Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5uEjBDAkwaG1DKGRuzD4VfFpeQ4JhKMDRhBzf9oYpQBf/1/34352e342e33362e302f32342d3234203d3e20323636303435.roa
File:                     34352e342e33362e302f32342d3234203d3e20323636303435.roa (raw, json)
Hash identifier:          Uz8pGyGz0Ff0oLd5gx8TTj1gPnEmr4i4+Y8fKHHnnCc=
Subject key identifier:   88:EA:5F:00:0B:0D:48:C7:2E:EB:F4:12:8D:2C:DD:95:EA:6E:2C:1C
Certificate issuer:       /CN=A75ED3D3A27119AD362E745F2E0EC17950532980
Certificate serial:       41C53FA6C2BB3F2289A75C96DE1CFB225DE297F9
Authority key identifier: A7:5E:D3:D3:A2:71:19:AD:36:2E:74:5F:2E:0E:C1:79:50:53:29:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A75ED3D3A27119AD362E745F2E0EC17950532980.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uEjBDAkwaG1DKGRuzD4VfFpeQ4JhKMDRhBzf9oYpQBf/1/34352e342e33362e302f32342d3234203d3e20323636303435.roa
Signing time:             Tue 28 Jul 2026 14:10:12 +0000
ROA not before:           Tue 28 Jul 2026 14:05:12 +0000
ROA not after:            Tue 27 Jul 2027 14:10:12 +0000
asID:                     266045
IP address blocks:        45.4.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uEjBDAkwaG1DKGRuzD4VfFpeQ4JhKMDRhBzf9oYpQBf/1/A75ED3D3A27119AD362E745F2E0EC17950532980.crl
                          rsync://rpki-repo.registro.br/repo/5uEjBDAkwaG1DKGRuzD4VfFpeQ4JhKMDRhBzf9oYpQBf/1/A75ED3D3A27119AD362E745F2E0EC17950532980.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A75ED3D3A27119AD362E745F2E0EC17950532980.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 17:20:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:c5:3f:a6:c2:bb:3f:22:89:a7:5c:96:de:1c:fb:22:5d:e2:97:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A75ED3D3A27119AD362E745F2E0EC17950532980
        Validity
            Not Before: Jul 28 14:05:12 2026 GMT
            Not After : Jul 27 14:10:12 2027 GMT
        Subject: CN=88EA5F000B0D48C72EEBF4128D2CDD95EA6E2C1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f9:64:35:23:40:29:b2:09:36:4b:a0:ac:0c:
                    b2:b2:06:7b:93:91:e8:87:0e:02:f4:9e:89:cd:e5:
                    14:1e:26:b5:6b:3b:06:74:fc:bb:bd:1c:d3:20:15:
                    c4:b7:38:97:b9:00:e5:c3:ad:03:40:a9:f8:15:96:
                    a2:8c:29:c8:69:13:51:ca:9d:55:ec:b2:db:15:79:
                    9f:4f:26:73:da:65:88:8a:54:00:32:da:7b:92:f8:
                    52:7f:ca:a7:f9:6d:11:1c:11:09:d1:12:3d:93:92:
                    35:23:76:8a:45:ba:6a:2c:d4:75:32:a8:9a:49:5d:
                    d3:48:fa:45:66:40:7a:a8:73:b5:73:15:42:be:30:
                    f4:77:7c:59:aa:25:bd:09:5d:13:e3:0a:db:11:a3:
                    3f:4d:1d:40:55:fd:eb:c5:91:3d:96:88:e0:c6:ba:
                    ac:9d:69:2b:81:bc:67:61:ff:2e:bb:d5:29:a4:76:
                    48:85:e6:25:05:f9:ae:8c:1c:27:7a:78:9e:60:3d:
                    ed:a4:81:df:72:ec:53:d3:0b:39:3b:08:68:78:6c:
                    d8:3c:ab:1b:56:79:e4:ad:7d:bc:ba:e1:08:a0:c9:
                    54:56:31:a1:55:dc:78:48:8a:4c:18:b5:eb:9b:ea:
                    b1:e9:c7:97:5a:5c:b0:54:c2:96:b1:17:ae:4b:bf:
                    d0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:EA:5F:00:0B:0D:48:C7:2E:EB:F4:12:8D:2C:DD:95:EA:6E:2C:1C
            X509v3 Authority Key Identifier:
                keyid:A7:5E:D3:D3:A2:71:19:AD:36:2E:74:5F:2E:0E:C1:79:50:53:29:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uEjBDAkwaG1DKGRuzD4VfFpeQ4JhKMDRhBzf9oYpQBf/1/A75ED3D3A27119AD362E745F2E0EC17950532980.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A75ED3D3A27119AD362E745F2E0EC17950532980.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uEjBDAkwaG1DKGRuzD4VfFpeQ4JhKMDRhBzf9oYpQBf/1/34352e342e33362e302f32342d3234203d3e20323636303435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:85:1f:0f:3e:55:16:c8:7c:a6:49:5d:29:d2:3d:79:8a:c2:
         3b:60:2e:cb:4c:fc:f4:07:2c:8c:bc:0e:cb:bb:57:ad:f3:e2:
         50:bf:44:b0:f7:b2:db:75:63:5b:6a:c0:95:6e:fd:b2:16:3b:
         9a:ef:74:7a:43:8e:98:dc:fd:df:80:7d:80:71:a3:69:95:7b:
         fa:9c:7a:85:da:2f:90:ec:f8:4e:99:de:04:56:f1:c5:1f:2c:
         da:58:50:b7:f9:de:76:bc:77:f0:13:ef:cb:ff:b2:8d:0a:28:
         ff:f1:7e:ea:7c:d1:a1:a8:d7:dd:30:b6:9f:1c:54:11:57:16:
         0f:71:c5:90:c9:b1:a4:2e:90:a8:d4:d6:10:06:94:c8:68:f6:
         ae:ba:26:c7:79:9e:22:c1:1f:fe:9e:d3:9f:c4:c9:d5:ce:2f:
         25:54:23:9b:2d:dc:14:63:60:5b:d6:8f:32:71:ca:16:80:7d:
         29:88:c4:a1:de:67:ce:89:9b:ad:c6:37:e5:79:a1:c5:8d:ba:
         12:76:8c:2d:4b:49:68:03:80:7d:7d:8f:c8:63:59:d6:6b:e5:
         86:83:81:42:45:f3:4d:da:90:5c:f6:d0:7c:72:3c:27:1f:13:
         ef:89:56:3b:7d:89:51:0c:dc:fa:7b:1e:57:89:82:5a:62:77:
         b6:7b:00:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----