Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ReLAaV4xbkck6iW8RecStyxe3RA6N5h7hcDXABxYi5u/0/34352e3138332e3230302e302f32322d3332203d3e20323639343033.roa
File:                     34352e3138332e3230302e302f32322d3332203d3e20323639343033.roa (raw, json)
Hash identifier:          FY94crFCC/ps5HpW05Lw5I68gYp1GPYANWLJl2cwMfs=
Subject key identifier:   F3:80:1F:FF:23:13:EA:95:D6:60:2C:BE:B1:0B:CD:99:21:7B:C5:D5
Certificate issuer:       /CN=46E84850835B7708ECE5E3073FFEA7A8DF9BEA60
Certificate serial:       1A7D8E1252ED6869F27E57C1B5E682DE2CFC8B69
Authority key identifier: 46:E8:48:50:83:5B:77:08:EC:E5:E3:07:3F:FE:A7:A8:DF:9B:EA:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46E84850835B7708ECE5E3073FFEA7A8DF9BEA60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ReLAaV4xbkck6iW8RecStyxe3RA6N5h7hcDXABxYi5u/0/34352e3138332e3230302e302f32322d3332203d3e20323639343033.roa
Signing time:             Mon 13 Apr 2026 15:01:11 +0000
ROA not before:           Mon 13 Apr 2026 14:56:11 +0000
ROA not after:            Mon 12 Apr 2027 15:01:11 +0000
asID:                     269403
IP address blocks:        45.183.200.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ReLAaV4xbkck6iW8RecStyxe3RA6N5h7hcDXABxYi5u/0/46E84850835B7708ECE5E3073FFEA7A8DF9BEA60.crl
                          rsync://rpki-repo.registro.br/repo/ReLAaV4xbkck6iW8RecStyxe3RA6N5h7hcDXABxYi5u/0/46E84850835B7708ECE5E3073FFEA7A8DF9BEA60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46E84850835B7708ECE5E3073FFEA7A8DF9BEA60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 12:04:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:7d:8e:12:52:ed:68:69:f2:7e:57:c1:b5:e6:82:de:2c:fc:8b:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46E84850835B7708ECE5E3073FFEA7A8DF9BEA60
        Validity
            Not Before: Apr 13 14:56:11 2026 GMT
            Not After : Apr 12 15:01:11 2027 GMT
        Subject: CN=F3801FFF2313EA95D6602CBEB10BCD99217BC5D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:01:b2:d9:c7:82:ea:82:56:67:ee:c4:77:44:
                    e4:7e:2e:51:aa:df:d5:5a:1f:c5:82:2f:45:2a:2f:
                    30:00:d4:51:43:9d:1e:d7:63:d5:98:db:8a:be:dc:
                    a2:32:26:9f:55:3f:11:9f:14:c6:69:dd:40:78:67:
                    89:cd:b1:a4:cc:e0:c3:ca:e2:c7:7e:dc:08:93:86:
                    86:ff:4f:0a:45:08:0f:b6:07:ae:c3:56:15:bb:62:
                    61:b5:62:71:d8:04:21:20:e2:fe:d2:9b:12:0b:8c:
                    56:03:9e:79:be:e2:fe:d6:9b:48:57:e2:b3:3f:25:
                    45:2c:15:6f:d0:a1:e5:5f:86:d5:ba:34:15:8b:9d:
                    21:4b:a8:fa:2e:5d:bb:ae:f4:59:bb:91:13:11:3d:
                    87:35:b1:12:d7:d0:af:d4:a7:0a:60:22:1b:d1:ae:
                    1f:f0:9e:34:82:b3:91:32:25:d5:21:9d:96:4e:9d:
                    13:68:8a:25:9d:aa:28:1f:66:65:cb:86:42:9e:b9:
                    ec:3b:35:9b:98:e4:33:6b:b1:3a:21:39:6b:d2:1c:
                    80:31:f0:c3:34:f0:44:f3:fb:e8:bb:65:d2:3e:b9:
                    f0:1d:95:24:25:0b:e0:f5:99:d3:87:93:99:86:f0:
                    51:19:ab:8c:fd:6d:db:8d:12:19:21:38:d2:29:78:
                    53:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:80:1F:FF:23:13:EA:95:D6:60:2C:BE:B1:0B:CD:99:21:7B:C5:D5
            X509v3 Authority Key Identifier:
                keyid:46:E8:48:50:83:5B:77:08:EC:E5:E3:07:3F:FE:A7:A8:DF:9B:EA:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ReLAaV4xbkck6iW8RecStyxe3RA6N5h7hcDXABxYi5u/0/46E84850835B7708ECE5E3073FFEA7A8DF9BEA60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46E84850835B7708ECE5E3073FFEA7A8DF9BEA60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ReLAaV4xbkck6iW8RecStyxe3RA6N5h7hcDXABxYi5u/0/34352e3138332e3230302e302f32322d3332203d3e20323639343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:83:53:7d:f2:52:4f:6b:27:bb:94:15:3e:06:19:ef:45:d5:
         e4:48:a9:aa:d9:2c:aa:4e:34:37:08:21:c9:95:e2:1d:6f:49:
         d5:ed:c7:8a:af:09:8b:84:1b:c4:f6:0f:51:3c:df:e0:d5:51:
         64:0a:f7:bd:02:bb:66:49:26:34:18:5c:95:1c:05:2c:6a:ef:
         74:b4:8a:c5:ed:7c:32:db:0f:d4:5f:a5:9a:93:6f:ae:de:2a:
         7a:31:c8:d8:1a:04:25:16:eb:81:98:85:56:dd:22:60:47:6b:
         d9:19:a4:54:d2:9d:96:b6:1d:01:79:40:16:0f:3f:56:80:33:
         a5:90:09:66:00:f9:f4:7e:cb:50:7e:ae:f1:53:93:7a:4a:e8:
         28:e9:80:bc:76:e1:d8:fb:b5:96:db:b6:40:c9:a1:d3:c1:1d:
         34:ae:6c:9f:6a:1c:d9:36:2d:b6:37:e0:2c:48:ff:3f:3d:7d:
         1d:c2:69:46:bd:b3:72:8e:c9:6b:48:fe:b7:71:c5:a0:b6:2f:
         00:ab:98:30:5a:00:34:ae:bb:de:04:c8:5c:07:7f:70:bb:fc:
         8f:31:a0:9f:eb:cf:10:0a:77:50:55:88:c0:fa:db:c4:bd:a8:
         db:0b:62:29:6e:c8:15:44:88:ec:4d:bd:9a:1b:af:dd:83:3d:
         e5:a3:e5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:29:26 2026 by rpki-client