Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231352e302f32342d3234203d3e20323637333733.roa
File:                     34352e3233342e3231352e302f32342d3234203d3e20323637333733.roa (raw, json)
Hash identifier:          zSZHIHecoK4/UDBuo62YoV9QJQyUsxcVR3oif31TqEQ=
Subject key identifier:   6D:1D:C6:71:98:E4:35:EF:B9:FB:96:03:EE:71:6B:4E:FC:7C:20:AF
Certificate issuer:       /CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
Certificate serial:       32BEB3388D74EB70BC903FAA15AC20919854B553
Authority key identifier: 67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231352e302f32342d3234203d3e20323637333733.roa
Signing time:             Thu 26 Mar 2026 19:33:14 +0000
ROA not before:           Thu 26 Mar 2026 19:28:14 +0000
ROA not after:            Thu 25 Mar 2027 19:33:14 +0000
asID:                     267373
IP address blocks:        45.234.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl
                          rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 21:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:be:b3:38:8d:74:eb:70:bc:90:3f:aa:15:ac:20:91:98:54:b5:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
        Validity
            Not Before: Mar 26 19:28:14 2026 GMT
            Not After : Mar 25 19:33:14 2027 GMT
        Subject: CN=6D1DC67198E435EFB9FB9603EE716B4EFC7C20AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a7:aa:ed:39:d5:08:70:80:30:44:26:f1:ab:
                    47:7d:7c:8d:75:74:d8:c8:21:d3:2a:c4:ee:4b:b6:
                    38:5f:ed:ea:7a:fc:9a:ab:81:7e:fc:83:78:70:7f:
                    11:bf:57:b4:44:f5:b0:5e:0b:a2:75:5b:c6:22:91:
                    b0:be:68:f8:f5:36:7f:f5:6c:55:59:4f:c8:8c:b1:
                    f8:88:38:68:54:7b:90:a7:37:6c:02:87:ae:3c:bb:
                    88:f3:2d:98:9e:0f:eb:46:3b:78:c1:24:f2:db:9b:
                    8d:9d:7e:14:e3:66:cb:76:10:4e:9a:3c:f6:7e:b6:
                    a8:e5:be:06:a4:2c:46:6b:ae:62:e0:41:63:38:6e:
                    9d:9f:1c:dd:52:ec:d8:1e:a2:ec:58:4b:1b:f8:96:
                    63:a3:af:8d:62:4a:20:c2:7b:3c:c9:ff:05:08:7d:
                    f3:67:1d:36:92:1a:2e:4a:e7:5b:5b:06:26:24:d7:
                    df:33:ee:b7:e4:8f:4d:14:6b:55:9a:1d:e8:5d:60:
                    2e:d5:ad:56:8f:01:98:33:b0:3a:56:72:20:9d:a4:
                    4a:8a:9b:57:cd:a8:e3:ef:c3:2e:ea:f3:a9:7b:fd:
                    8e:69:63:b0:ac:6b:3d:b9:92:15:a1:58:c7:15:a2:
                    b6:9c:f6:71:0f:3a:65:70:e4:98:cd:fe:cc:d9:5a:
                    e4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:1D:C6:71:98:E4:35:EF:B9:FB:96:03:EE:71:6B:4E:FC:7C:20:AF
            X509v3 Authority Key Identifier:
                keyid:67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231352e302f32342d3234203d3e20323637333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:c9:e1:3e:d7:92:6c:a2:11:76:26:f7:f7:a8:5b:d2:31:64:
         c3:e9:ed:ad:81:f4:2b:99:30:16:93:2a:0f:3b:7e:8e:e6:36:
         d0:e7:57:5c:36:5b:03:ef:fa:99:b6:2c:bc:03:4d:77:50:21:
         4d:29:ce:6d:20:3d:92:9d:02:b5:1f:71:0b:02:54:bc:1a:0e:
         84:e2:f1:dd:77:50:a4:19:e9:b1:20:7b:93:45:8b:33:9d:eb:
         ac:b3:b9:23:ee:81:7d:b1:c9:98:7a:11:32:83:3c:69:12:d1:
         2c:5e:2b:45:5b:88:19:ec:c5:bf:be:b0:ba:c4:e6:21:0c:60:
         4a:3d:af:01:f6:eb:fe:69:76:42:03:a6:3a:b2:58:a9:c5:80:
         b6:44:05:68:d0:11:04:cc:e7:82:69:82:41:de:9f:bd:50:59:
         67:de:6a:38:bd:0a:f2:49:85:f7:bb:58:3a:e3:d2:ce:d2:ab:
         ee:fd:00:99:48:b2:2d:21:3f:b9:da:1f:89:20:6b:a8:8f:ff:
         7a:82:4f:37:99:7f:8a:ab:0c:d4:1d:71:04:8d:96:d9:8d:35:
         ad:78:37:91:34:db:5a:21:f6:22:35:b2:7d:b0:f9:ea:47:82:
         63:a5:90:4b:76:fb:00:d4:c7:b6:77:77:98:8d:99:8f:32:47:
         6e:a3:38:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:10:07 2026 by rpki-client