Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/0/34352e3137372e3134382e302f32322d3332203d3e20323638393938.roa
File:                     34352e3137372e3134382e302f32322d3332203d3e20323638393938.roa (raw, json)
Hash identifier:          4qXYrjcKjTG9Ivf1N1QRVSlYio3r5SQTNPAmLc2i2oE=
Subject key identifier:   D8:68:8E:EE:8D:3A:2E:2E:A5:B6:57:F8:32:5D:55:80:B7:D9:B1:1E
Certificate issuer:       /CN=79A9335AC26621BB44F4A22AE0CC73340CF1609E
Certificate serial:       2409348FE92148784E1BB71DC20C0822FD66E19D
Authority key identifier: 79:A9:33:5A:C2:66:21:BB:44:F4:A2:2A:E0:CC:73:34:0C:F1:60:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79A9335AC26621BB44F4A22AE0CC73340CF1609E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/0/34352e3137372e3134382e302f32322d3332203d3e20323638393938.roa
Signing time:             Tue 24 Mar 2026 15:10:26 +0000
ROA not before:           Tue 24 Mar 2026 15:05:26 +0000
ROA not after:            Tue 23 Mar 2027 15:10:26 +0000
asID:                     268998
IP address blocks:        45.177.148.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/0/79A9335AC26621BB44F4A22AE0CC73340CF1609E.crl
                          rsync://rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/0/79A9335AC26621BB44F4A22AE0CC73340CF1609E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79A9335AC26621BB44F4A22AE0CC73340CF1609E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 12:30:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:09:34:8f:e9:21:48:78:4e:1b:b7:1d:c2:0c:08:22:fd:66:e1:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79A9335AC26621BB44F4A22AE0CC73340CF1609E
        Validity
            Not Before: Mar 24 15:05:26 2026 GMT
            Not After : Mar 23 15:10:26 2027 GMT
        Subject: CN=D8688EEE8D3A2E2EA5B657F8325D5580B7D9B11E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f5:d7:55:16:2a:81:66:8e:f9:21:cd:80:5a:
                    99:5a:7a:3e:8f:1b:ef:c5:a6:74:9a:46:b4:69:48:
                    5f:1a:f6:8c:29:3e:28:ec:24:e0:6b:d3:09:f8:ad:
                    b4:95:ab:cb:7c:3a:a7:24:c1:07:fe:25:31:62:0f:
                    6e:49:5e:59:98:2d:39:cc:9e:1c:96:00:58:7b:ef:
                    78:ac:b8:1a:4e:9c:0b:32:93:24:03:28:34:2f:c0:
                    fa:fe:fb:8f:ff:4c:0f:c2:05:42:6f:f8:34:9a:b3:
                    a2:67:0b:c4:7d:04:6b:47:99:f0:da:2b:15:74:4b:
                    74:e2:e0:f4:71:30:36:a0:55:6d:1f:54:9d:d6:d9:
                    b1:9c:e9:96:fb:b4:cf:36:3c:a3:dd:71:11:ba:0b:
                    5d:10:df:94:85:e1:4d:11:bf:c3:e0:b7:70:31:3e:
                    a1:4e:35:29:9e:bf:d1:29:42:ad:d9:ca:49:14:0a:
                    50:8e:32:b9:c9:8e:50:16:32:d1:8e:58:db:aa:04:
                    89:39:35:8b:d4:c4:6f:41:76:89:0f:5c:c1:0d:b2:
                    10:66:10:1d:43:86:54:6b:76:62:c4:6c:db:3c:5d:
                    73:18:c2:85:00:c4:51:3a:3b:5a:ec:fb:67:91:3f:
                    76:b7:a3:0d:de:98:82:67:16:a9:97:02:e9:ad:b7:
                    57:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:68:8E:EE:8D:3A:2E:2E:A5:B6:57:F8:32:5D:55:80:B7:D9:B1:1E
            X509v3 Authority Key Identifier:
                keyid:79:A9:33:5A:C2:66:21:BB:44:F4:A2:2A:E0:CC:73:34:0C:F1:60:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/0/79A9335AC26621BB44F4A22AE0CC73340CF1609E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79A9335AC26621BB44F4A22AE0CC73340CF1609E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/0/34352e3137372e3134382e302f32322d3332203d3e20323638393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:c4:86:87:74:ab:46:98:80:df:07:35:b6:82:f6:c8:65:e7:
         54:c6:d1:bc:bf:1d:f4:c8:6b:14:ca:99:2f:69:7a:3d:f8:fa:
         c5:98:ec:c7:9e:93:04:d1:be:9d:3a:93:97:29:5e:84:e3:c1:
         0a:41:cd:8e:e8:18:02:08:91:ac:80:75:82:cf:aa:c1:f1:55:
         d4:8f:0f:93:58:fb:e8:36:c3:d6:23:d0:de:84:e4:85:a8:f0:
         8b:ee:1c:51:b7:47:be:33:2e:e1:45:d4:05:a6:69:bf:8a:56:
         85:ac:73:a3:c1:f3:6e:72:d6:6f:4c:08:b4:a7:b1:5c:ea:06:
         e4:c6:0a:8c:03:c2:f8:58:2c:55:60:9e:ef:29:bb:64:d6:9a:
         37:d1:6f:6c:bb:de:70:50:e0:3e:d8:c7:10:37:1c:c0:9f:77:
         60:e1:0e:c1:22:7b:32:3b:c0:ee:1a:65:9d:43:9d:73:0a:f7:
         38:cd:62:1e:48:93:81:f4:53:f1:1a:59:86:2b:95:0c:00:7f:
         16:93:44:77:50:e6:0e:b8:da:9b:e7:83:8d:cf:99:8b:23:d3:
         27:24:83:12:70:9e:c2:df:77:17:b0:17:d2:1a:fc:00:3e:1e:
         64:2e:89:63:49:44:ef:2e:8c:1d:f0:dc:a1:8b:55:e8:47:87:
         d3:a1:29:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:59:37 2026 by rpki-client