Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUbVVoeeoDsn1McXMXtV3sDN4sK3q91Uoyr8P2DdnQNy/0/34352e3232382e3231322e302f32322d3332203d3e20323638323338.roa
File:                     34352e3232382e3231322e302f32322d3332203d3e20323638323338.roa (raw, json)
Hash identifier:          mVffdwfY3vpr02rsisMo5bgPw6eKUw/45Am52TiCGs0=
Subject key identifier:   E9:F0:CE:BD:5C:65:6F:30:D2:2E:18:39:B9:96:CE:5C:3F:EA:00:24
Certificate issuer:       /CN=A718F3232A07A512E73F043C4977DE8F1D504E98
Certificate serial:       7DFDC9D332F38BF8867CEA936453115865A0A74B
Authority key identifier: A7:18:F3:23:2A:07:A5:12:E7:3F:04:3C:49:77:DE:8F:1D:50:4E:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A718F3232A07A512E73F043C4977DE8F1D504E98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUbVVoeeoDsn1McXMXtV3sDN4sK3q91Uoyr8P2DdnQNy/0/34352e3232382e3231322e302f32322d3332203d3e20323638323338.roa
Signing time:             Wed 15 Apr 2026 12:38:21 +0000
ROA not before:           Wed 15 Apr 2026 12:33:21 +0000
ROA not after:            Wed 14 Apr 2027 12:38:21 +0000
asID:                     268238
IP address blocks:        45.228.212.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUbVVoeeoDsn1McXMXtV3sDN4sK3q91Uoyr8P2DdnQNy/0/A718F3232A07A512E73F043C4977DE8F1D504E98.crl
                          rsync://rpki-repo.registro.br/repo/GUbVVoeeoDsn1McXMXtV3sDN4sK3q91Uoyr8P2DdnQNy/0/A718F3232A07A512E73F043C4977DE8F1D504E98.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A718F3232A07A512E73F043C4977DE8F1D504E98.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 18:09:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:fd:c9:d3:32:f3:8b:f8:86:7c:ea:93:64:53:11:58:65:a0:a7:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A718F3232A07A512E73F043C4977DE8F1D504E98
        Validity
            Not Before: Apr 15 12:33:21 2026 GMT
            Not After : Apr 14 12:38:21 2027 GMT
        Subject: CN=E9F0CEBD5C656F30D22E1839B996CE5C3FEA0024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4b:75:31:a4:3d:5b:5d:70:84:fc:08:95:c2:
                    32:c9:52:4b:db:73:2e:32:21:08:15:5e:97:b3:2d:
                    02:12:b9:b3:db:f3:ec:76:59:8f:73:68:8b:ae:a7:
                    a0:6f:82:f0:b2:9e:ba:70:ab:40:46:ce:16:73:17:
                    f3:b8:c1:0f:1e:e0:e0:fc:7c:66:ae:1e:40:2d:c1:
                    17:ea:0f:4b:94:79:35:35:e0:8f:4c:c1:c7:42:79:
                    51:17:20:57:9f:19:24:e3:e0:63:15:e5:c7:a5:05:
                    ff:e2:c6:11:b3:47:76:3b:c7:c0:38:f3:99:1c:7c:
                    c3:ae:de:db:8f:64:21:d9:d8:13:c6:c7:33:da:f8:
                    3d:18:3b:b9:fa:4e:75:8a:de:16:3d:dd:c5:96:e4:
                    f6:8b:ed:7c:f3:fd:f2:09:df:4b:58:b1:30:75:c9:
                    63:a4:aa:67:7c:b0:78:01:d8:af:e4:7d:c5:2c:d6:
                    93:2d:f0:40:a3:48:20:c3:20:cc:4d:e1:75:a5:27:
                    f4:68:82:cc:30:e8:c1:d2:aa:8d:a0:eb:7a:a8:d4:
                    23:bc:93:2f:13:02:9b:17:2c:54:e7:2d:b4:d6:33:
                    35:ea:e0:17:97:90:16:6f:b6:e3:e6:e0:70:3a:f8:
                    80:f2:36:ab:3a:5a:65:6a:64:72:c0:07:e3:47:02:
                    0b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F0:CE:BD:5C:65:6F:30:D2:2E:18:39:B9:96:CE:5C:3F:EA:00:24
            X509v3 Authority Key Identifier:
                keyid:A7:18:F3:23:2A:07:A5:12:E7:3F:04:3C:49:77:DE:8F:1D:50:4E:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUbVVoeeoDsn1McXMXtV3sDN4sK3q91Uoyr8P2DdnQNy/0/A718F3232A07A512E73F043C4977DE8F1D504E98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A718F3232A07A512E73F043C4977DE8F1D504E98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUbVVoeeoDsn1McXMXtV3sDN4sK3q91Uoyr8P2DdnQNy/0/34352e3232382e3231322e302f32322d3332203d3e20323638323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:af:6a:a1:65:45:ba:59:25:d6:d1:fa:7a:3c:85:0c:5a:ee:
         a5:93:8e:31:a3:e4:bb:16:09:5b:b5:da:b0:7e:d8:d2:0f:a5:
         29:09:5f:98:2f:4a:c0:e6:e4:43:37:f2:2c:96:d5:0b:c8:a2:
         ae:e5:d4:79:f0:2f:e8:12:ba:3f:a3:de:b2:39:e8:6b:20:03:
         ad:ba:db:30:b0:63:09:fd:ea:be:99:e0:a0:cb:36:f9:a1:e7:
         1a:25:2c:4e:08:a0:b3:30:aa:79:b2:71:9d:4f:ae:8d:7b:b6:
         98:13:6a:51:68:9c:c9:7f:61:76:b9:12:0b:66:ad:1d:d2:47:
         39:82:36:69:e8:ce:1d:87:17:a8:5a:31:55:c5:75:0d:59:ac:
         f8:dd:10:27:dc:6b:4a:0c:20:ef:4d:5c:56:e5:48:f7:14:26:
         1a:ca:a0:27:c3:5b:41:f6:5e:df:87:4f:11:04:05:a7:9a:04:
         8c:36:64:ad:1b:d5:04:82:12:24:8f:ac:99:05:50:c2:ff:4a:
         7f:f9:c9:25:12:93:e2:cd:03:aa:7d:10:7c:fd:b9:aa:3d:92:
         25:85:b3:8c:5d:60:35:ec:cb:11:ad:5c:c4:e0:0f:fa:e1:f0:
         87:54:5a:47:dd:de:6a:3e:5f:3b:a4:b9:f5:ad:86:e4:34:60:
         14:26:ec:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:07:17 2026 by rpki-client