Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/0/34352e342e3134382e302f32322d3234203d3e20323636303733.roa
File:                     34352e342e3134382e302f32322d3234203d3e20323636303733.roa (raw, json)
Hash identifier:          T5gz7N13t6AUDyvIyQkbw82RtSqg5t+1rY5H/OQFXFc=
Subject key identifier:   51:E4:27:2B:6E:20:59:83:99:F6:28:A4:19:C4:C8:5C:A1:FB:4D:07
Certificate issuer:       /CN=22E048EF823EB828919BF9865B23FE5A863D5813
Certificate serial:       7ED44A9F59707471E3609F3F3A75C69FF7DEA804
Authority key identifier: 22:E0:48:EF:82:3E:B8:28:91:9B:F9:86:5B:23:FE:5A:86:3D:58:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22E048EF823EB828919BF9865B23FE5A863D5813.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/0/34352e342e3134382e302f32322d3234203d3e20323636303733.roa
Signing time:             Fri 31 Jul 2026 20:57:52 +0000
ROA not before:           Fri 31 Jul 2026 20:52:52 +0000
ROA not after:            Fri 30 Jul 2027 20:57:52 +0000
asID:                     266073
IP address blocks:        45.4.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/0/22E048EF823EB828919BF9865B23FE5A863D5813.crl
                          rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/0/22E048EF823EB828919BF9865B23FE5A863D5813.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22E048EF823EB828919BF9865B23FE5A863D5813.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 07:50:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d4:4a:9f:59:70:74:71:e3:60:9f:3f:3a:75:c6:9f:f7:de:a8:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22E048EF823EB828919BF9865B23FE5A863D5813
        Validity
            Not Before: Jul 31 20:52:52 2026 GMT
            Not After : Jul 30 20:57:52 2027 GMT
        Subject: CN=51E4272B6E20598399F628A419C4C85CA1FB4D07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:83:17:54:be:66:38:10:66:9d:78:92:a3:66:
                    73:33:54:ac:7f:32:37:2e:b7:f7:a9:75:92:29:d2:
                    0e:f6:a6:7f:75:ef:52:46:32:0f:35:3e:d9:4e:30:
                    0a:d7:10:97:98:5c:7d:de:04:f7:eb:c2:61:f3:c7:
                    8c:dc:04:42:8a:b0:bd:06:db:7c:09:4f:f0:b1:f3:
                    0d:cc:a2:7c:a7:c5:df:d1:af:68:37:15:a8:ed:96:
                    40:60:88:a6:2c:26:9f:c7:87:dd:20:ea:9f:87:99:
                    cf:c0:bf:da:7e:2a:4c:56:f8:65:d3:47:ca:ea:8c:
                    4e:03:e9:78:ff:57:0e:b2:0b:0c:0f:35:92:7a:b4:
                    8d:d1:14:93:b5:22:ac:76:43:93:37:63:81:70:9f:
                    1b:9b:71:49:6b:53:37:62:f6:1e:e8:6f:cb:a0:2a:
                    1e:c4:55:cd:0f:2d:84:c1:68:82:3a:f8:32:49:d0:
                    18:da:72:ff:c0:39:94:0c:f5:62:3a:57:17:75:39:
                    47:fd:08:6c:29:97:d3:19:cb:6a:f4:1f:25:f0:53:
                    0e:e9:11:ac:23:e6:eb:f6:12:08:43:c3:c6:7e:41:
                    7b:16:08:06:26:b5:11:fb:a6:6c:af:3d:b4:f1:a9:
                    2b:8b:b0:43:8e:0e:2e:1b:c0:a1:4f:cc:60:67:ac:
                    68:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E4:27:2B:6E:20:59:83:99:F6:28:A4:19:C4:C8:5C:A1:FB:4D:07
            X509v3 Authority Key Identifier:
                keyid:22:E0:48:EF:82:3E:B8:28:91:9B:F9:86:5B:23:FE:5A:86:3D:58:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/0/22E048EF823EB828919BF9865B23FE5A863D5813.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22E048EF823EB828919BF9865B23FE5A863D5813.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/0/34352e342e3134382e302f32322d3234203d3e20323636303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:f4:14:42:29:2d:68:21:cb:b5:05:65:6f:98:7e:7a:2e:45:
         cb:af:d5:c5:74:2e:e1:f8:e6:cd:b2:b7:3a:82:5e:46:a8:c9:
         b1:90:c8:4c:39:3b:ee:dd:1c:13:ad:8d:a5:78:d4:56:0d:26:
         1f:50:79:19:57:05:77:87:ba:27:8a:a4:7f:99:ec:d1:ae:d0:
         ef:93:3f:9b:ef:cf:ce:ef:54:63:6a:5f:98:26:df:bb:cf:d0:
         1f:e4:14:63:16:33:d5:f4:0e:45:7d:d5:4f:76:7d:4f:49:c8:
         f1:7a:64:c9:50:91:11:38:30:23:dd:21:5f:64:70:3e:ca:23:
         6e:48:49:66:a6:fa:59:a6:a8:9b:63:25:24:83:66:1b:67:77:
         1f:a1:e8:6b:6a:d3:07:2d:fa:fe:69:ab:40:4a:47:d4:15:97:
         bd:67:45:b0:e3:6f:f7:38:ed:eb:04:ad:a3:5c:6f:11:dc:91:
         80:a8:95:1f:bc:af:a1:f9:a9:50:00:86:a5:3f:34:6a:8b:1b:
         8e:aa:12:d4:11:ed:51:5e:fe:28:d0:82:51:3b:6c:24:21:b3:
         19:bf:31:1e:a1:5c:71:b6:a8:5a:ba:19:ef:33:90:a1:f1:33:
         63:ea:4f:73:c3:e3:16:68:3a:dc:4d:ea:9e:4a:79:87:6f:57:
         f0:9d:fc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:26:40 2026 by rpki-client