Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/0/34352e3138372e35362e302f32322d3234203d3e20323639353436.roa
File:                     34352e3138372e35362e302f32322d3234203d3e20323639353436.roa (raw, json)
Hash identifier:          Zls/JJYrLVXjAAaz7qSFclvtHuskOo0KuMnXTtvZllY=
Subject key identifier:   C2:4E:9E:F5:B9:F6:C8:3A:B3:30:CA:7A:D4:87:83:B3:F4:1A:90:29
Certificate issuer:       /CN=7CFA3381B2EB4340742FAA224990E6C0A99EA496
Certificate serial:       0DFFFAC6D0A914D246EAA3FA12E968469132F162
Authority key identifier: 7C:FA:33:81:B2:EB:43:40:74:2F:AA:22:49:90:E6:C0:A9:9E:A4:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CFA3381B2EB4340742FAA224990E6C0A99EA496.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/0/34352e3138372e35362e302f32322d3234203d3e20323639353436.roa
Signing time:             Mon 01 Jun 2026 20:40:04 +0000
ROA not before:           Mon 01 Jun 2026 20:35:04 +0000
ROA not after:            Mon 31 May 2027 20:40:04 +0000
asID:                     269546
IP address blocks:        45.187.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/0/7CFA3381B2EB4340742FAA224990E6C0A99EA496.crl
                          rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/0/7CFA3381B2EB4340742FAA224990E6C0A99EA496.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CFA3381B2EB4340742FAA224990E6C0A99EA496.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 00:56:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:ff:fa:c6:d0:a9:14:d2:46:ea:a3:fa:12:e9:68:46:91:32:f1:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CFA3381B2EB4340742FAA224990E6C0A99EA496
        Validity
            Not Before: Jun  1 20:35:04 2026 GMT
            Not After : May 31 20:40:04 2027 GMT
        Subject: CN=C24E9EF5B9F6C83AB330CA7AD48783B3F41A9029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:64:d0:68:69:61:19:2b:49:36:a8:a9:c3:26:
                    98:38:5d:36:5e:69:3c:c9:30:d8:20:41:de:e0:52:
                    c7:aa:21:45:af:a3:6e:94:77:36:d7:ba:56:29:6f:
                    5d:9c:21:58:72:a2:46:d4:1d:a5:fd:0d:1a:ef:6f:
                    dd:88:cc:e1:b8:5c:b5:59:7f:8a:a9:23:34:61:52:
                    b7:b5:ff:d7:b7:11:f1:f1:74:a7:3b:45:4f:73:7e:
                    5b:43:29:fb:11:f0:5d:df:0d:67:06:e0:5f:46:c4:
                    0b:c1:17:29:f9:9f:2f:14:c5:97:0a:ff:a4:92:3e:
                    76:f5:12:92:30:75:05:0e:0e:31:b3:e8:91:97:b8:
                    b0:bd:9d:88:6b:35:d2:c2:a0:91:e0:f7:2c:e4:18:
                    6b:55:df:af:0a:7e:a9:77:5c:58:cc:ab:b0:43:58:
                    d4:cd:11:78:88:ce:7d:30:9d:53:d9:41:5f:46:25:
                    37:ac:f5:37:ef:8c:3b:5c:de:d0:26:e4:98:54:7f:
                    8a:7c:aa:ac:3e:73:d4:2d:a7:b7:2b:e6:ce:dc:4e:
                    cd:87:7a:96:0f:cd:ae:65:57:fc:2e:12:24:d1:00:
                    2c:1c:a5:a5:87:0a:47:34:49:35:80:ae:37:fc:82:
                    f3:5d:6a:a6:d9:4a:cc:5a:2d:df:c0:89:58:4a:51:
                    bd:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4E:9E:F5:B9:F6:C8:3A:B3:30:CA:7A:D4:87:83:B3:F4:1A:90:29
            X509v3 Authority Key Identifier:
                keyid:7C:FA:33:81:B2:EB:43:40:74:2F:AA:22:49:90:E6:C0:A9:9E:A4:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/0/7CFA3381B2EB4340742FAA224990E6C0A99EA496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CFA3381B2EB4340742FAA224990E6C0A99EA496.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/0/34352e3138372e35362e302f32322d3234203d3e20323639353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:6d:eb:00:c9:09:ed:48:43:b3:da:d4:ab:6e:15:10:c3:9f:
         54:7a:c5:37:6a:0d:53:d1:59:24:9e:f9:a7:1e:6b:9e:d9:3b:
         71:98:1c:2d:76:b9:19:96:46:b9:b0:1a:31:69:be:31:d7:70:
         d7:e9:1a:40:29:48:41:3a:63:23:82:e7:9b:53:e2:41:ad:ed:
         bf:b8:fa:54:a7:eb:40:d6:ff:c5:7e:39:3b:d6:23:0a:f2:b8:
         99:28:79:31:a8:a5:97:69:6b:19:7e:ff:33:c5:f5:1b:16:72:
         da:c4:f3:ac:0a:f2:9a:76:25:78:67:d0:89:a3:ce:0d:96:24:
         c6:1b:ef:81:2d:68:ca:50:9d:69:a5:ad:a6:d2:18:b5:f4:7c:
         2e:c7:8a:1c:36:9b:27:b3:ac:24:a6:bd:e2:9f:10:86:32:27:
         d9:d7:f6:c2:48:35:f9:8d:4a:6f:95:25:6d:0d:10:d8:e2:17:
         76:4b:9f:fe:c8:8c:0f:34:c6:c3:80:5e:ac:c6:ab:d5:91:4c:
         84:33:c9:b0:74:09:12:e0:fc:39:61:c2:3a:bf:dc:88:22:0e:
         25:c8:39:fe:0e:56:34:f9:b6:f8:83:0a:dc:19:d1:d6:41:28:
         b2:32:f1:95:19:17:a0:a3:4e:f2:93:29:78:e9:b8:dc:09:ed:
         5c:05:ef:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 03:56:17 2026 by rpki-client