Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/34352e3138302e3138342e302f32322d3234203d3e20323639313435.roa
File:                     34352e3138302e3138342e302f32322d3234203d3e20323639313435.roa (raw, json)
Hash identifier:          oiE0Qu8gWI7bULJP3gSoQxHTCyZGoiRgn0Zt7+FNk6M=
Subject key identifier:   15:F9:D6:FD:D1:BD:28:55:EA:F8:10:52:4B:A8:A8:A0:DA:06:BC:60
Certificate issuer:       /CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
Certificate serial:       5BFA350CB3BD31999CA75DB12B112FDC4BAD6B13
Authority key identifier: 3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/34352e3138302e3138342e302f32322d3234203d3e20323639313435.roa
Signing time:             Tue 11 Aug 2026 18:45:50 +0000
ROA not before:           Tue 11 Aug 2026 18:40:50 +0000
ROA not after:            Tue 10 Aug 2027 18:45:50 +0000
asID:                     269145
IP address blocks:        45.180.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl
                          rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 03:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:fa:35:0c:b3:bd:31:99:9c:a7:5d:b1:2b:11:2f:dc:4b:ad:6b:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
        Validity
            Not Before: Aug 11 18:40:50 2026 GMT
            Not After : Aug 10 18:45:50 2027 GMT
        Subject: CN=15F9D6FDD1BD2855EAF810524BA8A8A0DA06BC60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c5:f0:89:59:d6:af:cc:93:ba:59:d7:33:2e:
                    9d:de:59:ab:b6:e3:59:b1:0b:a5:ae:e4:65:99:7d:
                    a4:57:36:62:6a:99:2c:50:19:a7:d9:9c:32:43:5d:
                    93:77:07:b9:4c:c3:16:8d:54:43:18:0a:3e:12:63:
                    cd:69:b7:78:bf:9b:5e:74:36:95:c9:aa:1e:31:07:
                    d1:ad:32:c6:a0:c1:46:ce:f2:aa:14:2e:2c:7c:ec:
                    7a:44:58:e1:2b:26:e1:3d:fc:34:bf:41:61:8a:72:
                    6e:07:f3:95:89:15:61:ae:ec:f6:49:f4:0d:cd:bb:
                    6b:f1:ad:f7:f2:df:c9:55:12:81:98:03:e0:aa:23:
                    ed:e4:01:fa:4a:a6:35:df:57:b9:a7:a4:8a:04:14:
                    07:02:ad:87:3f:6e:c6:2b:34:8c:6e:e4:be:02:fc:
                    06:d4:f8:71:04:e4:1e:a5:fb:4a:b1:1e:be:1d:d0:
                    a7:8c:35:57:86:a8:de:ff:06:ca:73:e7:8b:8b:c7:
                    43:0f:9e:64:5f:78:a6:40:74:e0:af:de:a5:53:99:
                    f2:24:c1:e4:c4:9b:8f:9a:2a:18:07:cf:03:93:c3:
                    4c:14:21:a1:c7:7c:f0:e9:68:ca:31:b9:60:65:e6:
                    6e:11:e0:3d:b2:f7:b9:a5:be:0a:c6:75:a7:fd:43:
                    12:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F9:D6:FD:D1:BD:28:55:EA:F8:10:52:4B:A8:A8:A0:DA:06:BC:60
            X509v3 Authority Key Identifier:
                keyid:3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/34352e3138302e3138342e302f32322d3234203d3e20323639313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:0c:1c:d8:b0:18:8c:cb:28:63:ed:3a:d0:09:ef:da:d9:2b:
         34:de:54:4a:0d:8d:aa:cf:79:b5:a3:50:c3:2d:93:84:76:50:
         01:ee:96:a2:cc:4c:d3:7f:b7:48:95:b2:bc:d5:93:93:5c:de:
         d9:13:26:3e:22:b2:2e:d8:cf:65:c4:5e:45:65:df:a7:5a:ba:
         59:52:ee:25:2a:8e:5b:4e:e0:be:92:8f:8b:8c:28:fb:c8:b4:
         69:52:98:0b:11:54:71:3a:7d:ae:f7:8e:c1:5e:41:7c:ea:e7:
         8d:c7:be:fe:63:61:a6:74:89:df:a9:a8:a9:a9:6a:c2:e0:8e:
         89:27:5b:0d:3f:ef:f8:22:38:62:be:6f:9a:8a:5e:1c:d6:07:
         1a:05:27:92:95:f4:53:7b:7e:11:0f:e1:4b:c2:ce:8a:fa:3c:
         3a:67:e5:98:dd:7e:10:d0:2c:23:9b:d1:c0:66:31:71:d0:05:
         2b:51:5d:69:89:c3:f5:d6:2b:8c:35:65:e2:10:d8:77:ad:73:
         9b:46:c5:88:af:90:c3:22:05:35:89:fe:54:8a:d1:6a:53:ce:
         88:53:be:6f:d5:15:ee:42:65:76:34:17:0b:5c:d4:18:a8:19:
         c9:a7:81:7a:96:92:94:7d:6f:d6:eb:03:f4:0a:33:1f:2e:e3:
         3f:e7:f5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----