Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/0/34352e3137322e3130342e302f32322d3234203d3e20323638373633.roa
File:                     34352e3137322e3130342e302f32322d3234203d3e20323638373633.roa (raw, json)
Hash identifier:          2AmA5CnwgLB4m1ip33mqV3IrbePhMRR+B35FB2uM9kQ=
Subject key identifier:   F7:20:EC:F9:44:9D:6C:2D:0E:CA:3C:75:D9:45:56:CD:12:78:BA:6F
Certificate issuer:       /CN=759056D29FFF39251355512175D35C57E1A33318
Certificate serial:       18F63FD458C1F51A810E11D8C1F5F4185F967C03
Authority key identifier: 75:90:56:D2:9F:FF:39:25:13:55:51:21:75:D3:5C:57:E1:A3:33:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759056D29FFF39251355512175D35C57E1A33318.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/0/34352e3137322e3130342e302f32322d3234203d3e20323638373633.roa
Signing time:             Tue 24 Mar 2026 16:52:45 +0000
ROA not before:           Tue 24 Mar 2026 16:47:45 +0000
ROA not after:            Tue 23 Mar 2027 16:52:45 +0000
asID:                     268763
IP address blocks:        45.172.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/0/759056D29FFF39251355512175D35C57E1A33318.crl
                          rsync://rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/0/759056D29FFF39251355512175D35C57E1A33318.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759056D29FFF39251355512175D35C57E1A33318.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Mar 2026 00:16:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:f6:3f:d4:58:c1:f5:1a:81:0e:11:d8:c1:f5:f4:18:5f:96:7c:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759056D29FFF39251355512175D35C57E1A33318
        Validity
            Not Before: Mar 24 16:47:45 2026 GMT
            Not After : Mar 23 16:52:45 2027 GMT
        Subject: CN=F720ECF9449D6C2D0ECA3C75D94556CD1278BA6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7e:03:92:a4:58:39:24:7d:45:46:cb:44:fa:
                    d2:cc:1c:3a:e5:7b:08:bc:18:64:50:f5:f1:e1:61:
                    fd:89:17:4d:19:7b:a7:ea:7e:1d:30:c0:96:10:3c:
                    80:92:d9:bd:87:cf:02:23:dd:9c:76:34:59:53:96:
                    05:e0:15:31:5b:2b:36:1e:44:71:ac:29:19:68:36:
                    01:cc:87:1d:33:7e:72:9c:0e:6f:9f:25:3f:4b:d8:
                    3f:0b:55:78:57:0b:c3:d2:bc:f3:4c:01:f6:34:cb:
                    a4:a8:03:8f:b9:1a:14:aa:7b:ff:3b:c5:12:11:68:
                    8b:38:36:b2:c0:8f:33:b3:f8:a2:3b:7a:69:81:7b:
                    a7:42:ca:82:c7:45:ad:49:c1:fc:95:5f:f5:f7:62:
                    88:f2:c7:7d:92:08:98:15:c7:84:ab:7d:fe:8f:13:
                    07:75:41:29:49:aa:9a:d0:fa:73:76:ec:92:eb:94:
                    5e:a5:a4:5f:a2:ed:ab:6d:23:5c:e8:8a:62:c8:a5:
                    98:03:fb:52:e1:de:b9:87:72:62:fc:25:e3:42:1e:
                    32:c6:b8:f7:35:67:c3:fb:7c:b5:3c:81:c4:b5:39:
                    e8:0f:63:bb:f8:cc:02:2e:ab:f6:5d:33:ed:d8:b4:
                    ab:4f:bc:f9:96:0e:28:58:51:3f:bd:4f:a7:3e:bb:
                    00:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:20:EC:F9:44:9D:6C:2D:0E:CA:3C:75:D9:45:56:CD:12:78:BA:6F
            X509v3 Authority Key Identifier:
                keyid:75:90:56:D2:9F:FF:39:25:13:55:51:21:75:D3:5C:57:E1:A3:33:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/0/759056D29FFF39251355512175D35C57E1A33318.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759056D29FFF39251355512175D35C57E1A33318.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/0/34352e3137322e3130342e302f32322d3234203d3e20323638373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:04:04:be:8c:1b:03:a9:0e:ea:28:1c:3b:fa:18:c3:82:fb:
         36:2b:f1:14:03:67:f7:d6:13:dc:ad:cf:3b:88:16:20:ce:c0:
         6c:f5:21:83:7d:4a:b0:5c:28:4a:32:ba:75:8f:7a:c8:01:b9:
         20:37:5e:07:7a:02:cf:20:5b:59:b1:d2:66:e4:f9:e7:52:6c:
         8d:f4:d6:f2:71:8a:69:0d:b9:2a:d1:83:cc:5c:ce:3d:00:a7:
         d5:ff:2c:9a:83:6f:43:0d:38:8d:38:59:b9:27:ad:75:71:4f:
         d7:ad:b2:80:2d:59:d5:46:c4:59:e1:8e:ce:04:08:7b:a6:5e:
         00:75:8d:b1:30:2c:47:2b:f6:96:22:d7:e3:f2:4c:55:75:5d:
         c3:98:dc:58:09:a5:37:ce:99:2e:37:c2:62:18:71:97:cf:09:
         f5:d1:46:ca:5f:2f:7b:a3:b1:d2:25:95:24:4f:da:61:e2:fe:
         7d:6c:0e:15:43:28:44:e9:4a:d6:18:7d:64:12:d0:23:84:3e:
         fe:54:ef:c8:e0:4a:5a:75:bb:4c:3c:31:1a:77:bf:82:4c:99:
         d8:4d:2f:e1:d1:43:fc:e8:2e:e6:8f:e9:7c:10:84:58:fd:d6:
         d2:75:d6:18:41:f8:d4:07:be:c2:5b:e6:67:52:a7:4b:7b:3b:
         2d:05:b0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:43:58 2026 by rpki-client