Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231322e302f32322d3232203d3e20323637333733.roa
File:                     34352e3233342e3231322e302f32322d3232203d3e20323637333733.roa (raw, json)
Hash identifier:          e/3GWT/XTaK9QTuS4B3pURPMDqeoYXrg6QcodfjD9GA=
Subject key identifier:   FE:0B:FB:60:80:A8:17:F8:01:45:34:D1:D1:C8:79:00:D4:29:D3:86
Certificate issuer:       /CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
Certificate serial:       7DEE5EE18655435C497EA04136FC40C3709DE41A
Authority key identifier: 67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231322e302f32322d3232203d3e20323637333733.roa
Signing time:             Thu 26 Mar 2026 19:33:14 +0000
ROA not before:           Thu 26 Mar 2026 19:28:14 +0000
ROA not after:            Thu 25 Mar 2027 19:33:14 +0000
asID:                     267373
IP address blocks:        45.234.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl
                          rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 21:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ee:5e:e1:86:55:43:5c:49:7e:a0:41:36:fc:40:c3:70:9d:e4:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
        Validity
            Not Before: Mar 26 19:28:14 2026 GMT
            Not After : Mar 25 19:33:14 2027 GMT
        Subject: CN=FE0BFB6080A817F8014534D1D1C87900D429D386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:83:8e:35:80:bc:30:bd:b4:47:1c:e4:02:57:
                    4f:f3:55:df:87:4d:39:86:8e:fc:eb:b7:d5:e4:8d:
                    29:94:8e:cd:c4:b9:6e:38:6e:53:41:51:e2:25:73:
                    f9:b0:d8:88:17:b9:c5:e7:9d:48:e5:3f:1d:25:45:
                    7e:bb:43:6c:bb:b2:40:dd:a4:58:a8:d9:9b:9b:fc:
                    81:d9:10:82:34:8a:e4:b2:14:bc:16:fb:8b:83:db:
                    8d:d6:43:13:47:25:20:57:74:f6:c8:5f:29:b2:4b:
                    2b:29:0b:92:ce:53:64:5f:9e:5e:6b:11:75:40:5e:
                    2a:ce:9e:ca:39:9f:28:a5:d5:98:61:c6:0c:7e:8d:
                    00:83:b1:7a:23:a3:c0:af:1f:1e:8d:d4:bf:a9:a7:
                    a2:15:6b:a6:70:9a:5a:67:66:5d:5c:5c:d2:9d:03:
                    e1:85:95:c0:3a:a2:51:8f:94:7a:5c:bf:ad:05:09:
                    41:03:88:b4:ac:0b:32:93:90:db:9b:c7:f0:ad:9e:
                    7c:ef:04:e3:f7:c9:48:66:87:71:39:5f:b7:d1:a3:
                    d5:fd:7b:c3:cb:22:07:8f:11:ae:c7:ae:1f:20:8a:
                    21:ca:25:c7:1e:bb:fa:13:1c:8b:00:64:4d:c1:63:
                    f7:95:fd:31:44:f3:02:91:48:52:18:29:0f:85:35:
                    20:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:0B:FB:60:80:A8:17:F8:01:45:34:D1:D1:C8:79:00:D4:29:D3:86
            X509v3 Authority Key Identifier:
                keyid:67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231322e302f32322d3232203d3e20323637333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:89:9c:99:2c:d2:13:f2:42:0c:16:30:11:a4:fe:f6:24:16:
         9e:56:38:8d:d6:21:a3:52:21:a6:f2:51:9e:93:7b:37:fd:16:
         91:5c:72:5e:81:ff:57:c1:d9:d5:de:b5:39:f2:51:b1:39:74:
         bc:aa:4b:06:75:50:d9:e9:b3:fe:72:cf:61:cf:84:b4:be:5b:
         d9:cc:33:a4:a6:f6:d9:c2:32:9f:44:ed:aa:8a:28:45:1e:a6:
         a7:d1:13:50:16:46:9b:c6:2e:63:99:de:0c:c6:1d:19:03:63:
         ff:e2:d2:76:e4:1f:d1:4e:9f:e2:20:6d:07:30:77:6d:25:35:
         d7:dd:1d:d2:4c:cf:0c:85:dc:84:d6:7c:55:58:97:c3:43:34:
         f2:af:01:b1:a0:d4:47:46:95:5f:0f:c4:e7:9e:a7:94:02:2b:
         24:c8:69:29:42:ce:82:19:74:30:d3:b3:01:18:64:54:87:bf:
         bb:31:dc:ed:9f:cb:7a:bf:cb:03:a5:40:6b:51:57:ab:90:d4:
         a0:fb:b2:d8:22:66:52:4c:0a:3f:c7:af:68:81:8e:50:4f:8c:
         4a:dd:e5:7d:51:68:d5:a0:98:f1:8a:c0:67:99:04:90:44:be:
         9e:ea:59:a3:ee:f5:15:ac:b0:6e:73:46:ad:ce:0e:a5:6e:9e:
         65:00:9f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:10:12 2026 by rpki-client