Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS266949.roa
File:                     AS266949.roa (raw, json)
Hash identifier:          m1brWL9bOTEdJKs6uyczgB14FKhghlUYeIUROC5gNK8=
Subject key identifier:   E1:98:7B:0C:AD:3F:14:FB:CE:25:60:B6:D5:47:45:13:9C:22:48:AE
Certificate issuer:       /CN=135830443F9F0628207359060862957206FBE517
Certificate serial:       634F1747D95A2CE9BD7896DCA7010BC85E96B24C
Authority key identifier: 13:58:30:44:3F:9F:06:28:20:73:59:06:08:62:95:72:06:FB:E5:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/135830443F9F0628207359060862957206FBE517.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS266949.roa
Signing time:             Wed 29 Apr 2026 19:45:55 +0000
ROA not before:           Wed 29 Apr 2026 19:40:55 +0000
ROA not after:            Wed 28 Apr 2027 19:45:55 +0000
asID:                     266949
IP address blocks:        45.225.196.0/22 maxlen: 24
                          2804:45c8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/135830443F9F0628207359060862957206FBE517.crl
                          rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/135830443F9F0628207359060862957206FBE517.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/135830443F9F0628207359060862957206FBE517.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:35:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:4f:17:47:d9:5a:2c:e9:bd:78:96:dc:a7:01:0b:c8:5e:96:b2:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135830443F9F0628207359060862957206FBE517
        Validity
            Not Before: Apr 29 19:40:55 2026 GMT
            Not After : Apr 28 19:45:55 2027 GMT
        Subject: CN=E1987B0CAD3F14FBCE2560B6D54745139C2248AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a1:f9:04:28:e8:67:96:f3:50:f5:0c:65:96:
                    10:b0:88:91:df:84:52:68:3a:94:2a:2a:7d:cb:36:
                    a3:b4:e0:82:c1:6a:cf:8d:a8:32:75:1c:62:87:9a:
                    fb:ac:4c:f3:c0:c8:17:68:6a:c7:6e:16:48:34:c1:
                    7c:54:54:12:12:a3:f9:2b:e0:6b:b2:e0:d4:9d:8b:
                    91:ce:77:73:ef:41:4d:db:ff:d7:8d:d1:be:6a:0c:
                    33:9a:db:fb:98:5b:a7:ed:f7:e0:d1:50:19:5d:81:
                    42:0a:9e:38:33:ad:a4:d9:b3:6a:de:8c:67:c8:e1:
                    ec:45:1d:fd:b7:06:3b:8c:98:dd:01:d6:65:47:ec:
                    88:74:95:d8:1f:b1:e3:03:e5:dc:93:ef:fb:e0:da:
                    c5:b7:9e:54:9f:48:e0:88:02:0d:85:82:39:b2:1e:
                    6f:d6:66:f2:2c:43:06:8e:6c:05:8a:a5:86:3f:43:
                    8a:25:f7:70:2d:0d:a9:05:c2:fb:d8:aa:ad:56:b8:
                    74:d5:6c:9b:14:7f:29:8b:b2:a6:13:5b:c3:a5:bb:
                    cc:c8:62:db:e4:8a:32:5c:e2:71:01:15:e5:4c:a0:
                    36:f9:46:6e:33:62:3b:09:11:27:7f:27:f5:50:20:
                    12:59:7d:64:e2:10:26:9d:0f:61:d1:b5:1b:74:88:
                    e4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:98:7B:0C:AD:3F:14:FB:CE:25:60:B6:D5:47:45:13:9C:22:48:AE
            X509v3 Authority Key Identifier:
                keyid:13:58:30:44:3F:9F:06:28:20:73:59:06:08:62:95:72:06:FB:E5:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/135830443F9F0628207359060862957206FBE517.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/135830443F9F0628207359060862957206FBE517.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS266949.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.196.0/22
                IPv6:
                  2804:45c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:ca:0d:5d:47:94:33:7f:6d:21:c8:56:72:f3:c2:23:42:19:
         d4:08:b8:4a:90:eb:e8:99:b5:d3:c2:5a:81:61:e9:b7:13:60:
         27:d2:57:a0:e1:45:3c:c5:9d:2c:4a:6b:77:61:ca:4f:2d:ee:
         d7:0b:21:58:69:14:66:09:18:98:88:a3:45:cc:08:70:a7:b1:
         89:fd:43:4d:86:32:86:41:e0:37:b2:b1:62:64:56:4f:a6:bf:
         96:44:06:ac:07:0c:90:b5:4e:5a:24:e1:a9:8a:89:49:f7:6d:
         5b:6a:f5:2c:9d:65:4a:0c:15:87:e2:87:37:a8:a9:60:ea:50:
         73:2f:d8:2a:83:f8:f4:be:1e:5f:78:29:a5:0c:73:47:fa:8b:
         77:59:b9:fb:7f:72:1b:5c:49:e4:e4:5f:c0:b6:36:3f:0e:6e:
         68:0a:b4:59:e3:a5:80:a2:4d:83:ba:f2:7d:a3:73:f8:cf:66:
         74:64:5b:c2:31:58:ae:a5:13:fb:3d:0b:62:24:31:f8:92:58:
         70:55:2f:36:73:e8:04:2f:25:ff:60:76:7f:bc:c1:a3:b1:79:
         c6:cc:29:e5:12:ab:9b:88:51:06:bb:03:69:1d:d2:8d:29:2e:
         75:e1:aa:ee:22:7b:db:15:3b:2c:af:83:ad:42:35:cf:66:ae:
         a4:43:ac:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:02:42 2026 by rpki-client