Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/34352e3137322e3136382e302f32322d3332203d3e20323638373836.roa
File:                     34352e3137322e3136382e302f32322d3332203d3e20323638373836.roa (raw, json)
Hash identifier:          0yG7J4DiVrfERM6tYMRkIJn+S7u2tvTsAO2brA+VAuk=
Subject key identifier:   D7:49:97:1F:A8:E6:C3:73:D5:93:64:7B:8E:FC:C0:7C:7B:C4:2E:28
Certificate issuer:       /CN=2EE47F810421AADFC75A240BE718278F1FEE7E4B
Certificate serial:       4A7F73645C970493F2422026DD9CF836B85D43BB
Authority key identifier: 2E:E4:7F:81:04:21:AA:DF:C7:5A:24:0B:E7:18:27:8F:1F:EE:7E:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EE47F810421AADFC75A240BE718278F1FEE7E4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/34352e3137322e3136382e302f32322d3332203d3e20323638373836.roa
Signing time:             Tue 10 Mar 2026 20:54:36 +0000
ROA not before:           Tue 10 Mar 2026 20:49:36 +0000
ROA not after:            Tue 09 Mar 2027 20:54:36 +0000
asID:                     268786
IP address blocks:        45.172.168.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/2EE47F810421AADFC75A240BE718278F1FEE7E4B.crl
                          rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/2EE47F810421AADFC75A240BE718278F1FEE7E4B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EE47F810421AADFC75A240BE718278F1FEE7E4B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 22:45:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:7f:73:64:5c:97:04:93:f2:42:20:26:dd:9c:f8:36:b8:5d:43:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EE47F810421AADFC75A240BE718278F1FEE7E4B
        Validity
            Not Before: Mar 10 20:49:36 2026 GMT
            Not After : Mar  9 20:54:36 2027 GMT
        Subject: CN=D749971FA8E6C373D593647B8EFCC07C7BC42E28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:62:55:87:de:a8:f0:a3:e8:df:92:b0:0e:5f:
                    2d:66:e5:9c:82:f1:8c:68:a4:b3:be:ea:bb:41:6b:
                    c7:03:cc:f7:99:34:70:a0:1d:13:80:00:51:12:b9:
                    e8:0d:2b:ff:68:44:14:81:98:ef:e8:98:f6:e0:8c:
                    04:c8:3b:55:47:5e:ab:56:85:d6:33:0b:10:1b:1f:
                    3d:d2:34:32:b7:56:02:e7:46:fa:e0:4b:d9:09:1f:
                    17:d6:71:70:86:0b:66:af:e6:a9:48:c1:13:7a:1d:
                    cf:67:b4:47:59:61:06:63:93:d0:7e:75:b3:92:3f:
                    b7:9f:1e:db:b3:87:5d:7b:d5:8d:89:4d:21:90:c8:
                    91:cc:51:8a:0d:6f:19:e8:e8:dc:7c:0e:68:21:c1:
                    83:f1:bd:c0:28:f1:cf:bd:4a:28:8f:33:80:c8:db:
                    11:5f:ba:41:7b:8c:41:9a:1c:a3:43:75:23:30:4c:
                    62:f2:1c:10:f3:2e:24:35:77:6c:69:95:8c:72:55:
                    08:8c:3d:de:c5:81:f8:09:35:6e:f8:9d:5c:3c:e6:
                    51:17:49:fb:09:3b:a0:60:cc:93:a6:d1:2c:7a:fd:
                    35:ad:81:c8:a4:61:28:3a:c5:d4:e1:a6:77:cf:11:
                    46:d5:12:1d:0c:cc:a1:5c:d5:74:6b:23:5e:71:3f:
                    f4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:49:97:1F:A8:E6:C3:73:D5:93:64:7B:8E:FC:C0:7C:7B:C4:2E:28
            X509v3 Authority Key Identifier:
                keyid:2E:E4:7F:81:04:21:AA:DF:C7:5A:24:0B:E7:18:27:8F:1F:EE:7E:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/2EE47F810421AADFC75A240BE718278F1FEE7E4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EE47F810421AADFC75A240BE718278F1FEE7E4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/34352e3137322e3136382e302f32322d3332203d3e20323638373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:3a:24:2c:69:6e:6a:70:96:81:4d:ec:2b:67:e0:40:79:97:
         1f:30:72:09:9c:1d:3a:75:6b:7d:d8:41:81:9b:c3:8c:2f:6e:
         67:74:6d:a1:65:c7:1d:d6:57:73:10:bb:f8:6e:d9:58:fb:29:
         54:31:bb:56:79:15:9c:fe:6b:d2:76:7f:53:c7:90:3c:6a:7b:
         84:5c:c0:8b:7a:d4:79:fd:2f:66:84:de:54:cd:23:6e:50:9b:
         72:54:4e:70:2d:bf:ab:39:45:53:3b:1c:60:1c:dc:fd:ab:1e:
         c5:d6:48:1a:94:57:d0:80:65:2c:ab:36:4c:35:6d:ef:f1:20:
         07:44:f9:dd:05:b5:56:e8:d9:55:a8:f6:5c:ae:dd:45:62:2a:
         c0:6e:12:67:10:94:87:ba:f2:d0:fd:5f:0f:ac:0c:77:b5:86:
         e6:cd:c7:70:08:8b:09:04:6f:d8:06:9a:18:54:7f:62:f1:6d:
         80:d4:e9:89:47:34:a7:6f:43:6c:0a:df:bf:79:5e:25:9c:72:
         21:df:2f:66:f8:98:6a:84:71:e9:b8:c4:6c:71:40:7a:45:ce:
         60:1f:9e:0d:e6:fa:cb:36:e1:47:35:f0:ca:17:af:c6:d1:55:
         89:f1:91:91:d6:58:bf:d8:b8:f8:8d:3f:dd:45:83:77:3c:1c:
         62:87:26:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:21:07 2026 by rpki-client