Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/0/34352e3233362e3131322e302f32322d3234203d3e20323638323334.roa
File:                     34352e3233362e3131322e302f32322d3234203d3e20323638323334.roa (raw, json)
Hash identifier:          H4eBwR6k31qSpPRqgwR4yiMvuYQ7c74UCiccVdkifbs=
Subject key identifier:   65:1E:E7:11:7C:9C:F3:9D:42:5C:61:9A:3F:40:81:C4:47:48:C3:E3
Certificate issuer:       /CN=34D2D112FBB2360F44F9772873942AC8955FC4D6
Certificate serial:       38ED1C3B4634934A1F202354992D965B5CE49442
Authority key identifier: 34:D2:D1:12:FB:B2:36:0F:44:F9:77:28:73:94:2A:C8:95:5F:C4:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34D2D112FBB2360F44F9772873942AC8955FC4D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/0/34352e3233362e3131322e302f32322d3234203d3e20323638323334.roa
Signing time:             Fri 15 May 2026 00:16:01 +0000
ROA not before:           Fri 15 May 2026 00:11:01 +0000
ROA not after:            Fri 14 May 2027 00:16:01 +0000
asID:                     268234
IP address blocks:        45.236.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/0/34D2D112FBB2360F44F9772873942AC8955FC4D6.crl
                          rsync://rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/0/34D2D112FBB2360F44F9772873942AC8955FC4D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34D2D112FBB2360F44F9772873942AC8955FC4D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 Jun 2026 21:38:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ed:1c:3b:46:34:93:4a:1f:20:23:54:99:2d:96:5b:5c:e4:94:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34D2D112FBB2360F44F9772873942AC8955FC4D6
        Validity
            Not Before: May 15 00:11:01 2026 GMT
            Not After : May 14 00:16:01 2027 GMT
        Subject: CN=651EE7117C9CF39D425C619A3F4081C44748C3E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:dd:a1:a5:0c:51:96:99:e6:d2:2d:5f:0f:52:
                    f2:fd:84:1c:19:b3:85:be:d2:98:7f:f5:8b:c9:3b:
                    92:00:27:3e:c1:3d:6e:62:b9:d9:55:76:e2:a4:71:
                    3f:c2:3d:4a:54:47:07:35:98:79:b7:e2:4e:98:74:
                    a2:71:21:b8:b6:7c:54:ed:c5:1d:39:83:9e:e8:b4:
                    5d:35:99:20:ae:a9:10:bf:09:ac:40:80:f9:6c:ab:
                    5f:09:9c:6d:96:9e:78:34:55:db:14:36:8d:ae:e2:
                    ea:f0:f3:ad:51:b6:80:c3:01:18:b4:2d:d0:c1:40:
                    24:7a:0c:12:91:5b:c8:f1:2e:9c:ea:1d:24:e0:ea:
                    12:42:51:b7:52:c3:96:f4:28:56:ca:37:d1:9b:f4:
                    fa:61:e2:bd:89:00:2b:42:6a:9d:c8:4d:13:c0:24:
                    1b:34:07:fc:b5:05:bc:ed:a4:bb:18:28:0c:00:95:
                    4d:84:74:76:f6:cc:ad:fb:9d:95:71:e0:72:27:9a:
                    f4:b8:99:54:ff:9e:72:87:a5:ba:2c:90:43:9b:17:
                    9a:c2:b9:6f:db:f0:48:ec:63:58:41:f5:be:f9:62:
                    55:da:8b:9c:67:0b:cb:66:d1:14:66:16:7b:d9:08:
                    42:28:7d:6c:4b:56:d4:9d:44:9c:81:30:3c:32:7c:
                    12:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1E:E7:11:7C:9C:F3:9D:42:5C:61:9A:3F:40:81:C4:47:48:C3:E3
            X509v3 Authority Key Identifier:
                keyid:34:D2:D1:12:FB:B2:36:0F:44:F9:77:28:73:94:2A:C8:95:5F:C4:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/0/34D2D112FBB2360F44F9772873942AC8955FC4D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34D2D112FBB2360F44F9772873942AC8955FC4D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/0/34352e3233362e3131322e302f32322d3234203d3e20323638323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:d6:05:eb:3f:5b:37:c2:f3:95:78:35:4e:08:e4:6a:9e:6f:
         92:a5:e5:88:02:f3:65:98:09:f2:e7:d6:0f:3c:fe:36:f3:50:
         43:42:1d:0c:b0:0d:63:80:15:e7:78:e9:98:73:6f:f0:75:f1:
         0e:2c:ab:da:f7:4a:26:a8:7b:c2:8d:95:77:8e:89:52:4a:b6:
         2b:8c:a2:ce:32:e5:8a:8e:e6:db:78:df:6b:c4:4d:8c:83:db:
         df:91:f1:dd:c7:d0:3d:14:19:84:67:2f:3b:ff:c3:64:36:31:
         96:23:c7:0c:5a:18:35:87:78:7d:5a:03:2f:86:b4:73:eb:57:
         e4:c3:99:69:8e:82:6e:ab:66:81:77:65:67:5e:32:76:70:ba:
         f2:a1:0a:b8:87:03:a2:6e:78:28:99:89:50:8f:67:86:3e:b6:
         c1:de:b2:02:61:ff:cc:47:14:58:7d:6a:d3:5d:16:02:f7:a6:
         8f:a7:a7:74:d3:45:4b:f3:f3:13:7c:e0:34:cd:bb:91:80:06:
         9c:ce:6b:50:7d:0a:ab:dc:e7:3e:53:5b:5b:ea:b9:73:c4:55:
         e1:60:b6:e6:ec:78:b1:6e:7a:b2:c4:f2:42:26:c2:bb:d1:5a:
         58:ef:31:3a:a0:f4:ce:80:3d:1c:88:65:dc:36:cb:76:97:0c:
         81:6f:ca:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:13:49 2026 by rpki-client