Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5h3fpQ9nDXC6aXvcva9yU6dJFSP87iTSm5LZwjikEfp8/0/34352e3137352e35362e302f32342d3234203d3e20323638383833.roa
File:                     34352e3137352e35362e302f32342d3234203d3e20323638383833.roa (raw, json)
Hash identifier:          qJcY3PiRsxS0ZfGSJril4zYzMzZPrgO34Hr+YmCjU9s=
Subject key identifier:   C5:2A:73:3A:42:B5:90:55:A8:9B:55:AC:7B:40:B2:A2:0B:84:37:8A
Certificate issuer:       /CN=EA48F6970280B064226B470130F7ADE0F415C5C1
Certificate serial:       4F35C7F5570710AD5589FEC9C60C0F1F321F91E7
Authority key identifier: EA:48:F6:97:02:80:B0:64:22:6B:47:01:30:F7:AD:E0:F4:15:C5:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA48F6970280B064226B470130F7ADE0F415C5C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5h3fpQ9nDXC6aXvcva9yU6dJFSP87iTSm5LZwjikEfp8/0/34352e3137352e35362e302f32342d3234203d3e20323638383833.roa
Signing time:             Tue 06 Jan 2026 03:16:11 +0000
ROA not before:           Tue 06 Jan 2026 03:11:11 +0000
ROA not after:            Tue 05 Jan 2027 03:16:11 +0000
asID:                     268883
IP address blocks:        45.175.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5h3fpQ9nDXC6aXvcva9yU6dJFSP87iTSm5LZwjikEfp8/0/EA48F6970280B064226B470130F7ADE0F415C5C1.crl
                          rsync://rpki-repo.registro.br/repo/5h3fpQ9nDXC6aXvcva9yU6dJFSP87iTSm5LZwjikEfp8/0/EA48F6970280B064226B470130F7ADE0F415C5C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA48F6970280B064226B470130F7ADE0F415C5C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 10:12:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:35:c7:f5:57:07:10:ad:55:89:fe:c9:c6:0c:0f:1f:32:1f:91:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA48F6970280B064226B470130F7ADE0F415C5C1
        Validity
            Not Before: Jan  6 03:11:11 2026 GMT
            Not After : Jan  5 03:16:11 2027 GMT
        Subject: CN=C52A733A42B59055A89B55AC7B40B2A20B84378A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b8:df:07:72:ab:48:57:0e:38:26:84:0e:75:
                    c4:d4:a5:42:93:cb:c2:ab:c2:59:56:6a:56:af:2c:
                    18:96:08:a0:2f:e3:1b:e2:5e:50:57:94:86:fd:96:
                    94:8d:86:bd:b5:38:16:01:69:2a:6c:01:2c:d7:ca:
                    d8:7d:b8:ab:b4:20:ff:a2:92:57:f2:1d:05:89:a6:
                    2f:49:88:0c:4d:61:a6:72:8b:a2:01:78:68:3d:d3:
                    78:45:07:63:b7:92:95:0e:74:72:2c:a8:71:e3:f0:
                    f7:3d:8b:d0:ae:7d:14:51:24:b3:7c:72:e1:52:74:
                    53:69:40:16:c0:0d:32:1e:82:95:77:f4:41:54:03:
                    f0:ba:4d:3f:cc:89:38:2e:23:47:2c:e6:40:2a:d8:
                    42:0f:f4:99:f0:7b:9f:a1:5c:bd:28:a2:c7:05:f9:
                    65:de:26:de:39:d0:37:c0:76:29:6d:79:58:75:23:
                    09:be:9e:f5:95:2c:b6:fc:74:f2:82:43:af:b6:6a:
                    e1:1b:99:61:5f:b1:cb:55:0a:f9:0f:63:5e:50:d2:
                    6d:7b:a7:e1:e6:7f:5e:65:44:b0:96:73:41:f4:dc:
                    bf:ca:5e:84:0a:b1:fb:78:11:20:85:df:10:4b:b7:
                    27:64:ff:e9:42:ef:03:ae:98:25:95:11:49:e7:dd:
                    98:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:2A:73:3A:42:B5:90:55:A8:9B:55:AC:7B:40:B2:A2:0B:84:37:8A
            X509v3 Authority Key Identifier:
                keyid:EA:48:F6:97:02:80:B0:64:22:6B:47:01:30:F7:AD:E0:F4:15:C5:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5h3fpQ9nDXC6aXvcva9yU6dJFSP87iTSm5LZwjikEfp8/0/EA48F6970280B064226B470130F7ADE0F415C5C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA48F6970280B064226B470130F7ADE0F415C5C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5h3fpQ9nDXC6aXvcva9yU6dJFSP87iTSm5LZwjikEfp8/0/34352e3137352e35362e302f32342d3234203d3e20323638383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:ea:64:b0:16:f3:74:f1:8b:c9:0c:d2:69:25:18:9f:65:d5:
         39:26:3b:79:58:de:3f:66:72:20:0a:3f:04:8d:22:f7:eb:64:
         a1:ad:e4:40:c5:c0:03:53:e1:d9:9a:38:4f:ab:b5:5c:f8:81:
         13:92:cf:81:3a:49:34:41:55:df:ae:37:4a:d8:bc:50:ca:8c:
         ff:6c:82:a1:29:97:ea:ce:26:86:da:d2:9f:c7:fb:c0:46:32:
         6a:14:29:51:13:5c:31:7d:c5:ba:aa:3b:88:98:68:37:72:f0:
         e4:52:cc:c2:3a:37:18:f0:5c:84:ce:c6:69:01:f4:95:75:5b:
         a4:9d:e7:c9:ac:37:0a:98:56:24:fd:b3:9c:52:a3:6c:fb:b1:
         a1:58:e5:c7:d2:af:90:1b:e3:08:27:e9:00:a3:b7:e6:53:d7:
         d6:f4:f4:ac:35:cf:12:b6:01:5e:5c:6d:79:14:e4:0b:b4:0b:
         23:19:db:da:6c:3e:c6:38:b8:2e:ae:05:2d:66:2e:1f:f9:c6:
         66:83:21:3a:7d:b5:d2:3f:15:2f:dc:af:68:fa:fa:0e:a4:99:
         a9:1a:5e:94:56:b9:54:85:c9:2f:5e:ce:29:a0:1e:84:a1:79:
         53:9d:d5:d2:b8:72:3e:9a:5b:12:33:71:f4:51:33:ff:c7:60:
         c6:26:f0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 03:03:12 2026 by rpki-client