Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5uEjBDAkwaG1DKGRuzD4VfFpeQ4JhKMDRhBzf9oYpQBf/1/34352e342e33392e302f32342d3234203d3e20323636303435.roa
File:                     34352e342e33392e302f32342d3234203d3e20323636303435.roa (raw, json)
Hash identifier:          nfa7aOdCcNtUp9rFeyh5+xPgmPpTDzjaISCBYJAt1G8=
Subject key identifier:   70:57:BF:F7:5E:A5:C0:C8:68:23:20:E0:AF:84:C5:B4:70:8F:6B:56
Certificate issuer:       /CN=A75ED3D3A27119AD362E745F2E0EC17950532980
Certificate serial:       6E7D9F6A242B20CC1FB6DD0E27762F8E30994CC2
Authority key identifier: A7:5E:D3:D3:A2:71:19:AD:36:2E:74:5F:2E:0E:C1:79:50:53:29:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A75ED3D3A27119AD362E745F2E0EC17950532980.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uEjBDAkwaG1DKGRuzD4VfFpeQ4JhKMDRhBzf9oYpQBf/1/34352e342e33392e302f32342d3234203d3e20323636303435.roa
Signing time:             Tue 28 Jul 2026 14:08:56 +0000
ROA not before:           Tue 28 Jul 2026 14:03:56 +0000
ROA not after:            Tue 27 Jul 2027 14:08:56 +0000
asID:                     266045
IP address blocks:        45.4.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uEjBDAkwaG1DKGRuzD4VfFpeQ4JhKMDRhBzf9oYpQBf/1/A75ED3D3A27119AD362E745F2E0EC17950532980.crl
                          rsync://rpki-repo.registro.br/repo/5uEjBDAkwaG1DKGRuzD4VfFpeQ4JhKMDRhBzf9oYpQBf/1/A75ED3D3A27119AD362E745F2E0EC17950532980.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A75ED3D3A27119AD362E745F2E0EC17950532980.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 17:20:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:7d:9f:6a:24:2b:20:cc:1f:b6:dd:0e:27:76:2f:8e:30:99:4c:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A75ED3D3A27119AD362E745F2E0EC17950532980
        Validity
            Not Before: Jul 28 14:03:56 2026 GMT
            Not After : Jul 27 14:08:56 2027 GMT
        Subject: CN=7057BFF75EA5C0C8682320E0AF84C5B4708F6B56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:40:8c:82:32:14:5a:3d:c9:b7:14:f1:78:4d:
                    99:e6:8d:c2:d1:44:46:2f:90:83:bb:38:76:75:19:
                    0a:f8:81:83:39:30:54:7f:a1:8c:78:86:30:2d:d5:
                    2a:27:82:d4:5a:60:c6:69:77:42:c0:f0:8b:6c:7e:
                    27:7b:4a:b6:18:3b:df:9f:04:6d:73:40:88:be:08:
                    36:b1:3a:03:5f:dc:5b:d7:96:6a:22:83:59:45:96:
                    28:0c:1d:24:a0:67:12:f8:8f:95:db:d1:24:37:f4:
                    eb:97:d5:7b:0f:1e:95:26:8e:0f:c2:3f:64:f7:73:
                    7a:d9:f1:8e:e0:6f:a4:fd:e1:c8:6a:20:77:61:82:
                    2d:ba:8c:0f:ee:5d:bd:4f:17:5b:0a:f4:ec:3c:0a:
                    8b:ce:9c:19:2a:ee:96:17:6f:73:4f:35:58:13:e3:
                    f6:4e:ce:fa:15:cf:21:34:88:46:a2:52:16:93:b9:
                    21:bb:6e:0b:28:2d:28:42:af:0b:88:be:50:e6:47:
                    4b:48:58:8c:7d:81:07:24:76:1c:30:d1:25:d2:94:
                    12:c7:6c:26:82:49:82:2d:f4:a9:40:7f:e5:e8:ed:
                    bd:53:b6:fe:90:12:c0:20:ee:3d:12:af:bd:7b:a6:
                    91:7f:49:72:9d:78:58:05:4f:fb:f1:c8:d0:a5:ef:
                    db:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:57:BF:F7:5E:A5:C0:C8:68:23:20:E0:AF:84:C5:B4:70:8F:6B:56
            X509v3 Authority Key Identifier:
                keyid:A7:5E:D3:D3:A2:71:19:AD:36:2E:74:5F:2E:0E:C1:79:50:53:29:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uEjBDAkwaG1DKGRuzD4VfFpeQ4JhKMDRhBzf9oYpQBf/1/A75ED3D3A27119AD362E745F2E0EC17950532980.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A75ED3D3A27119AD362E745F2E0EC17950532980.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uEjBDAkwaG1DKGRuzD4VfFpeQ4JhKMDRhBzf9oYpQBf/1/34352e342e33392e302f32342d3234203d3e20323636303435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:63:b4:ca:c8:06:82:1e:c1:3f:63:a8:0b:03:1c:c2:10:5e:
         91:10:4c:ef:2c:4b:fc:7c:ef:9e:3b:4c:d8:4a:e2:eb:18:5b:
         3f:29:e5:4f:12:46:c2:fc:36:95:59:53:64:59:20:62:03:90:
         8c:c0:0d:ee:f6:18:6e:e1:dd:9d:11:e2:ee:0e:d9:5b:0c:5e:
         08:a2:d5:8d:da:e2:c0:19:c4:22:d4:ab:03:50:de:eb:31:d0:
         bd:1f:e1:df:a7:5e:6e:f7:d2:bb:5d:4e:0c:19:9f:c2:58:a4:
         24:56:7f:82:b1:2a:53:88:cc:1d:b7:73:fd:22:ab:81:8d:1e:
         f8:54:8f:42:64:56:0f:7c:c5:39:0d:63:bb:c7:eb:25:23:06:
         d1:7f:b3:ec:b5:8a:2c:fe:df:68:7f:f3:76:d9:46:d9:46:25:
         e2:2c:c2:d5:1a:37:6a:82:34:05:7d:3b:4a:98:e7:84:ff:06:
         a9:96:0c:1f:72:55:53:a3:b7:cd:58:5c:a2:da:d6:81:45:70:
         2c:63:81:60:2c:1d:93:78:da:a8:2f:ef:af:fd:2f:8b:25:2f:
         fc:87:f5:81:ea:4a:c7:a7:61:f8:c9:ed:52:63:c3:d5:b1:b1:
         59:41:b1:db:49:26:d3:0f:cc:5c:08:82:01:57:dc:a5:fd:1f:
         f0:c0:5e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----