Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/34352e3232352e3139322e302f32332d3233203d3e20323636393438.roa
File:                     34352e3232352e3139322e302f32332d3233203d3e20323636393438.roa (raw, json)
Hash identifier:          ztZstEzDR8nBWzi2JrX+oiPWM78KNxN4kCf/+CAEapI=
Subject key identifier:   62:B8:30:4A:68:C2:CA:82:5F:94:EE:80:6C:97:84:E5:09:8C:D8:A5
Certificate issuer:       /CN=0885F9AEA555C914A00A89F6E6C34D193AE5AEB7
Certificate serial:       392FF2C7DDCCB54523E85DC254B35670CC57E048
Authority key identifier: 08:85:F9:AE:A5:55:C9:14:A0:0A:89:F6:E6:C3:4D:19:3A:E5:AE:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0885F9AEA555C914A00A89F6E6C34D193AE5AEB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/34352e3232352e3139322e302f32332d3233203d3e20323636393438.roa
Signing time:             Mon 22 Jun 2026 17:06:38 +0000
ROA not before:           Mon 22 Jun 2026 17:01:38 +0000
ROA not after:            Mon 21 Jun 2027 17:06:38 +0000
asID:                     266948
IP address blocks:        45.225.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/0885F9AEA555C914A00A89F6E6C34D193AE5AEB7.crl
                          rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/0885F9AEA555C914A00A89F6E6C34D193AE5AEB7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0885F9AEA555C914A00A89F6E6C34D193AE5AEB7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 07:37:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:2f:f2:c7:dd:cc:b5:45:23:e8:5d:c2:54:b3:56:70:cc:57:e0:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0885F9AEA555C914A00A89F6E6C34D193AE5AEB7
        Validity
            Not Before: Jun 22 17:01:38 2026 GMT
            Not After : Jun 21 17:06:38 2027 GMT
        Subject: CN=62B8304A68C2CA825F94EE806C9784E5098CD8A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fa:98:8d:b9:74:0c:75:1d:39:be:75:f8:5e:
                    8a:2b:76:a4:e9:d5:65:28:0f:80:0d:98:3c:c6:5d:
                    2c:c2:ab:f3:d8:67:0b:bd:e1:38:29:c7:8b:45:d9:
                    64:59:d7:4f:97:87:80:c4:7e:a5:f6:27:17:fe:2d:
                    d1:ac:40:46:95:f1:ec:dd:b8:96:94:ef:87:08:6b:
                    28:05:35:89:f7:f9:d1:89:e6:cc:31:fb:52:68:4d:
                    a4:39:cf:3f:67:b8:20:4d:9c:fb:e5:31:03:14:4a:
                    0d:0b:ab:81:98:c8:2d:94:40:24:33:80:fb:9e:4f:
                    cd:a7:74:d2:3a:09:5a:03:3a:23:6e:ff:56:3d:9f:
                    1b:96:b2:61:3e:ce:0d:c2:37:e2:9b:e6:6c:26:53:
                    51:ee:cc:18:8e:cc:c8:72:7f:02:93:b4:2b:be:15:
                    1a:37:7e:ad:cb:57:6c:89:15:6f:fc:de:b7:8f:96:
                    83:04:b7:cf:8f:92:a4:dd:54:8a:ea:a7:75:26:b1:
                    04:cc:9e:85:38:5a:78:90:0e:88:80:1a:ab:02:ae:
                    37:b2:0e:e5:71:a2:91:39:27:12:ea:0e:30:a8:0c:
                    77:23:4a:8a:04:17:24:be:20:06:31:62:c7:43:51:
                    d7:88:02:de:bd:56:48:ae:b7:eb:6c:65:4d:f0:19:
                    e2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B8:30:4A:68:C2:CA:82:5F:94:EE:80:6C:97:84:E5:09:8C:D8:A5
            X509v3 Authority Key Identifier:
                keyid:08:85:F9:AE:A5:55:C9:14:A0:0A:89:F6:E6:C3:4D:19:3A:E5:AE:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/0885F9AEA555C914A00A89F6E6C34D193AE5AEB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0885F9AEA555C914A00A89F6E6C34D193AE5AEB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/34352e3232352e3139322e302f32332d3233203d3e20323636393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:02:d5:f5:e9:17:e8:3a:3d:ad:59:e0:00:25:bb:7f:a0:10:
         f7:4f:42:c6:27:44:4c:42:a2:cb:db:8a:1e:22:64:49:50:0d:
         f6:e6:1d:c7:ce:a8:1d:34:f7:f8:21:2f:df:a6:a1:67:3b:f0:
         b3:8e:f0:9d:a5:9a:1d:78:ff:e0:37:59:26:04:59:32:c6:7c:
         60:44:1d:5b:53:ed:87:4a:d0:32:54:ee:ea:58:f1:e6:e8:4e:
         69:ad:27:7b:40:92:f7:cc:db:ca:ba:d2:c8:be:07:f9:83:aa:
         48:1a:5b:4c:d0:19:d1:65:26:89:a5:be:c2:03:36:1d:d9:0a:
         9e:3c:07:a8:03:58:ef:0e:49:18:87:c5:9f:39:8b:5b:d9:0f:
         df:c9:89:a6:f4:a4:b9:b1:3a:4d:bf:35:21:69:9e:f3:c1:49:
         98:12:b1:32:12:e6:9a:09:07:ce:a1:c5:cd:7e:22:27:a0:17:
         c0:66:49:ec:53:1a:b3:55:fd:8b:bf:3a:bc:8e:e3:3d:d9:c7:
         60:17:8a:c1:03:36:99:92:23:c5:c9:93:36:64:49:18:67:b1:
         31:6c:9e:0a:34:b9:8a:94:31:c5:5d:8c:ad:b6:ad:73:54:1e:
         d4:3a:ca:8e:f4:e7:5e:d3:72:de:3a:b3:dc:5c:e9:83:8b:f1:
         cc:bf:5c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:11:46 2026 by rpki-client