Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/34352e3136342e36302e302f32322d3332203d3e20323638363035.roa
File:                     34352e3136342e36302e302f32322d3332203d3e20323638363035.roa (raw, json)
Hash identifier:          ws7tMlIBsAUvX9IflTtoOuRA57nlbnOLv/XJaEh0adQ=
Subject key identifier:   45:71:83:44:BF:F1:53:4C:A6:3C:03:91:40:57:33:2E:D4:C4:C8:0A
Certificate issuer:       /CN=82A12D87E7C80E5652B34EDF692F12EB79642AC3
Certificate serial:       5E7279DCB0323CAB079A608B7AF8C5A9A8EC1360
Authority key identifier: 82:A1:2D:87:E7:C8:0E:56:52:B3:4E:DF:69:2F:12:EB:79:64:2A:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82A12D87E7C80E5652B34EDF692F12EB79642AC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/34352e3136342e36302e302f32322d3332203d3e20323638363035.roa
Signing time:             Fri 14 Aug 2026 16:33:17 +0000
ROA not before:           Fri 14 Aug 2026 16:28:17 +0000
ROA not after:            Fri 13 Aug 2027 16:33:17 +0000
asID:                     268605
IP address blocks:        45.164.60.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/82A12D87E7C80E5652B34EDF692F12EB79642AC3.crl
                          rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/82A12D87E7C80E5652B34EDF692F12EB79642AC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82A12D87E7C80E5652B34EDF692F12EB79642AC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 02:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:72:79:dc:b0:32:3c:ab:07:9a:60:8b:7a:f8:c5:a9:a8:ec:13:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82A12D87E7C80E5652B34EDF692F12EB79642AC3
        Validity
            Not Before: Aug 14 16:28:17 2026 GMT
            Not After : Aug 13 16:33:17 2027 GMT
        Subject: CN=45718344BFF1534CA63C03914057332ED4C4C80A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4f:9c:59:b6:9a:ce:25:5d:9a:3f:6a:0d:94:
                    2b:14:0f:6e:9b:21:c8:01:56:ac:59:30:58:84:7a:
                    fa:8e:d7:9a:d4:29:d8:5f:84:61:4c:36:fb:ad:5b:
                    c6:d0:6e:b8:59:83:1d:3a:c3:9b:b2:37:d6:db:3b:
                    6a:d0:a9:30:46:de:6f:b9:b2:b3:06:07:da:12:bb:
                    08:35:42:a5:c9:7e:8e:e9:93:03:e2:75:95:a8:6b:
                    61:8d:7e:12:f3:26:1c:c0:63:48:73:1a:5e:06:14:
                    c9:de:83:40:f5:45:a3:2f:bf:c3:3d:cc:a4:f5:f7:
                    ff:0e:a0:fe:e0:70:66:49:1d:62:b1:be:bc:9c:45:
                    f3:d5:dd:d7:c1:5f:4b:c2:83:2c:5e:98:ab:e5:f3:
                    d7:ac:90:2a:a9:7b:be:0e:92:5e:4a:ae:ee:d4:b8:
                    4c:74:b3:7c:d4:b9:2b:4d:08:2b:4e:5d:a4:dc:ab:
                    d6:39:74:53:ce:0c:74:b6:90:6c:ce:28:d5:48:6f:
                    03:02:8f:13:4e:66:87:63:c4:c9:82:c7:fc:69:7f:
                    c8:be:15:f5:b7:91:5e:c7:4d:ee:59:bb:0d:9f:17:
                    4c:7a:6d:0c:7a:7a:1b:5b:75:f5:f0:bc:c7:33:b9:
                    0e:79:0a:38:c2:81:e7:89:1b:ea:e9:34:ff:5b:5e:
                    86:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:71:83:44:BF:F1:53:4C:A6:3C:03:91:40:57:33:2E:D4:C4:C8:0A
            X509v3 Authority Key Identifier:
                keyid:82:A1:2D:87:E7:C8:0E:56:52:B3:4E:DF:69:2F:12:EB:79:64:2A:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/82A12D87E7C80E5652B34EDF692F12EB79642AC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82A12D87E7C80E5652B34EDF692F12EB79642AC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/34352e3136342e36302e302f32322d3332203d3e20323638363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:de:98:c6:fc:55:23:c0:74:c7:10:34:74:11:30:26:d5:43:
         99:e9:cd:09:52:e9:49:f9:12:e9:46:1d:35:30:6d:8a:7a:2f:
         f7:b3:83:ba:ea:46:fb:58:b4:74:2a:5c:ea:56:44:b1:d6:74:
         16:33:f9:ca:f8:c7:09:31:73:67:ed:a0:83:d4:5b:3f:c7:4d:
         43:eb:f1:92:fb:e5:c1:98:84:29:53:4b:c0:01:42:49:33:2e:
         09:51:5a:ce:ed:9b:8a:f0:26:7d:9c:8d:99:65:d2:73:f1:a9:
         9e:11:d1:ca:55:65:62:cc:92:17:86:07:f3:54:88:7a:4e:18:
         4d:61:ac:72:2a:f4:96:f7:8e:15:27:33:3b:e1:57:99:d1:49:
         e1:35:86:e7:fd:98:64:c0:db:1b:9d:01:79:e4:35:f5:86:69:
         d9:83:ae:e4:9d:40:cb:86:09:ac:55:0b:34:2b:4b:44:de:55:
         f4:86:2d:48:38:f2:c8:f0:20:4d:ea:20:8f:ae:14:61:dd:a5:
         60:9e:79:d0:3b:c9:dc:9c:cc:69:35:ed:08:1a:7b:42:70:06:
         35:91:8e:9a:e8:11:c2:28:e5:90:ad:38:d7:74:cb:23:3e:0b:
         6e:eb:76:ac:4e:72:cc:f3:c6:f0:0d:d7:cc:eb:a5:94:c3:f9:
         c1:0b:e1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 14:11:35 2026 by rpki-client