Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/34352e3137332e33362e302f32342d3234203d3e20323638373930.roa
File:                     34352e3137332e33362e302f32342d3234203d3e20323638373930.roa (raw, json)
Hash identifier:          wEFaa/cexaMajVDr11r0vy3HF67UL5boRrBRfweT6O0=
Subject key identifier:   86:04:36:5E:EA:75:62:B6:3D:F6:6B:D3:6B:D6:7F:1C:EF:AD:9A:7B
Certificate issuer:       /CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
Certificate serial:       11EDE26E8B365EC0C716A4F21F91DC80F02EED1D
Authority key identifier: D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/34352e3137332e33362e302f32342d3234203d3e20323638373930.roa
Signing time:             Tue 17 Mar 2026 22:38:01 +0000
ROA not before:           Tue 17 Mar 2026 22:33:01 +0000
ROA not after:            Tue 16 Mar 2027 22:38:01 +0000
asID:                     268790
IP address blocks:        45.173.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl
                          rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 14:52:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ed:e2:6e:8b:36:5e:c0:c7:16:a4:f2:1f:91:dc:80:f0:2e:ed:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
        Validity
            Not Before: Mar 17 22:33:01 2026 GMT
            Not After : Mar 16 22:38:01 2027 GMT
        Subject: CN=3082010A0282010100C63C4E7AC64787EFBC35A20B332B59753ACBD750310188BF985A5EBA25DA2CB9D761AA3AA82658DDAAA3057617D01DF33AA15F5D4F74DE83144D90299C751AAE3C7B97843A41CC6F0948BB72BC3F32908746EB72687ADF635E8C02DC26C380F9F7CECF9C1526BEC8B10812461B9B9ED5F88A33659C84E2892FF0C58E037160E7A5A9D4B6C9BC98BF2259BFE69A50D59E27C17F1DAADF64F7C1E48B1A424BAF1C807F5CBDBFFE73BE3A535C18AFB539A512C495B4F8C41B4B8F49F751225DD4FBE050E2974801AE1C422CD9FF4FC75586EF72A30284BAFE833631FB0838D2A137F1BCBAD7FBC1B0D9AC4E07652DF8A7A63776AA553603D11CF8ABA3A8340ECA370203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3c:4e:7a:c6:47:87:ef:bc:35:a2:0b:33:2b:
                    59:75:3a:cb:d7:50:31:01:88:bf:98:5a:5e:ba:25:
                    da:2c:b9:d7:61:aa:3a:a8:26:58:dd:aa:a3:05:76:
                    17:d0:1d:f3:3a:a1:5f:5d:4f:74:de:83:14:4d:90:
                    29:9c:75:1a:ae:3c:7b:97:84:3a:41:cc:6f:09:48:
                    bb:72:bc:3f:32:90:87:46:eb:72:68:7a:df:63:5e:
                    8c:02:dc:26:c3:80:f9:f7:ce:cf:9c:15:26:be:c8:
                    b1:08:12:46:1b:9b:9e:d5:f8:8a:33:65:9c:84:e2:
                    89:2f:f0:c5:8e:03:71:60:e7:a5:a9:d4:b6:c9:bc:
                    98:bf:22:59:bf:e6:9a:50:d5:9e:27:c1:7f:1d:aa:
                    df:64:f7:c1:e4:8b:1a:42:4b:af:1c:80:7f:5c:bd:
                    bf:fe:73:be:3a:53:5c:18:af:b5:39:a5:12:c4:95:
                    b4:f8:c4:1b:4b:8f:49:f7:51:22:5d:d4:fb:e0:50:
                    e2:97:48:01:ae:1c:42:2c:d9:ff:4f:c7:55:86:ef:
                    72:a3:02:84:ba:fe:83:36:31:fb:08:38:d2:a1:37:
                    f1:bc:ba:d7:fb:c1:b0:d9:ac:4e:07:65:2d:f8:a7:
                    a6:37:76:aa:55:36:03:d1:1c:f8:ab:a3:a8:34:0e:
                    ca:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:04:36:5E:EA:75:62:B6:3D:F6:6B:D3:6B:D6:7F:1C:EF:AD:9A:7B
            X509v3 Authority Key Identifier:
                keyid:D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/34352e3137332e33362e302f32342d3234203d3e20323638373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:4b:a0:8c:ec:6c:82:7f:7d:3e:6e:aa:61:65:11:ea:9e:80:
         0d:cb:a4:59:bb:3b:4d:f2:b8:cb:5a:88:b1:b4:f6:ea:52:28:
         85:9c:b5:2c:11:22:7d:c4:95:b6:f9:5b:b9:d8:84:28:19:4c:
         01:69:c0:ee:52:85:ad:70:85:47:67:cd:aa:af:c5:c8:fa:42:
         b5:31:a0:fc:c4:31:be:12:50:36:94:f0:0d:c2:15:30:a2:4e:
         80:55:5d:32:9b:12:5f:27:f2:9c:83:5f:f4:40:c9:09:03:0c:
         d0:ea:11:15:d7:56:bb:2c:87:a6:ff:3b:4e:18:92:cc:be:69:
         dd:d6:cf:e0:20:4b:de:06:74:81:7d:34:bd:6a:9c:6c:81:68:
         a2:96:d4:53:d5:9f:71:4a:67:e7:4d:58:c6:39:78:c0:bd:10:
         52:37:54:9a:d6:7d:73:53:bd:06:ad:2d:1b:ef:79:b2:fa:db:
         96:7a:cb:8f:00:df:fa:79:e4:b3:68:f5:37:92:ee:a6:20:b7:
         d0:4a:8d:51:75:b0:1b:09:9e:75:8e:9e:59:a7:34:d3:43:63:
         80:ec:1c:2b:f1:91:83:9b:33:91:70:f8:e1:16:c7:c9:b1:9f:
         00:7e:0b:1f:8c:56:61:8d:19:9b:5a:b6:58:ea:87:06:43:25:
         ba:7c:68:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:06:05 2026 by rpki-client