Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/34352e3137392e34342e302f32322d3332203d3e20323639303737.roa
File:                     34352e3137392e34342e302f32322d3332203d3e20323639303737.roa (raw, json)
Hash identifier:          ZJxLsCESqTJ/aukpy+fRo8z35aigihjcTQTuPrvIKlM=
Subject key identifier:   A0:00:D2:38:27:C7:1F:23:5D:BA:5D:F7:99:D3:9C:E0:C0:F9:B9:53
Certificate issuer:       /CN=A513E0E6DF2D0D0083E23203D95E86F9C8D340DF
Certificate serial:       4798690B6C99B8F6E99AAFED8CE99E0FB0A49EB8
Authority key identifier: A5:13:E0:E6:DF:2D:0D:00:83:E2:32:03:D9:5E:86:F9:C8:D3:40:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A513E0E6DF2D0D0083E23203D95E86F9C8D340DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/34352e3137392e34342e302f32322d3332203d3e20323639303737.roa
Signing time:             Wed 17 Jun 2026 17:46:58 +0000
ROA not before:           Wed 17 Jun 2026 17:41:58 +0000
ROA not after:            Wed 16 Jun 2027 17:46:58 +0000
asID:                     269077
IP address blocks:        45.179.44.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/A513E0E6DF2D0D0083E23203D95E86F9C8D340DF.crl
                          rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/A513E0E6DF2D0D0083E23203D95E86F9C8D340DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A513E0E6DF2D0D0083E23203D95E86F9C8D340DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 01:03:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:98:69:0b:6c:99:b8:f6:e9:9a:af:ed:8c:e9:9e:0f:b0:a4:9e:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A513E0E6DF2D0D0083E23203D95E86F9C8D340DF
        Validity
            Not Before: Jun 17 17:41:58 2026 GMT
            Not After : Jun 16 17:46:58 2027 GMT
        Subject: CN=A000D23827C71F235DBA5DF799D39CE0C0F9B953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:65:f6:78:42:91:59:4c:d0:8c:c8:ca:ac:a2:
                    09:0c:d6:14:0f:77:4d:58:16:22:33:34:88:d3:6a:
                    c6:e4:a6:5e:6a:98:78:8e:15:06:f8:e6:86:86:91:
                    cb:0b:50:c7:38:13:f7:1c:57:6a:a8:7f:ed:e8:4e:
                    bf:7c:8b:34:96:e3:ed:68:28:ce:2f:d1:5b:48:95:
                    4e:67:04:f6:8b:68:41:17:48:42:7f:62:a2:c9:03:
                    4e:52:94:16:d7:89:a0:fe:81:1f:01:67:09:d8:25:
                    11:70:2c:fc:58:0e:fa:9d:9c:0a:b9:36:20:91:48:
                    e6:13:fe:cc:92:15:b4:4b:82:27:35:15:4d:5a:a0:
                    87:82:a6:07:2b:18:71:c5:3c:ca:38:7f:db:15:8f:
                    9f:d0:c9:79:f9:6a:25:21:9a:c3:77:3c:9b:fb:57:
                    ac:18:6f:fd:b9:76:f5:b2:3a:d7:77:8a:2d:74:6a:
                    9b:1e:ac:30:fa:d0:f6:b2:80:0e:95:26:8e:59:28:
                    dd:21:0c:4f:52:75:46:70:9c:ff:10:e7:7e:c6:ce:
                    79:49:00:e9:05:18:dc:7e:93:58:45:d4:72:1e:4d:
                    6d:55:f8:0d:be:b8:6c:98:da:4e:89:2a:21:2b:04:
                    b5:77:57:70:8b:8d:17:4e:7a:20:a1:c1:42:69:14:
                    bd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:00:D2:38:27:C7:1F:23:5D:BA:5D:F7:99:D3:9C:E0:C0:F9:B9:53
            X509v3 Authority Key Identifier:
                keyid:A5:13:E0:E6:DF:2D:0D:00:83:E2:32:03:D9:5E:86:F9:C8:D3:40:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/A513E0E6DF2D0D0083E23203D95E86F9C8D340DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A513E0E6DF2D0D0083E23203D95E86F9C8D340DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/34352e3137392e34342e302f32322d3332203d3e20323639303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:de:05:f5:46:ee:63:76:94:86:7e:c3:f7:81:a9:5a:2f:b8:
         d0:55:83:3b:bf:d6:9c:af:c9:1c:64:fe:7d:3b:51:32:0c:f8:
         ad:ea:97:59:5e:51:ee:81:59:b4:7e:39:e9:1e:05:c2:62:42:
         45:4a:5c:0f:66:69:b6:00:b8:d2:68:89:37:31:2d:28:5c:97:
         25:30:2f:23:2e:68:8c:d6:30:0f:53:21:18:68:a1:3d:b9:c2:
         43:2a:fd:5f:75:fb:87:3a:f6:1d:d3:c3:30:55:68:00:d7:47:
         03:71:ff:a0:5e:c9:47:d7:18:2f:7c:cb:82:8d:75:97:c7:2a:
         6e:bb:84:77:c2:9e:b5:01:e1:07:ce:0e:48:8f:a0:4e:71:47:
         64:39:62:51:ee:57:b7:0d:08:5f:01:00:7a:98:d9:b8:fd:cf:
         74:53:56:2d:5f:4e:c6:d7:58:a7:f1:64:c5:3c:99:b5:43:3c:
         d7:44:51:f8:85:22:ba:2a:19:de:86:66:68:22:6a:06:9e:8b:
         4f:c2:d7:eb:b3:9b:8f:b9:04:82:10:0a:17:b1:50:cb:7b:91:
         74:74:e6:06:bf:bb:7e:77:2d:67:09:32:fd:4b:fd:f9:11:62:
         fa:90:66:71:4f:be:46:60:10:ee:5f:6e:5f:5b:32:a9:c7:c7:
         2e:1c:33:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:14:26 2026 by rpki-client