ba:cf:70:
                    a4:2a:8f:a0:8e:2c:5f:4d:33:e8:ea:f9:80:d6:c6:
                    d6:a5:c4:39:3a:cf:3d:6e:b0:b7:cd:ff:b5:bc:51:
                    c9:11:60:65:fd:87:7d:1c:5a:32:25:f1:30:8a:09:
                    74:3f:fe:8c:1b:e9:2f:09:3a:b5:bc:35:1c:ce:91:
                    89:8a:4a:a3:31:bd:59:e0:32:1d:00:ca:b6:d5:48:
                    3b:86:d2:c4:41:00:5a:5e:0a:76:90:ad:0a:52:18:
                    b2:90:10:62:8c:d8:67:bd:e1:e3:47:de:30:2b:2a:
                    70:ba:22:5e:34:ab:e6:98:0d:78:0d:aa:c2:66:50:
                    4a:74:41:7b:10:e3:dc:b3:d5:46:aa:08:c8:23:ec:
                    54:e2:5b:57:ef:69:ce:c1:39:8f:a1:c6:c1:23:bc:
                    06:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:1C:71:CD:D2:E1:0B:64:B1:1A:4D:2A:A7:72:FA:86:DF:81:DD:60
            X509v3 Authority Key Identifier:
                keyid:30:0E:F0:D4:A2:26:07:B7:0A:CD:D4:08:16:2E:82:D5:02:B5:79:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/300EF0D4A22607B70ACDD408162E82D502B579B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/300EF0D4A22607B70ACDD408162E82D502B579B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/34352e3136322e342e302f32322d3234203d3e20323638343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:c4:89:5c:70:fc:2f:e9:aa:fb:18:07:bf:6d:df:01:22:fe:
         54:31:17:5b:7d:1b:c0:db:3d:11:d2:73:01:72:4c:43:b5:ee:
         c3:1b:fc:5f:b3:d2:86:c5:87:ee:09:68:fa:87:db:4d:88:bc:
         7e:84:a2:12:42:d2:80:8e:7b:74:37:32:60:e4:8d:42:0c:0b:
         f5:ab:c6:1b:f3:3d:75:5a:d6:a8:df:87:bc:af:29:a7:e3:ee:
         79:73:48:cb:12:3c:5a:9a:bb:97:48:ee:38:ef:bd:be:6b:9b:
         c8:1f:53:fc:6a:57:c3:87:80:05:b2:6c:2b:3f:a7:dc:c5:f6:
         fe:e9:a0:da:09:5b:e3:03:4d:87:79:d6:94:b0:0c:7b:ad:bd:
         9c:63:22:90:d9:ce:9d:47:1b:11:ff:0d:cb:aa:25:27:0e:fb:
         46:02:9b:ad:02:53:03:a9:8f:17:84:2e:bb:bf:06:1a:07:92:
         6a:65:bb:b4:e9:65:bf:e7:99:9d:fa:a2:87:66:08:a0:62:34:
         02:a2:8c:5b:ab:79:b2:66:39:5b:74:e0:d2:49:80:c9:8d:8c:
         d1:12:de:dd:14:4f:46:66:08:37:b0:26:44:9d:48:c3:93:d9:
         8a:e9:54:68:3c:11:aa:17:f8:75:fb:dc:0f:46:d6:b0:a0:6a:
         0b:18:99:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 11:32:59 2026 by rpki-client