Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/34352e3137332e3232302e302f32322d3232203d3e20323638383239.roa
File:                     34352e3137332e3232302e302f32322d3232203d3e20323638383239.roa (raw, json)
Hash identifier:          cbK4t3hKx3SIVTXA65DzyKj7RUL0WjkR1KfQQHoW274=
Subject key identifier:   59:1B:AC:E7:C5:34:A5:3B:0F:DA:B5:D3:40:FE:A1:FD:EB:AC:69:28
Certificate issuer:       /CN=31191729A0CB52CD6AB42531D9E1B5B056F5020B
Certificate serial:       5909A8E706A87FE2281B8C36CAFEF6EC055389CB
Authority key identifier: 31:19:17:29:A0:CB:52:CD:6A:B4:25:31:D9:E1:B5:B0:56:F5:02:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31191729A0CB52CD6AB42531D9E1B5B056F5020B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/34352e3137332e3232302e302f32322d3232203d3e20323638383239.roa
Signing time:             Fri 19 Jun 2026 18:13:19 +0000
ROA not before:           Fri 19 Jun 2026 18:08:19 +0000
ROA not after:            Fri 18 Jun 2027 18:13:19 +0000
asID:                     268829
IP address blocks:        45.173.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/31191729A0CB52CD6AB42531D9E1B5B056F5020B.crl
                          rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/31191729A0CB52CD6AB42531D9E1B5B056F5020B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31191729A0CB52CD6AB42531D9E1B5B056F5020B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 16:22:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:09:a8:e7:06:a8:7f:e2:28:1b:8c:36:ca:fe:f6:ec:05:53:89:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31191729A0CB52CD6AB42531D9E1B5B056F5020B
        Validity
            Not Before: Jun 19 18:08:19 2026 GMT
            Not After : Jun 18 18:13:19 2027 GMT
        Subject: CN=591BACE7C534A53B0FDAB5D340FEA1FDEBAC6928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2f:f2:ce:04:a3:2e:8e:4b:10:54:86:75:e8:
                    b9:38:38:3d:de:81:cb:b2:36:4f:9c:45:4e:c5:4d:
                    f4:a7:6a:88:98:33:e4:35:9f:a8:20:f9:95:05:d7:
                    99:19:40:c4:69:ea:16:35:32:94:c6:b8:cb:53:aa:
                    1f:52:de:6c:bd:1d:5b:e2:2a:92:18:79:90:5b:e5:
                    76:fb:9b:20:a0:b3:88:6e:ad:82:95:db:74:34:35:
                    d9:40:05:f6:22:67:c9:c1:4a:a6:fc:d4:29:96:0b:
                    71:62:6e:77:3f:94:c2:0e:e4:f5:b2:22:0a:ca:6b:
                    68:03:ef:6e:02:e7:58:85:35:63:f3:37:76:f7:69:
                    59:0d:28:14:0c:f4:ce:c0:a9:af:fc:be:97:26:ec:
                    70:cf:17:45:8f:cc:44:91:2f:77:10:e0:d6:a4:21:
                    d0:31:03:c0:86:34:3c:40:0f:49:78:8e:b0:e6:39:
                    b5:b3:e1:df:70:99:cb:22:da:b7:c7:03:17:0b:e8:
                    e8:c7:4e:2d:f1:6d:d7:6b:45:e8:b0:1d:d7:f1:00:
                    ce:7f:58:87:5c:60:81:98:46:7a:3a:bc:2d:83:e5:
                    a7:75:3d:28:54:0d:26:11:87:a7:01:d2:17:e3:dd:
                    89:e2:9c:04:7a:e5:be:5b:f2:f0:f0:39:f4:71:c2:
                    98:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1B:AC:E7:C5:34:A5:3B:0F:DA:B5:D3:40:FE:A1:FD:EB:AC:69:28
            X509v3 Authority Key Identifier:
                keyid:31:19:17:29:A0:CB:52:CD:6A:B4:25:31:D9:E1:B5:B0:56:F5:02:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/31191729A0CB52CD6AB42531D9E1B5B056F5020B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31191729A0CB52CD6AB42531D9E1B5B056F5020B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/34352e3137332e3232302e302f32322d3232203d3e20323638383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:1d:fc:15:f4:90:ab:b0:49:54:fc:b6:c7:54:82:c9:0c:22:
         52:83:76:07:2a:35:96:f5:0d:cc:88:cb:d5:ad:36:a5:b8:cd:
         62:ca:ff:2b:9b:23:52:9a:f3:8d:81:5b:6a:95:51:56:b4:19:
         f7:5f:bf:ff:6d:91:3c:c5:a8:31:0f:29:36:4e:16:d7:11:b7:
         a7:38:1f:e4:20:76:c3:1b:8c:e0:cc:30:5c:01:16:83:49:39:
         64:4b:78:16:da:d7:fa:bd:da:a4:df:ae:42:1e:9b:76:47:b2:
         23:0c:bd:27:58:b7:96:60:45:21:01:2e:bf:a0:ee:af:a9:a4:
         d4:82:b3:74:5c:80:00:21:df:a8:b0:36:b0:00:03:82:8e:f1:
         fc:3d:bf:b6:5c:c0:53:dd:3e:9e:d0:f6:b3:d7:14:e4:3e:a7:
         dd:7d:b5:6d:cb:67:5a:ff:b4:d4:af:c5:9a:dc:e9:9d:3c:e3:
         eb:fb:18:92:35:32:96:d0:2f:f3:a0:5c:38:91:d6:27:ef:7f:
         15:cd:68:31:79:d8:d7:a4:68:ec:1d:27:fa:80:ce:fa:03:ee:
         5e:81:2e:62:7e:72:f3:6c:cf:72:af:02:7f:35:f1:58:22:63:
         31:c1:e0:8d:10:f4:e4:5d:e4:82:94:8d:13:0b:e9:9f:f6:7e:
         a1:02:b0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:13:42 2026 by rpki-client