Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/3/34352e3137342e342e302f32322d3232203d3e20323638393134.roa
File:                     34352e3137342e342e302f32322d3232203d3e20323638393134.roa (raw, json)
Hash identifier:          f5Pp3/poa3rjtrIu/ipBJ9Mo2WR+l1+FXvU30EHhlGE=
Subject key identifier:   66:1B:59:88:0A:34:41:EE:65:9B:06:88:7D:25:BC:77:35:26:2E:E9
Certificate issuer:       /CN=AE9E4F2BB292A290BEF77B152F98994CF79B63AE
Certificate serial:       2ACA1997D653B937E548D315802C2BB4B3212C21
Authority key identifier: AE:9E:4F:2B:B2:92:A2:90:BE:F7:7B:15:2F:98:99:4C:F7:9B:63:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE9E4F2BB292A290BEF77B152F98994CF79B63AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/3/34352e3137342e342e302f32322d3232203d3e20323638393134.roa
Signing time:             Mon 09 Mar 2026 22:02:50 +0000
ROA not before:           Mon 09 Mar 2026 21:57:50 +0000
ROA not after:            Mon 08 Mar 2027 22:02:50 +0000
asID:                     268914
IP address blocks:        45.174.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/3/AE9E4F2BB292A290BEF77B152F98994CF79B63AE.crl
                          rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/3/AE9E4F2BB292A290BEF77B152F98994CF79B63AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE9E4F2BB292A290BEF77B152F98994CF79B63AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 17:39:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:ca:19:97:d6:53:b9:37:e5:48:d3:15:80:2c:2b:b4:b3:21:2c:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE9E4F2BB292A290BEF77B152F98994CF79B63AE
        Validity
            Not Before: Mar  9 21:57:50 2026 GMT
            Not After : Mar  8 22:02:50 2027 GMT
        Subject: CN=661B59880A3441EE659B06887D25BC7735262EE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6d:71:f7:eb:71:fc:3e:e8:ef:96:86:3d:cc:
                    56:79:84:1e:07:16:2d:c8:dd:72:0e:51:1b:15:8c:
                    93:48:95:87:74:81:a0:c4:da:05:1e:a2:d7:70:16:
                    fd:a2:bd:e8:6e:6d:a3:c6:92:90:1b:16:2e:06:37:
                    4d:e1:e2:99:ed:ca:ab:b6:57:86:d1:fb:e2:0c:5c:
                    45:90:02:23:bb:01:b1:da:5c:c6:0f:d9:3f:cb:1b:
                    10:c1:c5:4d:f2:5c:71:52:a4:c4:eb:15:6e:10:c1:
                    81:cb:8d:0b:62:82:97:23:e6:a1:66:27:24:02:91:
                    f8:0b:08:bf:5d:b6:83:dc:2a:f5:55:9a:27:e2:fb:
                    95:d0:60:ea:b2:c7:ff:7e:1c:fc:6c:60:46:96:63:
                    97:3b:6b:24:b2:83:d3:9e:04:1f:f3:a1:d1:bd:d9:
                    f6:e3:9e:fd:b2:f1:82:c8:81:24:11:c4:68:9d:f3:
                    1c:ff:d4:7f:da:1b:fe:73:e2:21:73:48:34:2b:74:
                    5f:56:4b:f6:40:a2:09:9a:32:19:24:5e:b4:0d:dc:
                    5f:f8:59:95:ea:ec:06:b7:6a:e2:14:26:0f:a1:be:
                    99:88:f8:3f:2d:a3:bb:94:fc:eb:c7:e3:a4:a4:91:
                    61:c2:a6:ff:7b:1f:a1:98:de:d9:95:d3:34:d0:c5:
                    c1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:1B:59:88:0A:34:41:EE:65:9B:06:88:7D:25:BC:77:35:26:2E:E9
            X509v3 Authority Key Identifier:
                keyid:AE:9E:4F:2B:B2:92:A2:90:BE:F7:7B:15:2F:98:99:4C:F7:9B:63:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/3/AE9E4F2BB292A290BEF77B152F98994CF79B63AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE9E4F2BB292A290BEF77B152F98994CF79B63AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/3/34352e3137342e342e302f32322d3232203d3e20323638393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c0:5d:5a:04:97:aa:b9:af:a3:ed:4b:c8:d1:36:d1:64:97:77:
         09:f1:4c:6c:92:f2:f2:cc:a1:2e:5b:9c:45:a2:be:73:e1:85:
         42:91:a6:4c:af:db:4a:52:3b:00:75:21:cb:eb:54:1b:b1:a2:
         6f:0b:26:2a:cd:d6:7b:4b:6c:ed:af:40:06:53:11:91:04:55:
         f7:49:ae:b6:ec:74:b2:93:c0:58:8e:9a:58:6f:ee:f8:54:fa:
         86:37:4f:67:03:d9:1f:14:a4:81:06:03:fe:89:34:8f:0a:32:
         97:3a:2f:f7:1d:62:64:53:82:d2:85:43:33:a2:3c:8d:89:ba:
         33:31:f8:74:15:91:b6:fa:3c:3f:d0:c0:c2:7a:e3:27:a8:6b:
         16:a7:bf:cf:5a:ec:36:4b:56:1b:e9:d9:b9:1e:8e:ca:5d:aa:
         a0:9e:a5:a1:43:be:ab:29:7a:63:32:f0:c6:65:3d:df:40:b2:
         78:1e:82:c4:c9:16:d8:1d:0f:88:04:61:9e:b0:6e:61:a8:f3:
         dd:e5:94:72:37:1b:e8:f1:cd:f9:ec:1c:dc:33:88:3b:09:5a:
         1a:de:cc:00:46:25:22:db:f2:e8:c1:4a:a3:aa:a2:b8:6c:d1:
         96:ba:bb:0d:96:14:42:9b:a4:e8:b6:70:6b:7a:98:bb:27:1d:
         b9:6a:b4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:48:55 2026 by rpki-client