Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/34352e3233322e3234342e302f32322d3232203d3e20323634323934.roa
File:                     34352e3233322e3234342e302f32322d3232203d3e20323634323934.roa (raw, json)
Hash identifier:          WstL2u3blAXbVI4kV4ZpbUhVMunGtVPMbXT+V5rB2jk=
Subject key identifier:   7C:4E:15:03:E2:32:70:AB:EA:F6:2A:97:D5:C0:1F:B9:F3:73:CE:97
Certificate issuer:       /CN=29E752800F8BF73453CEA055406DCC5F61330F19
Certificate serial:       6434A112C229343101436BEC59645BEEBB07DBC1
Authority key identifier: 29:E7:52:80:0F:8B:F7:34:53:CE:A0:55:40:6D:CC:5F:61:33:0F:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29E752800F8BF73453CEA055406DCC5F61330F19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/34352e3233322e3234342e302f32322d3232203d3e20323634323934.roa
Signing time:             Wed 25 Mar 2026 13:36:26 +0000
ROA not before:           Wed 25 Mar 2026 13:31:26 +0000
ROA not after:            Wed 24 Mar 2027 13:36:26 +0000
asID:                     264294
IP address blocks:        45.232.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/29E752800F8BF73453CEA055406DCC5F61330F19.crl
                          rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/29E752800F8BF73453CEA055406DCC5F61330F19.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29E752800F8BF73453CEA055406DCC5F61330F19.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 11:56:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:34:a1:12:c2:29:34:31:01:43:6b:ec:59:64:5b:ee:bb:07:db:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29E752800F8BF73453CEA055406DCC5F61330F19
        Validity
            Not Before: Mar 25 13:31:26 2026 GMT
            Not After : Mar 24 13:36:26 2027 GMT
        Subject: CN=7C4E1503E23270ABEAF62A97D5C01FB9F373CE97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f3:d9:02:f7:08:05:70:d8:46:8c:b7:40:66:
                    9b:7e:70:2d:91:7f:00:0d:44:68:7f:04:35:e8:27:
                    0d:41:e2:60:6b:cc:c0:d4:87:ad:37:fd:0c:b2:4c:
                    e3:8a:5f:54:57:dd:7b:b6:5e:b5:7d:4f:c8:d8:40:
                    58:1d:bf:41:5b:38:89:b2:8d:37:3e:e7:46:09:74:
                    47:0d:66:9a:96:2e:83:e5:27:4e:ba:85:65:d5:b1:
                    6c:e9:44:be:52:86:97:5e:69:15:8a:88:55:9a:24:
                    1c:79:a5:1f:50:9b:1e:95:5c:bb:ff:a2:5a:4a:8d:
                    28:a0:a2:f7:0b:ce:9c:d9:15:70:12:a6:65:53:1c:
                    dd:bc:81:ce:3d:b0:48:76:9d:ad:74:a7:5a:1b:97:
                    10:3a:86:67:11:81:6b:ae:19:8d:4c:66:52:e1:06:
                    8e:00:2f:5c:2d:cc:e2:85:c0:53:0d:1b:7a:fb:9e:
                    e7:6e:bf:0d:fb:d3:1b:c6:75:12:ec:32:d1:23:30:
                    cc:a9:3e:02:31:3a:40:a2:6e:1a:3e:f7:45:94:f5:
                    fe:7d:2e:4e:49:86:9e:e9:69:71:b9:10:0f:0e:cd:
                    df:46:9f:21:cc:09:6a:ab:99:b5:df:e6:4f:6b:c3:
                    7f:96:6c:99:d0:ef:c3:03:8b:d7:78:ba:ce:4f:94:
                    fb:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:4E:15:03:E2:32:70:AB:EA:F6:2A:97:D5:C0:1F:B9:F3:73:CE:97
            X509v3 Authority Key Identifier:
                keyid:29:E7:52:80:0F:8B:F7:34:53:CE:A0:55:40:6D:CC:5F:61:33:0F:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/29E752800F8BF73453CEA055406DCC5F61330F19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29E752800F8BF73453CEA055406DCC5F61330F19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/34352e3233322e3234342e302f32322d3232203d3e20323634323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:72:47:86:9e:5f:42:5d:4f:3e:ac:e8:67:fa:22:06:ed:a5:
         6d:28:6d:5a:1d:c7:a6:f0:f9:07:1e:1e:88:d1:32:21:7c:38:
         e7:87:8c:57:3b:45:08:bd:ca:ce:ed:2c:bb:78:49:17:68:f9:
         25:83:4e:52:d8:97:11:af:e7:4b:0a:5e:23:aa:e6:6f:8d:69:
         31:60:35:fa:b6:69:64:59:f4:31:34:e8:6f:21:4c:c8:c1:9e:
         d2:84:5f:34:42:11:46:4c:17:5b:33:6b:f2:fc:69:da:94:49:
         5f:b3:ea:59:30:5d:00:17:95:cd:55:59:95:a5:8e:bf:43:b0:
         2c:cc:d9:ad:0c:84:02:62:e9:cd:f8:e9:2d:b9:9b:eb:e1:a7:
         c0:79:6e:ed:35:99:9e:38:12:c5:67:95:9c:fb:9c:a4:10:d8:
         95:6f:9b:1f:b0:0b:d2:a5:69:1c:2b:72:00:11:2c:2f:b5:06:
         45:f4:08:91:90:bd:76:aa:c3:9a:c9:c0:d9:39:2b:1c:d5:51:
         51:d3:8d:1b:ac:28:19:d2:a1:d9:1a:a5:f5:43:ea:d9:7a:9e:
         96:0f:20:08:99:5d:51:9e:2d:a5:95:31:ea:c3:ff:6f:71:c1:
         3c:9d:56:f0:ef:42:aa:48:46:74:06:18:b3:0a:27:37:4e:08:
         78:33:1a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:57:48 2026 by rpki-client