Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/34352e3136392e32372e302f32342d3234203d3e20323638303931.roa
File:                     34352e3136392e32372e302f32342d3234203d3e20323638303931.roa (raw, json)
Hash identifier:          HPyGDUJshVZ2w8Q/RqS/a2MXiFmWXzv+vWTz8Ql7OOg=
Subject key identifier:   A5:9E:7B:D0:9B:2F:76:9F:31:1E:C6:8D:8A:B6:D0:A5:9B:30:C4:37
Certificate issuer:       /CN=82B662DCBE7111D6F4E37719D59337DE50CBAD5D
Certificate serial:       23A60242E49F345B9CD0A72E271C926334F146F0
Authority key identifier: 82:B6:62:DC:BE:71:11:D6:F4:E3:77:19:D5:93:37:DE:50:CB:AD:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82B662DCBE7111D6F4E37719D59337DE50CBAD5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/34352e3136392e32372e302f32342d3234203d3e20323638303931.roa
Signing time:             Wed 29 Apr 2026 01:23:14 +0000
ROA not before:           Wed 29 Apr 2026 01:18:14 +0000
ROA not after:            Wed 28 Apr 2027 01:23:14 +0000
asID:                     268091
IP address blocks:        45.169.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/82B662DCBE7111D6F4E37719D59337DE50CBAD5D.crl
                          rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/82B662DCBE7111D6F4E37719D59337DE50CBAD5D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82B662DCBE7111D6F4E37719D59337DE50CBAD5D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 02:55:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:a6:02:42:e4:9f:34:5b:9c:d0:a7:2e:27:1c:92:63:34:f1:46:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82B662DCBE7111D6F4E37719D59337DE50CBAD5D
        Validity
            Not Before: Apr 29 01:18:14 2026 GMT
            Not After : Apr 28 01:23:14 2027 GMT
        Subject: CN=A59E7BD09B2F769F311EC68D8AB6D0A59B30C437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b9:24:0f:89:49:fa:68:3a:03:c7:4f:41:3a:
                    10:f6:ee:22:f6:61:e8:c1:01:95:7f:d0:53:ff:d4:
                    a0:15:b4:e4:58:5d:fb:8e:28:56:ed:96:08:92:6d:
                    09:a7:0e:0e:b4:04:90:1d:a9:d7:1b:e1:69:01:30:
                    1b:4e:1a:23:f9:0f:8a:4a:13:cd:29:fa:13:64:22:
                    3c:b6:7f:56:86:7d:c0:24:ed:f4:b7:b4:92:bd:82:
                    20:10:b3:4f:f5:ea:87:9e:96:60:17:f6:d7:f8:30:
                    a8:2f:ff:94:9c:88:2c:34:02:67:13:da:e8:ab:ee:
                    94:d4:f7:54:76:04:d1:42:47:81:25:93:54:cc:8d:
                    7d:1e:a8:7b:b0:86:9f:e1:f2:4c:be:45:b6:47:61:
                    e2:e1:6c:2e:83:bf:1f:ee:03:0c:5b:0d:fc:3c:a7:
                    94:51:89:5c:96:17:5d:2a:cc:2a:9f:1a:56:29:43:
                    da:ab:d6:89:65:b7:8c:46:f9:e9:71:1c:34:8b:bc:
                    fc:7d:ca:32:85:33:63:f1:20:77:2b:73:0d:05:75:
                    29:fe:41:eb:bc:af:50:ec:f4:d2:b1:30:19:11:b6:
                    53:71:7d:77:b6:9d:f5:ad:77:09:d7:6f:4b:37:14:
                    42:86:a4:c1:ce:39:57:81:ce:9c:d4:7f:98:ab:80:
                    ea:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:9E:7B:D0:9B:2F:76:9F:31:1E:C6:8D:8A:B6:D0:A5:9B:30:C4:37
            X509v3 Authority Key Identifier:
                keyid:82:B6:62:DC:BE:71:11:D6:F4:E3:77:19:D5:93:37:DE:50:CB:AD:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/82B662DCBE7111D6F4E37719D59337DE50CBAD5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82B662DCBE7111D6F4E37719D59337DE50CBAD5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/34352e3136392e32372e302f32342d3234203d3e20323638303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:1a:a9:05:65:a3:5a:ea:a4:ab:95:0c:0d:02:98:58:71:b9:
         52:10:c8:6f:c8:15:de:20:78:b4:e2:c5:e6:f5:f0:c4:51:d1:
         11:2b:95:7c:fa:56:11:5c:ba:93:37:38:b0:98:42:0b:f7:3a:
         67:2d:b4:7e:30:a6:27:e8:3b:d7:ec:1d:88:eb:04:9a:08:f1:
         3f:24:5a:4e:29:ad:96:fe:41:49:f3:a1:ee:a9:ed:1c:88:68:
         ac:40:62:39:e9:f0:68:16:fc:a6:73:b1:46:2a:89:3c:cd:8c:
         37:34:de:c7:a8:b7:7f:68:85:2f:c2:82:91:2a:02:05:fb:c8:
         6f:2f:86:b9:d4:17:0f:9c:cd:29:72:c3:ca:5e:be:ac:7f:e1:
         83:57:d6:25:a9:e5:d0:94:09:83:00:1b:98:38:1f:2c:8f:55:
         39:86:09:db:60:83:56:c5:2f:5c:b4:2e:b6:cb:72:77:fd:a1:
         1e:89:70:03:34:8d:7e:59:37:24:e1:82:d7:9d:ce:cb:c3:df:
         dc:15:fa:af:04:6c:91:69:75:93:b9:9f:d0:1e:cd:be:d8:0f:
         1e:da:9b:de:e7:99:3e:f3:bf:14:54:96:69:b2:e1:dc:f2:60:
         40:0e:f0:48:9f:19:f9:6d:97:3b:5b:9a:6b:3c:66:ca:bc:8c:
         d6:52:72:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:06:44 2026 by rpki-client