Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/34352e3138352e37362e302f32322d3332203d3e20323639333637.roa
File:                     34352e3138352e37362e302f32322d3332203d3e20323639333637.roa (raw, json)
Hash identifier:          grvYg6pByE1PctLZnu8fcegdXuLvr1gy60s7te6df08=
Subject key identifier:   69:47:4B:AF:A5:C0:65:F6:05:29:39:ED:D4:0D:02:26:D1:0E:D3:0B
Certificate issuer:       /CN=BEDD5173301846D74B715880C22FAB5AF38F22F1
Certificate serial:       14A773E1DA8779C5D04F8D559C13F3F0D9F66409
Authority key identifier: BE:DD:51:73:30:18:46:D7:4B:71:58:80:C2:2F:AB:5A:F3:8F:22:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEDD5173301846D74B715880C22FAB5AF38F22F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/34352e3138352e37362e302f32322d3332203d3e20323639333637.roa
Signing time:             Fri 06 Mar 2026 17:37:16 +0000
ROA not before:           Fri 06 Mar 2026 17:32:16 +0000
ROA not after:            Fri 05 Mar 2027 17:37:16 +0000
asID:                     269367
IP address blocks:        45.185.76.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/BEDD5173301846D74B715880C22FAB5AF38F22F1.crl
                          rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/BEDD5173301846D74B715880C22FAB5AF38F22F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEDD5173301846D74B715880C22FAB5AF38F22F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 01:41:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a7:73:e1:da:87:79:c5:d0:4f:8d:55:9c:13:f3:f0:d9:f6:64:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEDD5173301846D74B715880C22FAB5AF38F22F1
        Validity
            Not Before: Mar  6 17:32:16 2026 GMT
            Not After : Mar  5 17:37:16 2027 GMT
        Subject: CN=69474BAFA5C065F6052939EDD40D0226D10ED30B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:47:6a:14:c7:9d:e4:ba:78:33:8c:d7:be:17:
                    80:1c:c2:51:f2:ce:79:0e:91:db:2b:5e:6f:ec:ba:
                    10:89:83:26:fa:e4:05:b9:0b:8b:a1:f9:39:c0:1c:
                    ff:3f:1f:02:5b:d8:75:18:f5:0e:08:d6:2f:4c:bb:
                    33:31:e5:a5:e8:f2:42:30:92:35:78:8c:b8:3a:c1:
                    b0:25:4f:c9:33:4e:4f:8a:dc:f6:74:9c:84:30:73:
                    5f:c2:1c:38:83:21:bd:e9:2e:60:09:d5:c0:d3:bb:
                    1b:01:63:48:f8:32:42:93:e0:a3:39:7a:e2:2e:f9:
                    dd:f2:71:ed:55:34:49:27:e0:3b:d5:8d:73:d7:0b:
                    fa:87:92:b5:0f:96:63:ea:56:7d:d3:70:e1:ac:c4:
                    e2:b4:3c:79:75:a4:8d:b1:21:0c:d9:58:6f:f4:a1:
                    6f:c8:9a:06:b6:0b:ab:33:f9:f6:43:0d:08:a4:ce:
                    bb:41:d9:da:8b:bc:d4:04:68:ce:5e:91:39:57:17:
                    c3:e4:24:8d:e0:af:54:94:08:92:fc:2d:eb:9a:7f:
                    80:71:8a:47:f6:34:1f:9f:28:e2:5f:04:36:b2:fe:
                    d0:f7:54:f1:ce:6e:3e:47:e3:64:96:64:d7:89:4b:
                    b9:54:3b:e8:07:0d:63:60:a2:1a:f9:a7:b4:e9:47:
                    0c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:47:4B:AF:A5:C0:65:F6:05:29:39:ED:D4:0D:02:26:D1:0E:D3:0B
            X509v3 Authority Key Identifier:
                keyid:BE:DD:51:73:30:18:46:D7:4B:71:58:80:C2:2F:AB:5A:F3:8F:22:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/BEDD5173301846D74B715880C22FAB5AF38F22F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEDD5173301846D74B715880C22FAB5AF38F22F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/34352e3138352e37362e302f32322d3332203d3e20323639333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:05:e4:9d:4f:94:c5:2e:cf:e4:f5:22:75:da:53:5c:e7:04:
         2b:b0:32:10:af:79:49:29:32:60:24:14:3d:6a:bc:77:02:c6:
         f5:fe:90:2f:cf:76:43:70:c5:26:ec:89:88:10:e5:c5:92:c7:
         48:c0:0f:50:2e:08:de:e2:a8:92:ce:56:70:26:b7:9f:52:a3:
         34:26:2f:a1:25:8d:81:73:ae:6b:6b:9c:d1:d6:60:47:08:d4:
         84:dc:e9:c2:5b:10:57:58:dd:84:88:52:e2:3f:e4:5b:14:48:
         2e:87:88:01:ca:16:c2:9a:0a:f4:e0:d2:3e:ee:11:81:2b:2f:
         f1:3a:75:27:93:33:22:d3:3a:df:bd:a6:d0:63:4e:46:48:6d:
         30:24:e7:ba:de:3b:66:e3:0c:93:e0:59:6c:10:25:22:bd:18:
         f7:9a:e9:15:29:ed:87:11:51:50:72:c2:bf:8b:fa:33:fd:60:
         37:ae:f3:13:54:92:39:c6:b2:55:ed:a6:51:58:78:da:df:bc:
         b7:09:0f:e7:e9:4d:52:f3:81:f8:01:db:49:6a:ff:6b:d0:c9:
         ef:58:00:ef:ce:09:d8:f4:d9:91:5f:27:8c:23:bd:a3:ba:31:
         69:cb:01:e1:3d:54:4d:de:61:8e:7f:be:35:6c:a5:69:df:bd:
         7a:74:07:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:53:34 2026 by rpki-client