Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/34352e3137342e382e302f32342d3234203d3e20323732343336.roa
File:                     34352e3137342e382e302f32342d3234203d3e20323732343336.roa (raw, json)
Hash identifier:          P+Aw4cSx/4jmUpiDAjw4ZEGgusRevru3/rnF12C/fu8=
Subject key identifier:   94:46:60:6F:68:31:38:68:CB:CF:55:20:43:A9:E6:56:F6:91:57:61
Certificate issuer:       /CN=25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4
Certificate serial:       222CC935D5F17000BE0A96AE558F9D247D87AB21
Authority key identifier: 25:B6:4C:4B:D8:E8:30:CE:14:7F:6E:BC:47:19:9B:EA:E7:E6:3B:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/34352e3137342e382e302f32342d3234203d3e20323732343336.roa
Signing time:             Tue 24 Mar 2026 00:04:39 +0000
ROA not before:           Mon 23 Mar 2026 23:59:39 +0000
ROA not after:            Tue 23 Mar 2027 00:04:39 +0000
asID:                     272436
IP address blocks:        45.174.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.crl
                          rsync://rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 07:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:2c:c9:35:d5:f1:70:00:be:0a:96:ae:55:8f:9d:24:7d:87:ab:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4
        Validity
            Not Before: Mar 23 23:59:39 2026 GMT
            Not After : Mar 23 00:04:39 2027 GMT
        Subject: CN=9446606F68313868CBCF552043A9E656F6915761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b4:8d:bb:41:33:55:2a:a6:50:5a:03:93:4a:
                    63:34:c8:f4:20:88:9e:ba:28:b5:1f:37:8e:e9:61:
                    bc:9f:a0:ab:83:f5:95:9a:a3:04:33:a3:fd:71:99:
                    ab:b9:d0:9d:47:41:03:e5:b4:52:3f:27:ac:71:6c:
                    56:41:a6:ba:f8:e8:da:b5:95:84:5d:8d:dc:3f:8a:
                    d8:5e:90:85:25:4d:66:1d:38:a6:9c:3d:ec:c1:35:
                    17:74:ba:5c:bd:3d:76:fb:4c:72:c6:31:f8:9f:c1:
                    d3:a1:75:56:13:7c:ce:4f:4b:e7:4a:01:6c:f4:64:
                    a8:af:71:b6:b3:08:be:bf:8a:71:46:d5:dc:fd:ad:
                    e9:05:cd:f6:7e:24:87:96:37:04:df:5a:b2:03:55:
                    2b:95:cf:a6:6b:58:3a:a4:72:be:07:19:a1:32:2a:
                    58:be:7b:2b:6f:1b:83:b0:c9:a8:0e:1d:36:72:ac:
                    29:d8:e0:20:93:28:5e:25:4e:b2:ad:52:22:b2:93:
                    b7:7a:ea:80:9a:d9:03:e1:62:f1:b2:8b:bc:13:b1:
                    9f:bb:16:e5:67:ed:03:05:12:32:07:66:41:ce:70:
                    bc:61:54:47:3b:2a:d0:f9:8f:23:5b:9b:a5:35:aa:
                    df:32:5e:b6:41:d8:29:19:47:9a:f9:8b:01:bb:73:
                    38:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:46:60:6F:68:31:38:68:CB:CF:55:20:43:A9:E6:56:F6:91:57:61
            X509v3 Authority Key Identifier:
                keyid:25:B6:4C:4B:D8:E8:30:CE:14:7F:6E:BC:47:19:9B:EA:E7:E6:3B:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/34352e3137342e382e302f32342d3234203d3e20323732343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:33:bf:df:48:ea:e6:85:e9:f5:20:59:f8:fe:c7:11:e3:5a:
         f0:03:c1:e3:92:7a:02:9d:3b:f1:7b:60:68:00:be:98:00:5d:
         29:49:fb:ee:25:c3:49:d2:f0:60:3c:93:81:ad:c5:3c:f4:a9:
         68:dc:77:23:85:6d:21:31:bb:56:7e:21:e9:aa:f7:7c:35:f3:
         01:6a:86:9a:51:95:93:a0:54:c5:96:92:0a:c6:69:23:a8:38:
         89:a0:5e:18:ab:7c:bb:74:a3:9a:69:a1:29:6b:1a:97:b9:92:
         5b:15:f9:95:d3:35:78:08:5a:c4:a0:75:75:85:02:b2:e0:c5:
         19:3a:27:a5:f0:b6:6b:15:87:df:95:1a:7f:c7:55:35:cf:cd:
         d7:18:95:c5:e4:e9:ba:c1:f7:23:1c:fe:d0:c1:b1:1f:b7:01:
         d5:fa:91:62:39:4f:53:4d:76:78:dc:03:7a:fd:22:02:16:cf:
         bd:ee:85:58:67:1c:b6:41:be:ae:f5:b4:ad:8c:db:2e:cc:10:
         85:21:c9:9e:92:aa:0a:1d:0e:3e:43:f2:8b:98:c0:f1:1e:04:
         d8:dd:0f:31:37:61:90:2f:99:06:7c:c5:c1:5b:59:ee:28:57:
         db:2b:5c:3a:81:0b:72:c6:5a:cc:a7:48:1a:83:c6:9d:a5:03:
         bd:74:70:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:51:39 2026 by rpki-client