Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e34382e302f32342d3234203d3e20323637323536.roa
File:                     34352e3233322e34382e302f32342d3234203d3e20323637323536.roa (raw, json)
Hash identifier:          KxZUhM5SFtupdtwTXbl/Nd0aWZIWP7LOOxkKc7HBag8=
Subject key identifier:   D3:9E:E0:72:1D:DA:32:35:64:62:B5:38:36:C3:45:BE:6A:03:EA:18
Certificate issuer:       /CN=93B81388D9F01BB3ADD678C7DD82C64A03F69013
Certificate serial:       772E31F0E09800889FD36EA16A42AFBAEFD8182D
Authority key identifier: 93:B8:13:88:D9:F0:1B:B3:AD:D6:78:C7:DD:82:C6:4A:03:F6:90:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93B81388D9F01BB3ADD678C7DD82C64A03F69013.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e34382e302f32342d3234203d3e20323637323536.roa
Signing time:             Mon 16 Mar 2026 19:14:48 +0000
ROA not before:           Mon 16 Mar 2026 19:09:48 +0000
ROA not after:            Mon 15 Mar 2027 19:14:48 +0000
asID:                     267256
IP address blocks:        45.232.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/93B81388D9F01BB3ADD678C7DD82C64A03F69013.crl
                          rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/93B81388D9F01BB3ADD678C7DD82C64A03F69013.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93B81388D9F01BB3ADD678C7DD82C64A03F69013.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 01:42:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:2e:31:f0:e0:98:00:88:9f:d3:6e:a1:6a:42:af:ba:ef:d8:18:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93B81388D9F01BB3ADD678C7DD82C64A03F69013
        Validity
            Not Before: Mar 16 19:09:48 2026 GMT
            Not After : Mar 15 19:14:48 2027 GMT
        Subject: CN=D39EE0721DDA32356462B53836C345BE6A03EA18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a0:02:0d:ec:db:d8:1d:47:a7:0c:8d:cc:60:
                    d8:68:0d:36:03:46:42:75:20:29:71:44:33:68:c9:
                    c5:7b:a8:e1:5c:b2:e8:d4:ed:17:f1:ca:32:f3:03:
                    fd:ac:af:b3:1c:fe:d2:af:0e:21:08:24:ae:27:f2:
                    3b:19:41:f3:f2:9c:55:77:b8:53:5c:71:70:a1:02:
                    e0:e9:4d:62:de:be:d7:dd:da:fe:c2:a1:56:cb:7f:
                    cb:4e:6b:b7:25:e7:90:3d:cb:76:7e:14:c4:4a:39:
                    90:6b:cd:bb:69:aa:31:5f:d4:a2:87:e4:b0:c2:32:
                    92:a7:43:1b:81:b5:50:e8:1e:bb:5a:60:92:7c:38:
                    5a:07:9d:e8:f1:26:0a:00:55:04:dd:4d:fa:fe:e3:
                    36:30:60:77:0b:1d:83:2d:12:be:78:76:29:42:17:
                    d0:02:7b:3a:d6:77:87:33:eb:fb:11:78:b3:12:1e:
                    81:17:1a:42:0c:26:03:ad:26:6f:88:0b:15:a1:a0:
                    b6:47:e5:db:9c:d3:ca:12:7c:0f:76:17:a0:f0:83:
                    4e:4b:24:c5:c9:8e:10:02:20:8d:d6:a4:fa:88:4d:
                    60:07:d1:6f:93:1b:74:01:3b:7d:e8:45:b0:05:f7:
                    d2:d0:da:03:18:31:bb:ff:30:22:e8:fa:ad:a9:bc:
                    b3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9E:E0:72:1D:DA:32:35:64:62:B5:38:36:C3:45:BE:6A:03:EA:18
            X509v3 Authority Key Identifier:
                keyid:93:B8:13:88:D9:F0:1B:B3:AD:D6:78:C7:DD:82:C6:4A:03:F6:90:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/93B81388D9F01BB3ADD678C7DD82C64A03F69013.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93B81388D9F01BB3ADD678C7DD82C64A03F69013.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e34382e302f32342d3234203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:f0:bb:66:2c:73:f8:63:d1:8b:e3:0f:94:7e:38:42:ae:56:
         aa:33:0d:e4:ba:99:f9:05:ee:e7:75:97:bb:a0:95:e3:20:c6:
         37:dd:d2:88:95:5e:08:84:2a:7f:52:90:ff:51:f7:9f:91:a1:
         18:63:2b:6a:0f:8e:d9:fa:b7:b8:0e:70:5c:0f:47:74:42:68:
         1e:34:71:f2:17:69:a0:0f:63:b4:28:41:d9:75:33:c0:14:0f:
         00:49:8d:a2:a9:49:5b:c1:f5:25:2d:b3:d9:ea:49:65:d0:fa:
         a0:34:3d:94:f9:12:ca:cb:60:93:a1:f4:65:59:19:57:83:5e:
         49:d1:40:c0:4c:6c:20:b1:71:83:77:f7:3d:12:14:a7:80:df:
         d6:fc:a2:19:7c:90:e7:1c:9b:c5:ff:6e:c2:1c:bf:a0:58:32:
         2e:81:27:f8:9b:5a:22:73:89:c4:a3:6d:1b:97:8c:0b:a1:69:
         19:fe:7d:99:7b:87:0a:61:b6:27:5e:cc:b5:ec:0b:03:23:5f:
         18:4b:4d:42:16:85:28:91:c9:df:b5:45:3f:ac:bc:a0:d8:4f:
         27:e6:1e:99:f9:40:fb:5f:82:06:4c:7b:4b:9c:cc:2a:f2:a6:
         2d:6a:69:b0:ea:66:48:6f:62:0c:67:fe:92:d7:59:3d:3f:f2:
         e5:7d:83:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:05:31 2026 by rpki-client