Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/34352e3137382e3230382e302f32322d3232203d3e20323639303437.roa
File:                     34352e3137382e3230382e302f32322d3232203d3e20323639303437.roa (raw, json)
Hash identifier:          Bp6x13F1wdLyTJbg9TyMOVa1JN4olFTssyJAdV8zfg0=
Subject key identifier:   4E:C9:76:0E:8A:6A:5A:20:99:5E:F3:29:0F:CC:DB:00:6E:99:62:A5
Certificate issuer:       /CN=382BF632C249A54C0BE22F06785027D9D07AC720
Certificate serial:       4E1312633DF0D0FD590F8EC09B53683155C2693C
Authority key identifier: 38:2B:F6:32:C2:49:A5:4C:0B:E2:2F:06:78:50:27:D9:D0:7A:C7:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/382BF632C249A54C0BE22F06785027D9D07AC720.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/34352e3137382e3230382e302f32322d3232203d3e20323639303437.roa
Signing time:             Fri 06 Mar 2026 13:52:41 +0000
ROA not before:           Fri 06 Mar 2026 13:47:41 +0000
ROA not after:            Fri 05 Mar 2027 13:52:41 +0000
asID:                     269047
IP address blocks:        45.178.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/382BF632C249A54C0BE22F06785027D9D07AC720.crl
                          rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/382BF632C249A54C0BE22F06785027D9D07AC720.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/382BF632C249A54C0BE22F06785027D9D07AC720.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 03:16:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:13:12:63:3d:f0:d0:fd:59:0f:8e:c0:9b:53:68:31:55:c2:69:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=382BF632C249A54C0BE22F06785027D9D07AC720
        Validity
            Not Before: Mar  6 13:47:41 2026 GMT
            Not After : Mar  5 13:52:41 2027 GMT
        Subject: CN=4EC9760E8A6A5A20995EF3290FCCDB006E9962A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6b:96:a7:d9:d5:01:90:c3:3d:4e:2a:59:27:
                    86:5f:ff:9f:49:9d:70:b2:0e:68:f5:96:ba:02:90:
                    bb:52:ba:7c:2c:9d:42:fd:d6:0a:1c:06:83:54:03:
                    84:a6:08:cf:f6:03:e2:68:d8:ca:4c:8e:46:ff:eb:
                    bc:70:19:7c:09:8f:f2:e6:2e:a6:41:66:3e:04:de:
                    11:1e:3c:c2:d6:fa:ea:99:51:c9:e5:9f:6b:96:75:
                    0f:3c:ab:69:42:a3:ba:ce:ac:d8:66:ba:05:7a:3a:
                    00:49:da:9b:52:a4:38:03:a4:e2:3e:d5:f7:53:7c:
                    53:c3:aa:43:13:6e:42:49:c1:71:7c:a8:e5:53:d3:
                    e8:90:06:3a:b5:c5:4a:b0:ab:51:1d:c0:df:4a:87:
                    cf:d6:2c:25:f2:e7:ee:88:61:b7:cf:c0:fe:c8:ad:
                    2c:1f:11:8f:2f:0b:4b:9f:73:fd:e8:d6:ef:87:7f:
                    31:65:5d:3f:2f:be:dd:72:0d:64:00:03:6e:ba:52:
                    bb:79:a4:a6:ec:8f:09:fb:ec:e5:cc:52:4c:5e:bc:
                    5f:2a:4e:bd:6f:d1:d4:b0:8e:b4:67:df:18:de:19:
                    f3:0f:d0:22:d0:39:bb:b5:06:3c:13:48:ab:b7:50:
                    ed:29:ff:aa:28:8a:98:78:58:6c:8f:7c:b2:e6:49:
                    94:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C9:76:0E:8A:6A:5A:20:99:5E:F3:29:0F:CC:DB:00:6E:99:62:A5
            X509v3 Authority Key Identifier:
                keyid:38:2B:F6:32:C2:49:A5:4C:0B:E2:2F:06:78:50:27:D9:D0:7A:C7:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/382BF632C249A54C0BE22F06785027D9D07AC720.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/382BF632C249A54C0BE22F06785027D9D07AC720.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/34352e3137382e3230382e302f32322d3232203d3e20323639303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:a4:9b:3a:76:e6:ca:96:55:bb:f6:c8:81:8e:db:7b:3d:96:
         c3:ae:d3:4b:cb:8a:f3:5a:ea:7b:cb:b0:15:7e:51:87:ff:b1:
         cf:c4:db:f1:41:41:ee:1b:9a:84:0d:cd:21:24:f9:d1:6a:94:
         c1:f5:0c:be:32:6e:e2:f7:cd:8b:42:2e:6b:52:68:34:f3:be:
         a7:b7:84:4a:89:56:49:62:ce:db:59:28:04:77:a0:eb:c2:30:
         9e:36:de:ad:d1:d9:5d:5e:b4:3e:6c:e3:c2:18:b9:8b:82:05:
         05:8b:d4:0c:3f:81:7a:56:d2:cb:01:f4:00:ff:02:2a:83:11:
         2e:3e:21:db:ae:40:ae:02:79:0d:b3:b4:9e:6f:b3:89:09:af:
         ee:b5:df:fa:90:50:6f:f1:10:1b:3b:ae:e2:9b:22:7f:b5:81:
         06:a7:51:13:0e:30:00:ff:6e:c3:8d:ab:68:2f:b7:f4:a5:5b:
         a8:bf:de:8d:18:ef:9c:95:60:6c:09:f4:56:96:ed:cd:b1:a4:
         96:eb:c6:b0:4d:ba:76:25:97:6a:9c:e6:d3:0c:1f:aa:83:c0:
         0c:de:90:47:79:5f:fa:0f:4f:bf:f9:be:c7:1d:06:5b:72:7c:
         79:3a:fb:f0:40:32:a6:3a:38:ce:2e:1a:ec:d3:53:5e:80:52:
         52:95:4a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:51:08 2026 by rpki-client