Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/34352e3232352e3139352e302f32342d3234203d3e20323636393438.roa
File:                     34352e3232352e3139352e302f32342d3234203d3e20323636393438.roa (raw, json)
Hash identifier:          zmGyShcnfoJL9TUwFfjy182ExhNqs9Te76LDfmHAaDU=
Subject key identifier:   08:0D:A3:39:EF:6F:1B:40:B1:68:B6:5F:DF:74:4C:E1:CB:20:BA:1F
Certificate issuer:       /CN=0885F9AEA555C914A00A89F6E6C34D193AE5AEB7
Certificate serial:       450F9DEAEB784AD71C7A5D2E492D662C427BAF4D
Authority key identifier: 08:85:F9:AE:A5:55:C9:14:A0:0A:89:F6:E6:C3:4D:19:3A:E5:AE:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0885F9AEA555C914A00A89F6E6C34D193AE5AEB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/34352e3232352e3139352e302f32342d3234203d3e20323636393438.roa
Signing time:             Mon 22 Jun 2026 17:06:42 +0000
ROA not before:           Mon 22 Jun 2026 17:01:42 +0000
ROA not after:            Mon 21 Jun 2027 17:06:42 +0000
asID:                     266948
IP address blocks:        45.225.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/0885F9AEA555C914A00A89F6E6C34D193AE5AEB7.crl
                          rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/0885F9AEA555C914A00A89F6E6C34D193AE5AEB7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0885F9AEA555C914A00A89F6E6C34D193AE5AEB7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 07:37:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:0f:9d:ea:eb:78:4a:d7:1c:7a:5d:2e:49:2d:66:2c:42:7b:af:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0885F9AEA555C914A00A89F6E6C34D193AE5AEB7
        Validity
            Not Before: Jun 22 17:01:42 2026 GMT
            Not After : Jun 21 17:06:42 2027 GMT
        Subject: CN=080DA339EF6F1B40B168B65FDF744CE1CB20BA1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f6:59:38:c6:7f:ab:be:0f:9d:9b:6d:cd:96:
                    7b:9a:34:bf:b2:19:00:a5:35:da:82:db:85:e4:2e:
                    36:31:85:ed:a2:e9:17:3d:a6:f5:9e:b6:c8:f8:ee:
                    23:24:23:d7:06:82:82:39:de:ca:d4:0a:5f:0a:5c:
                    71:a2:c6:b3:45:d5:89:11:e2:93:fd:b2:84:a2:a5:
                    f7:89:28:aa:85:72:d5:3c:4c:8f:fc:49:94:69:1c:
                    5a:62:dd:c4:3e:25:0d:fd:81:0c:c5:80:f6:83:ca:
                    32:72:ef:90:a2:ba:e6:ed:7c:43:4c:ca:40:3f:a8:
                    de:72:19:34:0a:a5:45:5d:e5:14:a8:18:a5:fb:4d:
                    3f:b8:b4:55:cf:06:ac:ad:e3:bf:bc:b7:b1:ad:ef:
                    48:5d:8c:fd:45:23:d5:09:41:34:d1:28:0e:b1:9c:
                    a6:8c:48:8d:c4:07:51:9a:6e:31:41:fb:8b:a2:7b:
                    78:15:36:50:1c:8e:e4:19:be:f7:38:83:dd:78:60:
                    dc:d3:4a:2a:86:46:a1:16:25:e8:e3:b1:72:7c:b6:
                    f6:89:9f:d3:26:db:20:63:3a:7c:70:fc:81:4d:2b:
                    e6:98:1c:35:e8:c8:c1:35:e2:26:3f:7f:e2:90:dc:
                    ec:fc:b8:6e:00:a8:59:42:71:ff:a3:1a:61:45:c8:
                    b9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:0D:A3:39:EF:6F:1B:40:B1:68:B6:5F:DF:74:4C:E1:CB:20:BA:1F
            X509v3 Authority Key Identifier:
                keyid:08:85:F9:AE:A5:55:C9:14:A0:0A:89:F6:E6:C3:4D:19:3A:E5:AE:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/0885F9AEA555C914A00A89F6E6C34D193AE5AEB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0885F9AEA555C914A00A89F6E6C34D193AE5AEB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/34352e3232352e3139352e302f32342d3234203d3e20323636393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:b4:0c:ce:20:2d:d6:6f:13:34:02:27:c2:c2:28:ea:00:a7:
         ad:72:b7:07:1d:b5:ba:a3:dd:59:5f:30:c0:d8:ac:6d:40:ca:
         8c:de:0a:8a:98:c1:62:4d:aa:e5:b4:a4:58:10:a6:bf:f5:6f:
         58:bf:6f:75:af:bf:93:93:51:96:59:02:1e:62:d5:b6:34:6d:
         e4:88:9c:75:24:2d:a2:d1:b8:d7:1d:59:d5:8b:97:75:ae:d6:
         b9:34:75:60:0c:38:82:48:c4:16:47:7f:44:3f:36:87:19:9b:
         1a:27:b7:a0:5e:3e:5b:98:2b:69:64:c7:9a:7e:74:51:d6:15:
         ee:48:be:c6:b8:b4:7a:f8:ac:36:4c:19:ae:5b:1d:2c:23:28:
         2a:54:a0:e7:52:c8:f6:86:0c:3c:62:a4:8e:ae:5e:c7:2d:a4:
         55:17:2b:8f:1d:55:8c:e8:8f:e4:b0:7b:66:37:77:d2:bf:c0:
         dd:81:09:a6:22:9e:5b:37:85:f2:13:68:69:10:39:a4:94:ea:
         20:b8:8a:ec:eb:f7:7e:d0:9b:00:14:1c:d8:ae:bf:0f:cd:15:
         cd:01:1c:1b:b0:d8:75:86:b0:9c:d7:72:9c:12:fd:8a:68:2b:
         8d:73:c1:ba:fb:61:13:11:99:2b:86:4f:af:d6:3e:fa:4b:8e:
         c4:83:84:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:12:32 2026 by rpki-client