Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/22vrpt1oFoGSCLE2sZa23H2LCdD2bvqgkfcmh2dFBs3g/0/34352e3136382e32352e302f32342d3332203d3e20323638303336.roa
File:                     34352e3136382e32352e302f32342d3332203d3e20323638303336.roa (raw, json)
Hash identifier:          Bw2ldsIe2b97g9ccHvBeSRKn7U1b3AEX6H5cK0wiqpc=
Subject key identifier:   08:4E:39:BC:2B:1C:24:88:CE:24:A0:27:33:6B:77:6C:AA:BC:14:D0
Certificate issuer:       /CN=9B679E5B793CBDF49D875F5BD7BDF01252A88452
Certificate serial:       68E8D73BF1218D33C3543FB8AAD89B2B5B393DA3
Authority key identifier: 9B:67:9E:5B:79:3C:BD:F4:9D:87:5F:5B:D7:BD:F0:12:52:A8:84:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B679E5B793CBDF49D875F5BD7BDF01252A88452.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/22vrpt1oFoGSCLE2sZa23H2LCdD2bvqgkfcmh2dFBs3g/0/34352e3136382e32352e302f32342d3332203d3e20323638303336.roa
Signing time:             Wed 25 Mar 2026 12:02:42 +0000
ROA not before:           Wed 25 Mar 2026 11:57:42 +0000
ROA not after:            Wed 24 Mar 2027 12:02:42 +0000
asID:                     268036
IP address blocks:        45.168.25.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/22vrpt1oFoGSCLE2sZa23H2LCdD2bvqgkfcmh2dFBs3g/0/9B679E5B793CBDF49D875F5BD7BDF01252A88452.crl
                          rsync://rpki-repo.registro.br/repo/22vrpt1oFoGSCLE2sZa23H2LCdD2bvqgkfcmh2dFBs3g/0/9B679E5B793CBDF49D875F5BD7BDF01252A88452.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B679E5B793CBDF49D875F5BD7BDF01252A88452.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 06:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:e8:d7:3b:f1:21:8d:33:c3:54:3f:b8:aa:d8:9b:2b:5b:39:3d:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B679E5B793CBDF49D875F5BD7BDF01252A88452
        Validity
            Not Before: Mar 25 11:57:42 2026 GMT
            Not After : Mar 24 12:02:42 2027 GMT
        Subject: CN=084E39BC2B1C2488CE24A027336B776CAABC14D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9e:c7:4a:48:84:76:50:b3:3e:82:7a:1f:5e:
                    4f:a3:7f:f1:ca:69:7f:43:e2:f6:20:f5:b6:a9:b6:
                    ba:65:34:38:93:00:5d:f1:38:77:f8:b9:b1:0c:f9:
                    06:82:a5:55:af:d7:39:b1:67:bd:e6:a7:65:81:fc:
                    4f:1c:1e:90:7a:65:c7:eb:e5:a2:c5:7c:43:2b:42:
                    26:65:54:13:15:c0:55:90:8d:4b:36:2a:f8:46:e6:
                    d2:ad:5f:f0:d4:3c:73:c1:da:f5:39:7a:2b:65:52:
                    f5:0e:c5:dd:71:46:42:86:5f:8b:8e:90:a4:62:c5:
                    5e:41:d7:50:c5:6a:16:a8:1a:8f:4c:dc:d3:ae:2d:
                    dc:c1:12:14:cf:cf:dc:97:85:43:e5:68:1e:57:ad:
                    c5:ec:f5:6f:36:41:72:bc:e6:37:4a:45:a7:0c:fd:
                    f2:c1:6d:a8:68:7a:64:5d:84:5a:e6:36:ff:83:61:
                    2b:2a:60:6e:67:22:27:90:02:cb:fc:68:32:b8:70:
                    2a:09:79:a7:d6:0a:e2:fa:0a:fa:f6:a5:c7:a8:d6:
                    dc:c6:e6:d7:27:5a:2c:70:86:ac:d8:e3:4a:a5:04:
                    3f:e5:7d:79:95:ad:87:77:4c:88:b9:8f:4a:48:2a:
                    6e:2f:a1:41:ce:2d:29:62:01:ff:95:34:fd:86:05:
                    15:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:4E:39:BC:2B:1C:24:88:CE:24:A0:27:33:6B:77:6C:AA:BC:14:D0
            X509v3 Authority Key Identifier:
                keyid:9B:67:9E:5B:79:3C:BD:F4:9D:87:5F:5B:D7:BD:F0:12:52:A8:84:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/22vrpt1oFoGSCLE2sZa23H2LCdD2bvqgkfcmh2dFBs3g/0/9B679E5B793CBDF49D875F5BD7BDF01252A88452.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B679E5B793CBDF49D875F5BD7BDF01252A88452.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/22vrpt1oFoGSCLE2sZa23H2LCdD2bvqgkfcmh2dFBs3g/0/34352e3136382e32352e302f32342d3332203d3e20323638303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:6b:88:32:d0:ad:a4:0d:a4:49:e5:e2:49:5d:81:2b:24:b1:
         a2:ce:9c:95:3c:6b:b4:5f:52:22:7b:5d:27:60:fc:bb:a6:5a:
         a4:e4:a2:08:90:50:48:3f:03:9c:08:f6:fc:10:b3:0a:3e:a3:
         fd:43:c5:c8:d4:9b:2a:a9:fb:e2:81:21:d0:65:b1:d2:9b:51:
         09:6a:dc:1c:22:c8:f3:a3:dd:03:64:5c:26:52:e2:b1:fc:54:
         97:e8:69:5b:f6:22:66:b0:4e:eb:ab:f9:9f:dc:cf:5f:f4:52:
         09:66:3e:a5:ae:7e:e6:66:ce:f1:12:6b:43:cd:98:59:ee:3c:
         b9:54:c8:70:7e:1f:1c:af:95:6a:1c:34:0d:de:f6:bd:ad:0d:
         38:4a:89:2c:73:04:f7:e5:26:a4:ed:74:a0:d3:d9:2e:8d:ca:
         71:cc:36:06:0d:f3:52:16:67:a0:45:25:c5:d7:75:6b:2e:09:
         7b:2d:60:05:0a:a8:76:fb:6c:a2:02:86:53:1e:57:13:56:9c:
         b5:f6:00:d3:e0:f9:4b:ea:18:6d:b7:74:02:d1:2f:26:fe:29:
         4f:8d:37:d8:6d:cb:89:f2:47:7b:c6:46:4e:7c:66:76:4b:97:
         88:c3:c4:0b:fd:5f:c1:85:20:23:c8:a1:04:2f:42:9f:65:86:
         48:55:78:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:17:38 2026 by rpki-client