Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231342e302f32342d3234203d3e20323637333733.roa
File:                     34352e3233342e3231342e302f32342d3234203d3e20323637333733.roa (raw, json)
Hash identifier:          by65odK3YD4vm40sPHb+FG8M5K4D3qP1iQC9NOQMUPY=
Subject key identifier:   27:4D:88:11:1A:10:EB:67:AE:EF:46:34:AB:96:11:8D:04:2F:93:1F
Certificate issuer:       /CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
Certificate serial:       0AE27FCACDB8C757D3651D62986CD33EFA02AAEC
Authority key identifier: 67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231342e302f32342d3234203d3e20323637333733.roa
Signing time:             Thu 26 Mar 2026 19:33:14 +0000
ROA not before:           Thu 26 Mar 2026 19:28:14 +0000
ROA not after:            Thu 25 Mar 2027 19:33:14 +0000
asID:                     267373
IP address blocks:        45.234.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl
                          rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 21:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:e2:7f:ca:cd:b8:c7:57:d3:65:1d:62:98:6c:d3:3e:fa:02:aa:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
        Validity
            Not Before: Mar 26 19:28:14 2026 GMT
            Not After : Mar 25 19:33:14 2027 GMT
        Subject: CN=274D88111A10EB67AEEF4634AB96118D042F931F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0d:00:07:0c:22:70:97:09:b8:54:98:6f:39:
                    cb:e1:a3:99:4c:c7:88:83:f1:b8:50:bd:29:67:b6:
                    35:c4:42:fb:a2:c2:26:8b:54:c1:ac:a4:ee:0f:32:
                    19:64:cb:59:29:a4:e2:e9:45:34:4f:c8:53:29:10:
                    c6:88:83:f5:84:2b:fa:ef:7a:08:b6:52:8a:86:98:
                    b6:fd:86:45:88:21:01:92:68:36:2a:bd:7c:60:c9:
                    75:e6:9b:49:e3:26:44:dc:de:af:a9:6c:b4:87:09:
                    05:2d:d3:c7:3b:9b:12:88:9a:1e:b8:74:d1:33:c7:
                    bf:8d:c0:f0:62:ed:02:17:9c:b5:a1:13:ab:7d:31:
                    59:33:03:5b:d8:53:5b:93:b1:95:d1:7c:a5:a4:49:
                    ab:0d:63:9d:23:13:f8:33:b3:5f:58:a7:54:48:93:
                    55:42:a4:40:0d:ff:70:a6:12:ce:0a:56:11:32:9e:
                    6b:ae:fb:45:bb:8a:1e:ad:ba:85:2d:91:54:f2:f9:
                    f2:32:0f:b0:2e:4c:b7:ab:de:bf:2a:05:b4:50:c1:
                    62:36:68:e1:3c:43:ac:b8:81:cc:97:d4:de:54:9f:
                    54:2b:8f:0d:4d:43:5b:ed:6d:4a:fd:e1:a6:f4:75:
                    31:04:ba:ca:e8:f6:f8:e9:67:69:b3:fa:7f:85:84:
                    1a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4D:88:11:1A:10:EB:67:AE:EF:46:34:AB:96:11:8D:04:2F:93:1F
            X509v3 Authority Key Identifier:
                keyid:67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231342e302f32342d3234203d3e20323637333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:49:27:26:af:8f:9c:9b:a4:0f:73:85:5a:fe:9b:ac:bf:28:
         2c:6e:bd:c3:bf:34:7d:8a:5f:07:98:5c:52:31:03:b2:c5:da:
         64:14:31:60:6e:da:14:f5:27:ce:ec:d0:84:1c:d2:5f:0f:dd:
         11:c0:61:d4:86:fd:04:0e:0e:b4:51:81:97:d4:97:88:f7:3d:
         a8:8a:98:7d:b3:c2:10:9b:f2:23:14:a8:25:cb:bb:c4:b4:df:
         00:2a:14:4b:01:95:22:68:90:3a:b5:f9:5c:0b:1b:6b:b0:b9:
         79:0f:e1:84:30:84:d1:0d:6b:78:7f:59:e8:c8:82:2c:4c:44:
         f2:25:0d:18:c9:db:34:63:06:06:ee:9f:f2:d6:c5:92:47:83:
         a2:f9:5b:84:5f:35:bc:da:ef:ab:03:af:8f:51:5c:96:5d:4b:
         6a:0f:43:93:90:fc:9e:5b:a4:e4:97:ca:35:61:9b:5f:ef:a1:
         be:ea:8d:f2:28:07:5e:da:f7:31:ef:ec:a9:97:95:a3:17:af:
         1c:2c:b9:dd:9f:09:11:5a:ab:e5:06:f0:36:3b:2e:63:e2:eb:
         f1:09:d8:42:d7:1b:f8:12:c3:60:20:13:9e:b7:61:9d:fb:d7:
         32:1c:73:59:81:4e:14:8e:cc:16:c3:c3:6e:71:78:af:d8:18:
         6b:e9:cc:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:08:42 2026 by rpki-client