Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/34352e3232392e36382e302f32322d3332203d3e20323637323232.roa
File:                     34352e3232392e36382e302f32322d3332203d3e20323637323232.roa (raw, json)
Hash identifier:          hbS0E3e8ynpXViirF0Ii3G5reF4in6ivih/Hb39MZDA=
Subject key identifier:   2B:F2:CE:1B:8A:F8:F3:C9:31:D7:E5:14:D3:5E:50:19:94:06:43:53
Certificate issuer:       /CN=21CD91C985E580029306365FB6A119DAEFE368C7
Certificate serial:       3C9F19CE10142F5FC7D0082FD0CDB323A20A954F
Authority key identifier: 21:CD:91:C9:85:E5:80:02:93:06:36:5F:B6:A1:19:DA:EF:E3:68:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CD91C985E580029306365FB6A119DAEFE368C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/34352e3232392e36382e302f32322d3332203d3e20323637323232.roa
Signing time:             Wed 18 Mar 2026 19:48:45 +0000
ROA not before:           Wed 18 Mar 2026 19:43:45 +0000
ROA not after:            Wed 17 Mar 2027 19:48:45 +0000
asID:                     267222
IP address blocks:        45.229.68.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.crl
                          rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CD91C985E580029306365FB6A119DAEFE368C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 21:14:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:9f:19:ce:10:14:2f:5f:c7:d0:08:2f:d0:cd:b3:23:a2:0a:95:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21CD91C985E580029306365FB6A119DAEFE368C7
        Validity
            Not Before: Mar 18 19:43:45 2026 GMT
            Not After : Mar 17 19:48:45 2027 GMT
        Subject: CN=2BF2CE1B8AF8F3C931D7E514D35E501994064353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:69:d8:24:c3:5f:e4:77:f0:7e:f4:8f:4d:c7:
                    a8:9b:0d:0a:8a:a4:38:b0:b8:5e:7f:a6:d7:e1:ac:
                    66:ff:7f:61:e1:78:e2:43:13:a6:a7:44:b6:e7:79:
                    fb:0b:7c:ff:fe:c1:ca:0a:1f:61:ae:9d:2b:93:06:
                    ab:7c:4e:30:0e:ea:ae:f9:28:28:58:0d:87:56:c7:
                    90:d7:4f:44:78:f4:de:1d:18:36:d5:4e:6f:4c:18:
                    d8:a7:4a:d6:c9:5f:9d:84:de:f8:d5:6e:16:02:08:
                    4c:8a:b9:1a:64:86:74:dc:b2:81:12:27:04:b8:b7:
                    8c:79:ea:d8:c1:4b:ea:b7:74:7e:62:31:ae:e0:7c:
                    b9:a3:6d:ed:ee:71:0f:d2:e5:9f:6e:7a:b5:c6:2d:
                    7a:c9:84:3a:ab:f3:5a:ae:b5:97:20:56:87:ee:0d:
                    25:94:b5:a8:d2:92:ad:0c:90:8d:7a:57:a0:26:a3:
                    65:bd:d6:6e:f9:a2:1f:f0:c3:8b:c2:bc:37:32:36:
                    e2:28:2d:71:48:63:ea:46:cb:ab:2c:8d:f1:54:1b:
                    9d:5d:e0:86:1d:b0:88:8e:50:b5:5b:d6:da:bb:db:
                    81:be:0a:06:28:cf:a8:35:51:0d:88:0e:84:fe:b3:
                    c2:01:26:f5:69:76:5f:0b:ab:b7:3f:8d:3d:62:1d:
                    32:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F2:CE:1B:8A:F8:F3:C9:31:D7:E5:14:D3:5E:50:19:94:06:43:53
            X509v3 Authority Key Identifier:
                keyid:21:CD:91:C9:85:E5:80:02:93:06:36:5F:B6:A1:19:DA:EF:E3:68:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CD91C985E580029306365FB6A119DAEFE368C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/34352e3232392e36382e302f32322d3332203d3e20323637323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:52:bf:49:af:5f:c7:7c:b0:51:bf:52:6e:59:4d:bf:1c:6c:
         53:68:0d:6c:1f:4d:b4:fc:25:65:65:cb:60:2a:d5:7f:a8:d9:
         23:5d:3e:df:d1:a4:9d:18:b7:81:be:34:9b:0d:5b:62:89:f1:
         25:2b:27:c2:7b:2c:d8:21:61:01:a8:f9:e7:39:33:2c:2f:ba:
         22:40:23:1e:80:a3:03:e0:60:53:ea:8e:15:4f:6f:77:9f:bb:
         f3:8e:aa:1c:fc:15:c9:f0:68:2d:40:c5:e3:ad:c2:d8:90:19:
         8c:50:89:7d:65:06:dd:f5:20:ba:12:d4:88:fb:68:61:57:8b:
         7c:42:dc:75:aa:b2:44:e0:dc:55:e6:46:45:50:f6:a1:0f:8f:
         7d:bb:b9:be:65:bc:fd:b3:ce:be:51:44:39:1d:c6:77:64:2c:
         7a:64:00:e4:76:a7:cc:ab:26:7b:dc:a4:43:d1:5f:37:e1:97:
         b1:f4:8a:80:44:1a:1e:15:2c:e9:9e:96:f5:3e:85:d3:d3:7a:
         5f:d0:f6:79:92:79:73:6e:91:ab:8a:2e:00:f7:7c:2c:8b:c5:
         2a:05:5f:92:40:80:9f:1c:d4:8b:b7:07:fa:af:84:d1:09:9d:
         fc:8b:b4:29:13:66:5f:3e:5e:af:ad:84:56:ae:5a:09:fb:f1:
         aa:65:10:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:38:55 2026 by rpki-client