Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmfSatqtYMz8KyfETpH8GnDsD5agjcH6HKTwejRJijX3/0/34352e3136322e3235322e302f32322d3234203d3e20323638363030.roa
File:                     34352e3136322e3235322e302f32322d3234203d3e20323638363030.roa (raw, json)
Hash identifier:          rDAzyigUvZoOeqhDx0Gv6km3txmNCg5b2S90flR8PdA=
Subject key identifier:   50:B2:82:7C:FA:0B:43:D8:5D:CC:DC:A5:35:0A:EC:84:BF:C0:E0:6F
Certificate issuer:       /CN=414FEF8ACCA2B8B868F286ED1F1632B4CCAA4B6F
Certificate serial:       148A6B2A1CFB32D912F8F28895F59E4675DF4586
Authority key identifier: 41:4F:EF:8A:CC:A2:B8:B8:68:F2:86:ED:1F:16:32:B4:CC:AA:4B:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/414FEF8ACCA2B8B868F286ED1F1632B4CCAA4B6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmfSatqtYMz8KyfETpH8GnDsD5agjcH6HKTwejRJijX3/0/34352e3136322e3235322e302f32322d3234203d3e20323638363030.roa
Signing time:             Wed 15 Apr 2026 16:23:02 +0000
ROA not before:           Wed 15 Apr 2026 16:18:02 +0000
ROA not after:            Wed 14 Apr 2027 16:23:02 +0000
asID:                     268600
IP address blocks:        45.162.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmfSatqtYMz8KyfETpH8GnDsD5agjcH6HKTwejRJijX3/0/414FEF8ACCA2B8B868F286ED1F1632B4CCAA4B6F.crl
                          rsync://rpki-repo.registro.br/repo/GmfSatqtYMz8KyfETpH8GnDsD5agjcH6HKTwejRJijX3/0/414FEF8ACCA2B8B868F286ED1F1632B4CCAA4B6F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/414FEF8ACCA2B8B868F286ED1F1632B4CCAA4B6F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 09:56:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:8a:6b:2a:1c:fb:32:d9:12:f8:f2:88:95:f5:9e:46:75:df:45:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=414FEF8ACCA2B8B868F286ED1F1632B4CCAA4B6F
        Validity
            Not Before: Apr 15 16:18:02 2026 GMT
            Not After : Apr 14 16:23:02 2027 GMT
        Subject: CN=50B2827CFA0B43D85DCCDCA5350AEC84BFC0E06F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ca:b9:52:13:4a:25:33:c7:e9:65:e0:1a:cf:
                    ca:66:85:1b:16:df:e0:53:a1:e6:f3:e8:99:c2:fb:
                    fd:9a:5a:11:3b:d2:bc:ee:d1:5f:86:12:23:10:a2:
                    2a:72:d3:7b:72:fb:34:78:dd:61:cf:1a:e1:46:d6:
                    68:d2:ed:bb:4f:66:ca:38:57:a8:2d:65:bd:16:98:
                    69:5b:bc:ab:26:e6:ac:3d:89:25:c3:d8:33:6c:e0:
                    c9:ac:d3:d2:41:5c:ab:60:19:96:73:54:57:90:76:
                    69:28:bd:68:f1:79:7a:45:4a:40:75:91:70:90:a4:
                    b9:57:c9:42:ca:3e:a4:48:3d:aa:e0:66:2a:85:0e:
                    33:70:54:50:7f:1e:ca:6d:15:d7:24:16:cc:30:df:
                    54:11:5e:60:91:54:7a:16:39:bc:66:a9:01:5f:d0:
                    88:15:c0:a1:1b:2e:0d:bc:90:15:76:26:87:53:b1:
                    27:bf:8f:5e:71:40:48:dd:68:7d:f0:ea:5d:61:66:
                    61:f9:fc:d7:eb:91:a9:ab:a5:69:12:14:81:80:1d:
                    43:1d:ef:f2:45:bc:d5:aa:cd:d3:f1:03:05:ec:f2:
                    8e:88:46:e6:2d:e6:98:3b:e2:9c:6b:bb:2e:0f:09:
                    81:45:63:c1:21:02:cd:a5:8f:f6:47:9c:31:62:ae:
                    74:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B2:82:7C:FA:0B:43:D8:5D:CC:DC:A5:35:0A:EC:84:BF:C0:E0:6F
            X509v3 Authority Key Identifier:
                keyid:41:4F:EF:8A:CC:A2:B8:B8:68:F2:86:ED:1F:16:32:B4:CC:AA:4B:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmfSatqtYMz8KyfETpH8GnDsD5agjcH6HKTwejRJijX3/0/414FEF8ACCA2B8B868F286ED1F1632B4CCAA4B6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/414FEF8ACCA2B8B868F286ED1F1632B4CCAA4B6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmfSatqtYMz8KyfETpH8GnDsD5agjcH6HKTwejRJijX3/0/34352e3136322e3235322e302f32322d3234203d3e20323638363030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:e8:fd:1f:02:27:47:6a:2f:f9:3e:c7:56:27:fa:6c:15:16:
         d8:87:52:71:f4:26:2f:61:e4:6f:52:cc:8f:8a:ee:f9:3d:6d:
         7f:c0:2c:22:70:f8:a4:31:d6:b4:43:7b:9d:64:c7:fb:03:52:
         4b:bb:79:90:71:6f:fc:fc:b7:8a:7b:66:14:ed:52:ad:7b:69:
         e6:aa:f1:cc:60:ed:55:3c:7d:cb:b0:c6:1b:14:49:e5:0e:ba:
         85:fc:38:2d:1a:be:79:ce:f3:4e:e4:73:e9:39:9a:a3:14:a4:
         48:be:a2:44:92:c1:a1:8b:43:8e:de:9b:85:a7:16:dc:45:70:
         5c:4c:0f:39:c7:75:f3:8b:ac:f2:eb:57:18:aa:1b:e6:f5:ec:
         f9:43:86:f3:c6:1f:56:a5:f7:db:c9:7a:4c:b7:09:de:14:29:
         8e:65:60:e2:85:65:c2:cf:f4:ae:87:bc:ca:81:a5:3e:0f:44:
         2e:15:d6:3d:9d:5d:25:51:b2:76:59:45:28:7e:17:86:18:8a:
         e3:ea:34:da:76:55:22:03:23:90:5c:00:b2:10:a9:18:59:a6:
         45:c4:39:f3:e0:26:e0:a8:2e:57:8c:53:ce:1c:0d:60:97:97:
         b8:14:5d:ea:36:66:9e:a4:96:21:b2:4a:91:e2:64:b8:26:7e:
         fb:d3:6d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:46:16 2026 by rpki-client