Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/34352e3137332e33372e302f32342d3234203d3e20323638373930.roa
File:                     34352e3137332e33372e302f32342d3234203d3e20323638373930.roa (raw, json)
Hash identifier:          rIEG/JTo0SMn/Vf1TN56PjPUpjKvhJ2RXLRas8kE53Q=
Subject key identifier:   DE:1F:11:10:F0:22:32:72:BA:6C:AD:3D:29:5E:E6:CC:42:06:F2:13
Certificate issuer:       /CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
Certificate serial:       74C588F5CAF86BA8B1B0D2E498096303D32335EB
Authority key identifier: D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/34352e3137332e33372e302f32342d3234203d3e20323638373930.roa
Signing time:             Tue 17 Mar 2026 22:38:01 +0000
ROA not before:           Tue 17 Mar 2026 22:33:01 +0000
ROA not after:            Tue 16 Mar 2027 22:38:01 +0000
asID:                     268790
IP address blocks:        45.173.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl
                          rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 14:52:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c5:88:f5:ca:f8:6b:a8:b1:b0:d2:e4:98:09:63:03:d3:23:35:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
        Validity
            Not Before: Mar 17 22:33:01 2026 GMT
            Not After : Mar 16 22:38:01 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:df:bc:70:8b:94:6d:e9:88:88:52:3e:3c:44:
                    71:90:c7:9e:85:16:04:d9:4f:44:a1:48:5d:e2:c3:
                    7e:e7:e9:d0:f6:33:15:d5:4a:18:5d:1a:3b:4d:4e:
                    bf:ff:5e:cd:16:be:ef:46:e0:82:7f:ed:b3:72:e7:
                    d8:7b:80:8b:8a:fe:dd:3c:6c:d4:7d:7a:b9:a5:39:
                    89:49:f6:6a:af:9e:d7:70:9b:31:0c:80:6f:55:9f:
                    a5:cc:f9:2a:ec:48:bb:df:ab:ba:5d:be:21:e7:eb:
                    7a:06:5c:16:9b:64:11:d8:9b:ab:b5:62:9e:c2:d7:
                    32:e2:b7:48:68:1b:d9:78:3d:da:f0:74:df:ad:19:
                    b8:9c:13:ff:03:64:33:b2:51:e8:89:04:61:e6:bd:
                    09:d1:d0:7e:a2:57:94:3a:70:93:58:9d:22:18:4c:
                    e6:3c:27:0a:c5:a7:22:06:15:d1:f9:ae:bb:55:7c:
                    6c:60:38:6e:e1:ae:e1:f6:cb:aa:2f:9b:d0:35:b3:
                    8e:38:5a:67:ce:21:f7:33:ee:03:15:9d:ab:c5:cf:
                    35:59:3f:79:f1:d5:f9:9a:e6:0c:20:34:da:e7:bf:
                    fb:01:8a:8d:fe:54:c1:99:1d:5a:20:07:bd:64:92:
                    4b:ca:cd:fc:3a:cb:4d:95:06:f0:57:ae:5c:71:d8:
                    2f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:1F:11:10:F0:22:32:72:BA:6C:AD:3D:29:5E:E6:CC:42:06:F2:13
            X509v3 Authority Key Identifier:
                keyid:D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/34352e3137332e33372e302f32342d3234203d3e20323638373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:58:39:e9:65:62:0e:e9:6d:7c:fc:8b:6a:0f:be:e7:5e:e5:
         d9:8a:cb:61:ca:8c:81:c0:5d:4e:7e:19:90:e5:e0:1f:e8:2a:
         eb:f2:75:0d:d9:82:28:79:b4:a2:5a:b9:59:b7:83:80:70:9b:
         f3:c7:7a:eb:eb:b6:34:eb:7d:b5:2e:f6:76:7f:40:45:9b:cf:
         ed:d7:46:e3:a4:10:1f:80:87:d8:68:44:47:b7:89:7b:2c:11:
         75:00:54:3f:65:a8:f0:d6:ea:b8:3b:cc:2c:64:0d:49:08:21:
         3e:44:df:5b:1a:30:66:e7:e4:84:31:2a:11:3a:8f:4c:ad:a2:
         e7:3a:d6:98:ba:6a:6f:95:79:59:3a:76:90:46:28:a8:2e:47:
         aa:9c:bc:ff:fe:39:f2:7b:b4:e6:4e:a6:8b:12:0a:7e:00:06:
         e7:25:ec:af:28:57:82:d9:c2:a3:75:f9:12:a5:70:2f:fe:23:
         f7:ae:a9:16:2b:33:99:01:e9:35:d7:b8:1b:d2:a2:84:a0:84:
         3d:ec:af:22:ed:b5:0e:c2:2e:09:92:a8:69:5a:3a:89:23:60:
         d2:96:fc:e2:e5:83:ef:60:a5:0c:cf:5d:d1:82:c9:7e:97:64:
         5d:ed:e9:eb:82:29:d8:55:ad:22:51:c0:d2:07:57:60:d3:f1:
         37:d7:ac:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:38:41 2026 by rpki-client