Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQ6gdeYaGqdpP6SY9ZHsKb5qc2rDm9ZZY7YLw3aemrgZ/0/34352e3138332e302e302f32322d3332203d3e20323639323439.roa
File:                     34352e3138332e302e302f32322d3332203d3e20323639323439.roa (raw, json)
Hash identifier:          Gmj9IARLBhzXedmTQX1Hbvq1jes3sviD2n1NbVnz3PY=
Subject key identifier:   F5:C8:C4:42:EF:B2:2B:A8:39:86:83:78:93:82:19:A6:4E:5C:A7:F7
Certificate issuer:       /CN=8A9530B3504EA82779077AF104418E27C9727827
Certificate serial:       4EE4B14748EDF054515363ADBBA3B4B6A5023D74
Authority key identifier: 8A:95:30:B3:50:4E:A8:27:79:07:7A:F1:04:41:8E:27:C9:72:78:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9530B3504EA82779077AF104418E27C9727827.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQ6gdeYaGqdpP6SY9ZHsKb5qc2rDm9ZZY7YLw3aemrgZ/0/34352e3138332e302e302f32322d3332203d3e20323639323439.roa
Signing time:             Mon 26 Jan 2026 18:55:54 +0000
ROA not before:           Mon 26 Jan 2026 18:50:54 +0000
ROA not after:            Mon 25 Jan 2027 18:55:54 +0000
asID:                     269249
IP address blocks:        45.183.0.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQ6gdeYaGqdpP6SY9ZHsKb5qc2rDm9ZZY7YLw3aemrgZ/0/8A9530B3504EA82779077AF104418E27C9727827.crl
                          rsync://rpki-repo.registro.br/repo/CQ6gdeYaGqdpP6SY9ZHsKb5qc2rDm9ZZY7YLw3aemrgZ/0/8A9530B3504EA82779077AF104418E27C9727827.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9530B3504EA82779077AF104418E27C9727827.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 23:02:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e4:b1:47:48:ed:f0:54:51:53:63:ad:bb:a3:b4:b6:a5:02:3d:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A9530B3504EA82779077AF104418E27C9727827
        Validity
            Not Before: Jan 26 18:50:54 2026 GMT
            Not After : Jan 25 18:55:54 2027 GMT
        Subject: CN=F5C8C442EFB22BA839868378938219A64E5CA7F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b2:4c:95:aa:28:f1:7d:93:94:a7:17:58:bd:
                    56:ba:fc:85:8f:32:ff:e8:c1:58:35:7a:cf:61:eb:
                    91:85:25:b1:45:c6:91:31:f9:e5:fe:90:d0:8a:d1:
                    c9:6c:88:4c:4e:73:3f:3e:72:64:2e:a6:66:01:14:
                    fc:65:b0:b1:4b:fa:1a:81:7c:b8:9e:f9:3a:2c:f4:
                    91:28:e3:62:da:d6:5c:5e:cd:92:95:f7:51:5a:2e:
                    6e:48:a9:d9:44:b8:af:a5:70:7b:18:34:31:ad:73:
                    48:85:5c:93:57:ed:3e:45:0e:2a:fd:9a:89:84:85:
                    e1:95:f8:83:bf:ae:ab:8e:a3:a9:71:93:b1:99:62:
                    be:38:10:f0:39:c8:3e:52:08:94:3c:92:f1:8c:11:
                    ef:f4:aa:b0:d3:47:ca:f7:51:2e:21:79:7c:84:80:
                    84:f9:4f:c0:e7:24:8f:92:41:15:50:c8:14:69:43:
                    3d:15:b0:21:97:1b:30:71:d1:1d:0c:22:3f:9b:db:
                    07:75:cc:2c:d1:26:60:d8:e5:df:8e:f9:c2:31:6f:
                    c5:a4:09:d2:58:ac:a3:29:47:a5:d4:2c:f3:ae:1e:
                    30:12:5c:17:3c:9d:55:0f:03:7c:c2:09:f2:3b:ca:
                    9c:e3:ff:a0:b3:01:d1:cc:26:45:35:9d:2e:b8:85:
                    49:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C8:C4:42:EF:B2:2B:A8:39:86:83:78:93:82:19:A6:4E:5C:A7:F7
            X509v3 Authority Key Identifier:
                keyid:8A:95:30:B3:50:4E:A8:27:79:07:7A:F1:04:41:8E:27:C9:72:78:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQ6gdeYaGqdpP6SY9ZHsKb5qc2rDm9ZZY7YLw3aemrgZ/0/8A9530B3504EA82779077AF104418E27C9727827.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9530B3504EA82779077AF104418E27C9727827.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQ6gdeYaGqdpP6SY9ZHsKb5qc2rDm9ZZY7YLw3aemrgZ/0/34352e3138332e302e302f32322d3332203d3e20323639323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:97:fa:08:6b:1b:fc:8c:8c:35:e3:a6:74:ca:6e:c8:73:f7:
         e9:b7:84:d9:7e:3b:a1:e5:5e:54:97:45:54:6a:35:82:d6:a3:
         68:a3:16:d0:e9:27:eb:fa:86:61:e3:60:c9:80:b2:cc:8f:c8:
         9a:26:b1:41:2b:47:61:b8:b9:46:e3:19:34:29:d6:4a:c7:b5:
         f0:d3:53:6f:29:ef:74:cc:c9:bb:a1:64:b0:7d:14:11:19:bc:
         47:50:30:7c:88:9f:2e:42:ca:5c:45:04:f9:1e:4a:02:c1:36:
         56:6d:e9:92:0a:56:8d:74:aa:c2:34:56:2e:50:ab:79:a4:29:
         81:7d:27:92:9c:54:86:0a:15:b9:40:29:12:3a:6d:95:74:a0:
         fb:6d:93:e8:d6:cb:a4:51:26:00:9f:1b:9d:d1:81:f6:97:33:
         ba:0e:c3:86:20:f6:36:43:24:fc:2c:d7:36:d4:d0:36:25:f2:
         f5:17:c6:4c:d4:42:cb:94:91:47:78:92:fc:9d:9e:2c:c3:1b:
         0f:6e:fe:cd:9f:89:79:09:c7:f4:ec:60:bb:92:d3:b2:2e:da:
         02:b5:57:06:62:83:dd:e6:af:e5:6b:74:c2:b8:a6:60:95:07:
         af:08:03:e5:6b:48:e3:c8:58:8d:06:07:74:8b:36:63:78:2b:
         f1:bc:71:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:23:58 2026 by rpki-client