Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/0/34352e3138322e3230342e302f32322d3234203d3e20313938393439.roa
File:                     34352e3138322e3230342e302f32322d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          bAglGQTi41NKS10C3b5UQjxhwpv5v/anyCe3c5aBL6c=
Subject key identifier:   17:31:9F:9A:B0:11:D8:49:5A:60:67:5C:80:92:11:98:32:6E:71:02
Certificate issuer:       /CN=98BDA26E592DC2BC482620779D57D6C881423CDC
Certificate serial:       3490F98D19BD2812B92F0AB491E290223A9BB811
Authority key identifier: 98:BD:A2:6E:59:2D:C2:BC:48:26:20:77:9D:57:D6:C8:81:42:3C:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98BDA26E592DC2BC482620779D57D6C881423CDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/0/34352e3138322e3230342e302f32322d3234203d3e20313938393439.roa
Signing time:             Wed 27 May 2026 13:03:22 +0000
ROA not before:           Wed 27 May 2026 12:58:22 +0000
ROA not after:            Wed 26 May 2027 13:03:22 +0000
asID:                     198949
IP address blocks:        45.182.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/0/98BDA26E592DC2BC482620779D57D6C881423CDC.crl
                          rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/0/98BDA26E592DC2BC482620779D57D6C881423CDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98BDA26E592DC2BC482620779D57D6C881423CDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Jun 2026 19:17:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:90:f9:8d:19:bd:28:12:b9:2f:0a:b4:91:e2:90:22:3a:9b:b8:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98BDA26E592DC2BC482620779D57D6C881423CDC
        Validity
            Not Before: May 27 12:58:22 2026 GMT
            Not After : May 26 13:03:22 2027 GMT
        Subject: CN=17319F9AB011D8495A60675C80921198326E7102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:09:e7:56:47:86:09:05:d7:ca:4c:c2:f0:26:
                    12:58:33:38:16:16:67:2c:bf:cc:a7:94:38:9f:0d:
                    06:ba:6a:bb:a4:ef:07:de:18:b2:cf:2d:44:4c:72:
                    4f:74:a8:cd:bd:76:7d:3b:e3:2e:a1:ac:57:bb:93:
                    fd:3e:75:f0:9b:87:2b:f5:65:74:b3:82:a8:48:e1:
                    68:d4:84:e1:58:b5:19:64:2a:53:48:93:b8:43:a3:
                    69:86:80:2f:6a:d5:6c:5e:c1:15:ab:20:d5:85:35:
                    76:87:be:99:e5:6b:03:7c:2f:e2:d5:ce:9c:79:f7:
                    d2:29:48:5f:7c:ca:e1:85:ec:da:4a:d5:a7:6e:aa:
                    a5:0b:25:21:70:19:f0:77:36:f9:be:84:0e:a6:14:
                    fb:4c:4d:24:1a:ab:b4:06:1a:6e:44:dc:95:14:6f:
                    cf:87:f0:30:db:12:d1:da:49:19:30:88:5b:5b:94:
                    d0:a2:21:ea:ed:ec:8d:d6:35:8a:1e:ad:16:d1:e2:
                    bd:73:89:50:b4:4d:8c:2c:f6:d4:e5:d7:e4:9e:3f:
                    24:74:53:5d:03:ec:bb:6c:84:bd:56:69:5f:12:f6:
                    f2:c6:bb:cf:5e:8c:1f:f5:ad:b2:58:36:46:36:e5:
                    57:31:8b:98:e1:73:f0:75:e6:94:05:87:95:ee:a9:
                    f1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:31:9F:9A:B0:11:D8:49:5A:60:67:5C:80:92:11:98:32:6E:71:02
            X509v3 Authority Key Identifier:
                keyid:98:BD:A2:6E:59:2D:C2:BC:48:26:20:77:9D:57:D6:C8:81:42:3C:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/0/98BDA26E592DC2BC482620779D57D6C881423CDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98BDA26E592DC2BC482620779D57D6C881423CDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/0/34352e3138322e3230342e302f32322d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:b2:c6:3a:3a:9f:e4:53:02:74:0e:85:85:40:e9:ce:01:76:
         71:e0:b0:30:c3:54:09:75:89:42:94:54:5d:c8:57:8c:a0:33:
         97:d3:53:a4:f3:76:f5:8b:36:ea:97:a4:99:96:77:29:ce:d5:
         52:f8:f1:83:97:39:ed:d1:00:a9:a9:32:27:25:71:62:9f:ce:
         78:6e:93:c9:21:10:70:0a:9d:b6:c4:f3:99:58:9a:46:b1:bf:
         97:8d:37:72:f8:43:d7:47:fb:81:ae:e2:c1:27:90:8b:ca:14:
         1d:c9:c2:13:6a:bd:78:68:0e:1c:f8:5b:84:ce:bc:73:59:2f:
         93:84:58:b7:dc:81:d2:5b:73:63:96:ff:9c:0c:40:45:4a:a2:
         35:22:2c:cb:24:e1:14:f2:fd:fc:33:15:ae:c1:62:82:f0:67:
         6d:2b:a5:2d:0f:8e:5a:b5:02:84:66:b0:a6:d7:3d:f2:fa:e7:
         a0:07:a5:11:61:67:5f:80:69:de:d1:04:85:26:e6:7c:5f:91:
         72:c9:b0:31:78:f1:a2:d6:5a:1c:ab:a5:ca:33:bc:1f:6d:14:
         83:1b:5b:18:a5:ab:a1:7a:18:2a:62:5a:0c:24:f3:93:6e:35:
         8d:28:d8:7a:4d:9f:d7:d0:dd:4f:de:35:51:42:41:15:09:29:
         58:1d:f9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 23:11:22 2026 by rpki-client