Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/34352e3232352e3139342e302f32342d3234203d3e20323636393438.roa
File:                     34352e3232352e3139342e302f32342d3234203d3e20323636393438.roa (raw, json)
Hash identifier:          blEJAO/9+OVu/XjgY1L1PIgxhcN9t12dSeWdoPsJ7nc=
Subject key identifier:   4E:BE:8F:90:30:9A:0B:6D:38:64:32:4C:F0:01:C5:F7:97:B2:15:45
Certificate issuer:       /CN=0885F9AEA555C914A00A89F6E6C34D193AE5AEB7
Certificate serial:       41596A1E6A8243A9B8F3BB797AB0A3DEBD13C61D
Authority key identifier: 08:85:F9:AE:A5:55:C9:14:A0:0A:89:F6:E6:C3:4D:19:3A:E5:AE:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0885F9AEA555C914A00A89F6E6C34D193AE5AEB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/34352e3232352e3139342e302f32342d3234203d3e20323636393438.roa
Signing time:             Mon 22 Jun 2026 17:06:41 +0000
ROA not before:           Mon 22 Jun 2026 17:01:41 +0000
ROA not after:            Mon 21 Jun 2027 17:06:41 +0000
asID:                     266948
IP address blocks:        45.225.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/0885F9AEA555C914A00A89F6E6C34D193AE5AEB7.crl
                          rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/0885F9AEA555C914A00A89F6E6C34D193AE5AEB7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0885F9AEA555C914A00A89F6E6C34D193AE5AEB7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 07:37:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:59:6a:1e:6a:82:43:a9:b8:f3:bb:79:7a:b0:a3:de:bd:13:c6:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0885F9AEA555C914A00A89F6E6C34D193AE5AEB7
        Validity
            Not Before: Jun 22 17:01:41 2026 GMT
            Not After : Jun 21 17:06:41 2027 GMT
        Subject: CN=4EBE8F90309A0B6D3864324CF001C5F797B21545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:23:bf:b8:83:ae:46:ad:0d:02:1a:71:61:16:
                    68:0a:ae:03:d2:62:9b:ff:13:5b:bd:7d:50:00:cb:
                    1c:77:e5:fc:b7:4e:a9:cc:74:3b:15:14:b1:ba:ca:
                    52:1f:31:9a:c5:b2:95:6c:7d:02:14:6f:fd:5c:f8:
                    09:88:6c:5f:8f:ed:94:f4:ec:67:4d:c2:2d:35:31:
                    fe:7f:43:46:1c:6e:95:3d:38:41:e5:9c:d2:e2:17:
                    81:49:cd:c9:7a:99:a9:c4:07:8f:29:10:e7:e9:c9:
                    60:81:04:87:82:06:fb:c7:91:5e:ff:a9:10:89:43:
                    06:92:6f:9b:b5:13:ae:b4:a6:c9:2a:10:96:83:fe:
                    a9:3d:58:27:92:f3:dd:c0:a6:30:67:52:4a:02:da:
                    da:12:ee:19:20:9e:f9:55:94:8f:1e:4b:1c:5d:86:
                    a3:73:43:5e:e4:9b:4b:96:76:39:e2:2f:17:1d:f1:
                    8c:a5:d6:64:ca:8f:3c:9e:b1:d2:15:19:1b:88:3a:
                    e1:41:33:f8:4b:1d:c0:fd:7c:14:5c:fa:3d:0f:e0:
                    e1:4a:5b:54:58:2f:27:50:00:6f:a1:c6:d6:ec:0c:
                    78:56:69:b6:f6:c3:93:1b:b8:c0:02:fd:48:ef:3b:
                    5a:1e:28:9e:74:d5:51:b9:d3:26:4a:0f:a5:ee:f5:
                    bf:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:BE:8F:90:30:9A:0B:6D:38:64:32:4C:F0:01:C5:F7:97:B2:15:45
            X509v3 Authority Key Identifier:
                keyid:08:85:F9:AE:A5:55:C9:14:A0:0A:89:F6:E6:C3:4D:19:3A:E5:AE:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/0885F9AEA555C914A00A89F6E6C34D193AE5AEB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0885F9AEA555C914A00A89F6E6C34D193AE5AEB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/34352e3232352e3139342e302f32342d3234203d3e20323636393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:68:1a:1f:3a:86:0a:bf:db:d2:9c:10:d6:15:44:c2:7a:f4:
         d7:53:fc:4f:d4:1e:b7:1f:1c:9a:ce:ee:5c:97:3f:b6:1f:96:
         4f:70:0e:c5:15:09:fe:1f:f3:2c:06:dc:2b:4a:66:f0:46:7f:
         e1:0d:22:5e:81:72:4e:99:43:65:81:61:70:e6:54:b5:07:17:
         89:99:dd:fb:cc:e7:0e:8a:8a:c7:ba:8c:c0:96:aa:18:7b:45:
         f2:a8:be:af:60:88:2d:e2:82:3a:63:e2:57:ba:57:f6:e5:f7:
         f7:ea:f5:98:b0:b9:fb:5d:eb:a1:76:01:e3:e5:0f:42:7a:a9:
         54:bd:9d:65:15:c2:1c:10:9b:73:a6:8d:02:7b:7c:65:a1:30:
         73:15:4b:19:11:68:bd:c9:fc:e6:28:88:ec:83:13:44:ed:5b:
         48:a5:99:38:14:76:21:9c:64:6d:c5:0c:b2:e1:49:b9:8a:fa:
         3b:ec:ca:d5:c5:e4:c2:c0:b5:77:8b:cd:26:f3:e4:c0:6a:64:
         72:79:a7:b3:5e:3f:27:82:eb:97:a3:c2:c1:d5:d4:55:64:ae:
         54:9a:00:72:cc:97:5e:8d:84:da:b5:59:84:04:7e:a5:ea:9e:
         76:77:d3:04:2f:a5:60:cf:f1:31:35:fc:c4:27:73:75:09:74:
         ab:ab:06:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:12:31 2026 by rpki-client