Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS267085.roa
File:                     AS267085.roa (raw, json)
Hash identifier:          4ejZm2rmH3cj85XQqV0vjI7MBIq4ZGiviUaacsE/mA8=
Subject key identifier:   64:73:EA:3D:AA:FB:A3:EB:47:D1:07:5C:F8:61:BB:02:61:86:89:2F
Certificate issuer:       /CN=135830443F9F0628207359060862957206FBE517
Certificate serial:       06D219741E9439E3CA6E5DB20DD74F55F112AC6C
Authority key identifier: 13:58:30:44:3F:9F:06:28:20:73:59:06:08:62:95:72:06:FB:E5:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/135830443F9F0628207359060862957206FBE517.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS267085.roa
Signing time:             Wed 29 Apr 2026 19:45:56 +0000
ROA not before:           Wed 29 Apr 2026 19:40:56 +0000
ROA not after:            Wed 28 Apr 2027 19:45:56 +0000
asID:                     267085
IP address blocks:        45.228.240.0/22 maxlen: 24
                          2804:47ec::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/135830443F9F0628207359060862957206FBE517.crl
                          rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/135830443F9F0628207359060862957206FBE517.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/135830443F9F0628207359060862957206FBE517.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:35:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:d2:19:74:1e:94:39:e3:ca:6e:5d:b2:0d:d7:4f:55:f1:12:ac:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135830443F9F0628207359060862957206FBE517
        Validity
            Not Before: Apr 29 19:40:56 2026 GMT
            Not After : Apr 28 19:45:56 2027 GMT
        Subject: CN=6473EA3DAAFBA3EB47D1075CF861BB026186892F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8f:bd:5f:d1:46:d2:8e:27:7d:54:42:67:1a:
                    3d:17:47:7c:8c:d5:d3:ed:c7:61:7d:0c:57:c8:2c:
                    51:df:63:39:ba:6d:20:3d:25:94:63:df:a6:13:7b:
                    bf:36:a8:4b:39:f7:8b:5b:00:15:f7:71:0a:40:c7:
                    05:95:84:51:9e:25:8a:e5:c8:7d:96:2a:07:20:d6:
                    4a:57:e2:47:7a:98:53:bf:fd:43:95:88:26:92:c7:
                    f7:6c:6d:b3:08:a4:7f:e5:6c:0a:8a:23:c7:a8:ea:
                    8e:2b:63:2e:15:bb:b4:f4:14:e1:21:aa:12:26:9b:
                    36:c4:5c:74:50:19:b8:ab:ae:1c:53:d4:bf:46:f1:
                    cb:12:fe:07:8a:ab:b0:a7:4b:c5:4d:4d:4c:b5:da:
                    b6:af:5e:a0:a7:47:c5:65:b0:80:36:9b:40:c4:09:
                    c3:2a:aa:cd:00:4c:d3:19:e0:2d:52:9e:40:0e:98:
                    a3:c0:a2:48:2a:74:eb:9a:e1:9f:63:2c:23:d5:0b:
                    79:a4:52:27:cf:14:e1:34:33:94:4b:bb:3a:78:e0:
                    86:b9:6e:c6:cd:40:b5:f2:85:ac:b3:58:ee:b5:3f:
                    52:94:c9:f6:ea:f2:91:1f:c2:23:3c:02:20:d2:9c:
                    df:10:3b:49:17:7d:95:1d:22:5c:1f:a1:8e:90:5c:
                    9c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:73:EA:3D:AA:FB:A3:EB:47:D1:07:5C:F8:61:BB:02:61:86:89:2F
            X509v3 Authority Key Identifier:
                keyid:13:58:30:44:3F:9F:06:28:20:73:59:06:08:62:95:72:06:FB:E5:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/135830443F9F0628207359060862957206FBE517.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/135830443F9F0628207359060862957206FBE517.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS267085.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.240.0/22
                IPv6:
                  2804:47ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:55:0b:eb:10:06:88:a0:65:ac:90:cf:f2:07:06:8a:dd:5a:
         3d:75:e2:80:98:de:f7:f1:2f:e9:ad:8f:c5:97:41:d8:e7:2a:
         f6:df:fc:eb:e0:9d:86:0f:cb:07:c7:99:bb:25:aa:fb:04:35:
         27:d5:5c:1e:84:04:78:30:a4:96:12:b0:df:c7:98:2c:ca:c0:
         da:77:13:3a:bb:23:da:fe:8f:80:88:0f:14:27:19:10:b6:56:
         54:23:7c:66:4a:42:04:41:cc:71:31:86:36:87:b2:0f:48:98:
         d6:3a:0b:1f:a2:ad:73:8b:d4:d5:f4:be:3e:c9:53:6d:de:13:
         b8:9a:95:af:db:19:26:5c:e7:05:73:6e:5e:c2:48:8f:7b:80:
         d0:a9:a2:47:21:62:e5:a2:6d:ab:ad:e5:f9:c8:30:e0:bf:7a:
         0d:45:cd:52:80:e6:b9:38:13:20:a5:3c:f8:b2:c7:38:9b:26:
         d0:aa:26:24:f1:c0:08:ff:82:89:93:02:c2:ca:3a:40:18:76:
         b5:4e:55:20:2f:53:83:0d:ae:df:e4:1c:db:72:64:10:8f:2b:
         a4:98:5b:4a:b5:28:45:1e:8e:98:6b:1e:95:da:7c:f7:61:83:
         8b:22:2d:28:8a:8b:5f:85:c5:1a:0b:cb:21:e6:ca:22:d2:5e:
         ad:be:e5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:02:47 2026 by rpki-client