Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/34352e3137362e3135322e302f32322d3234203d3e20323639303037.roa
File:                     34352e3137362e3135322e302f32322d3234203d3e20323639303037.roa (raw, json)
Hash identifier:          t2sTruT6wAljHYii39L953efRp7fi+r8HAPm43jXkbo=
Subject key identifier:   3F:7F:F9:BA:05:2B:EA:F5:5C:AC:D7:8D:44:F4:C6:D0:1C:02:83:B5
Certificate issuer:       /CN=3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30
Certificate serial:       643AC336DCF31C98A7C78F58D57E069D453A1C4A
Authority key identifier: 3B:18:B7:DC:9E:3A:9E:E8:2B:ED:80:DD:09:B5:7D:20:04:5B:0C:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/34352e3137362e3135322e302f32322d3234203d3e20323639303037.roa
Signing time:             Wed 13 May 2026 15:36:29 +0000
ROA not before:           Wed 13 May 2026 15:31:29 +0000
ROA not after:            Wed 12 May 2027 15:36:29 +0000
asID:                     269007
IP address blocks:        45.176.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.crl
                          rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 06:22:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:3a:c3:36:dc:f3:1c:98:a7:c7:8f:58:d5:7e:06:9d:45:3a:1c:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30
        Validity
            Not Before: May 13 15:31:29 2026 GMT
            Not After : May 12 15:36:29 2027 GMT
        Subject: CN=3F7FF9BA052BEAF55CACD78D44F4C6D01C0283B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2e:fc:bf:5f:8c:55:09:55:df:0a:dc:30:c0:
                    92:30:c3:fc:53:d0:ed:5f:dd:82:81:c8:d4:7f:a4:
                    07:db:90:ec:c1:bb:60:c3:a5:c1:b9:ba:b9:3b:fa:
                    24:56:70:24:34:7c:d0:f9:ba:6a:9c:a4:47:47:00:
                    fb:1b:ec:14:5e:4b:15:db:0b:51:a6:0b:7b:21:2a:
                    79:fa:1c:0c:27:c9:51:7c:2c:f0:5b:de:2a:96:57:
                    66:37:d5:d7:b5:68:e0:28:9a:5d:3a:81:16:80:4a:
                    e1:32:1a:20:ad:c7:5e:69:4b:2f:29:8d:48:a2:92:
                    ba:a7:f2:b6:51:f7:bd:44:7a:37:c6:a4:c0:5d:b3:
                    c7:64:65:15:7d:4a:ac:5c:92:24:53:6e:36:88:f4:
                    69:bb:b8:56:ad:5e:b1:6a:d0:7b:db:fd:60:57:56:
                    e6:42:98:1a:13:5e:67:0b:34:bb:25:7c:27:12:47:
                    34:30:76:5d:0b:4c:8a:f8:a8:57:a0:36:ae:b3:95:
                    5d:11:80:2c:55:dd:6f:04:65:7a:82:91:d8:10:ce:
                    dd:c1:23:7a:14:00:8a:47:47:6e:61:22:c5:54:36:
                    e4:a6:bd:f1:04:85:20:c3:be:5e:67:b7:fa:e6:c4:
                    23:d5:c0:7b:30:1e:e1:6b:ee:ea:98:27:1b:8f:66:
                    55:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:7F:F9:BA:05:2B:EA:F5:5C:AC:D7:8D:44:F4:C6:D0:1C:02:83:B5
            X509v3 Authority Key Identifier:
                keyid:3B:18:B7:DC:9E:3A:9E:E8:2B:ED:80:DD:09:B5:7D:20:04:5B:0C:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/34352e3137362e3135322e302f32322d3234203d3e20323639303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:1e:0c:61:46:ab:4b:0a:4f:d1:5b:c7:00:bd:d3:b1:41:22:
         cd:f1:40:07:be:0a:35:76:1e:43:c6:d6:3e:99:14:1f:99:ca:
         00:d7:54:8e:0c:ae:01:7c:87:b1:f4:57:53:9a:d6:5c:42:a0:
         da:98:fd:72:2c:05:d5:65:bb:29:e8:9b:20:1b:c7:aa:00:25:
         28:e9:d7:db:7d:64:d6:1a:03:45:39:98:bc:08:e4:e6:95:8e:
         1a:41:a9:52:4b:c9:de:03:1f:b4:f6:7d:31:63:04:0a:92:50:
         47:cb:5b:f9:fc:9c:9f:f9:c4:57:fa:7d:c7:76:bb:49:88:ca:
         aa:e0:c4:5c:aa:a1:3e:a6:ac:04:97:4a:e6:3e:45:8d:e1:a6:
         47:62:10:8f:3e:65:e2:59:c6:71:ee:14:15:66:29:87:bf:c3:
         61:24:d5:b7:7d:9b:f4:78:03:df:b9:f4:5a:b9:58:14:d5:97:
         91:29:e7:b9:dd:98:0b:20:85:b6:2c:8f:54:eb:7a:35:f2:70:
         7e:39:94:a8:21:2b:ca:d7:fb:ed:b4:bc:ab:fa:80:12:de:03:
         09:62:12:5f:d3:c4:5a:a5:8c:9b:e6:2f:ee:a9:05:e2:e3:99:
         63:1b:7d:ba:8b:3a:52:34:92:eb:fc:66:6c:7c:41:fe:a5:70:
         53:6e:2b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 19:37:45 2026 by rpki-client