Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QtzAhwWirPmXUBVZPuHBbv5JNi9WzYmLhmoe5AnLouD/0/34352e3138332e3139322e302f32322d3234203d3e20323639333036.roa
File:                     34352e3138332e3139322e302f32322d3234203d3e20323639333036.roa (raw, json)
Hash identifier:          28X2BN3p10L6UCwzdmytV8zhZCIwRfjQ7OUIvo9SqWM=
Subject key identifier:   11:9F:7F:E8:51:3E:CA:23:25:78:D9:B1:D7:11:9B:F5:77:55:A8:13
Certificate issuer:       /CN=3BED3F38605E0FA50561ADFB442608FB22603DF8
Certificate serial:       0D52D889A91C2B44438DF575FF68608181A058EB
Authority key identifier: 3B:ED:3F:38:60:5E:0F:A5:05:61:AD:FB:44:26:08:FB:22:60:3D:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BED3F38605E0FA50561ADFB442608FB22603DF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QtzAhwWirPmXUBVZPuHBbv5JNi9WzYmLhmoe5AnLouD/0/34352e3138332e3139322e302f32322d3234203d3e20323639333036.roa
Signing time:             Thu 18 Jun 2026 16:24:00 +0000
ROA not before:           Thu 18 Jun 2026 16:19:00 +0000
ROA not after:            Thu 17 Jun 2027 16:24:00 +0000
asID:                     269306
IP address blocks:        45.183.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6QtzAhwWirPmXUBVZPuHBbv5JNi9WzYmLhmoe5AnLouD/0/3BED3F38605E0FA50561ADFB442608FB22603DF8.crl
                          rsync://rpki-repo.registro.br/repo/6QtzAhwWirPmXUBVZPuHBbv5JNi9WzYmLhmoe5AnLouD/0/3BED3F38605E0FA50561ADFB442608FB22603DF8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BED3F38605E0FA50561ADFB442608FB22603DF8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 10:47:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:52:d8:89:a9:1c:2b:44:43:8d:f5:75:ff:68:60:81:81:a0:58:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BED3F38605E0FA50561ADFB442608FB22603DF8
        Validity
            Not Before: Jun 18 16:19:00 2026 GMT
            Not After : Jun 17 16:24:00 2027 GMT
        Subject: CN=119F7FE8513ECA232578D9B1D7119BF57755A813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e4:0c:f5:2f:14:88:b7:e6:d6:79:41:e9:64:
                    f2:5c:11:49:83:a2:3e:e2:85:1b:41:72:b7:04:9d:
                    2a:b3:16:56:6c:c6:ef:46:58:69:98:ad:db:d4:10:
                    55:fc:d7:86:42:e1:cb:db:c1:77:31:aa:e5:b2:da:
                    17:29:f3:11:fd:90:0f:8c:67:b5:2c:c2:1a:92:04:
                    73:95:fb:7b:f3:cd:90:23:42:85:b6:2b:da:2a:c4:
                    3f:d2:f7:82:11:9f:ef:0d:c9:34:68:76:44:45:39:
                    62:13:d5:a1:7c:c0:05:0e:00:f5:43:aa:83:2b:91:
                    38:d1:fe:74:2c:5f:bf:cc:b9:de:0f:92:70:ee:11:
                    75:68:86:61:90:2e:ca:34:a1:8d:ea:23:d9:0f:53:
                    e5:c7:ac:42:3d:dc:ab:56:ba:15:d5:29:44:da:43:
                    49:ed:be:b3:65:50:2a:13:07:54:f3:12:ea:39:f5:
                    e2:80:a7:d2:b9:fe:33:63:48:0c:d8:3c:8d:d1:4c:
                    aa:9f:88:70:97:5c:da:84:22:ad:ca:83:13:da:84:
                    91:2a:dd:06:51:8b:40:7b:28:b4:f7:da:93:6a:fa:
                    a3:94:ba:af:2f:c7:ec:bf:7a:ec:bc:24:96:48:81:
                    80:13:3e:1d:f7:da:94:9e:b9:57:de:e1:22:94:d3:
                    15:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:9F:7F:E8:51:3E:CA:23:25:78:D9:B1:D7:11:9B:F5:77:55:A8:13
            X509v3 Authority Key Identifier:
                keyid:3B:ED:3F:38:60:5E:0F:A5:05:61:AD:FB:44:26:08:FB:22:60:3D:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QtzAhwWirPmXUBVZPuHBbv5JNi9WzYmLhmoe5AnLouD/0/3BED3F38605E0FA50561ADFB442608FB22603DF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BED3F38605E0FA50561ADFB442608FB22603DF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QtzAhwWirPmXUBVZPuHBbv5JNi9WzYmLhmoe5AnLouD/0/34352e3138332e3139322e302f32322d3234203d3e20323639333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:19:f6:84:b9:45:d7:83:58:30:dd:db:ab:aa:f2:81:57:b1:
         a2:af:ed:78:ec:df:04:40:8d:10:ee:85:9e:d4:36:05:78:9a:
         99:45:19:05:cc:a7:67:0a:c2:fb:94:41:ea:f0:0c:88:90:86:
         98:67:0b:36:b0:8d:8c:c8:99:b9:9c:3a:dc:d0:1f:e0:17:4d:
         63:4a:ab:55:8d:a5:7d:c9:e5:c5:e1:f9:93:35:44:82:19:ec:
         bc:ed:b8:71:43:02:d8:97:7d:a6:e5:1f:19:f0:c8:d6:f5:84:
         3f:5d:dd:9f:d8:e3:5b:28:74:28:9e:d2:a1:61:37:7c:69:74:
         c6:31:2f:4d:19:65:07:bf:20:54:12:cd:c2:32:de:83:0e:c6:
         e5:0c:c4:f0:e9:a6:61:6d:af:98:fd:d0:0b:c3:b5:2a:43:6c:
         54:b9:bb:0a:fc:3a:7b:22:92:82:6a:a5:61:6c:f7:4f:a3:b0:
         34:2c:e5:ab:b3:c5:3f:83:d0:d8:8d:c2:62:49:91:72:6e:fa:
         ef:c9:23:3d:86:75:2d:f5:bf:e9:d5:43:db:95:fb:35:fa:b0:
         8a:bd:00:d8:f5:57:f8:55:e0:98:56:d6:47:45:68:2c:c8:a3:
         98:56:e4:c5:cc:d6:85:be:91:23:46:b7:3f:98:70:2f:3b:94:
         aa:d2:92:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:54:34 2026 by rpki-client