Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/34352e37312e3132392e302f32342d3234203d3e20323637363038.roa
File:                     34352e37312e3132392e302f32342d3234203d3e20323637363038.roa (raw, json)
Hash identifier:          WOu9SSBrBGyop2XoZBz0ill8+1ALAut471+VWjVH1Mg=
Subject key identifier:   0A:BE:E3:F4:7E:D5:F9:18:CA:52:4D:DC:7E:A8:8E:A0:2D:A0:71:09
Certificate issuer:       /CN=371070DB3AF9489AC044A01894F7F3DEA5016C1F
Certificate serial:       4B37BCF457A23119A5E6BF7D62A5E3C7365FD1A1
Authority key identifier: 37:10:70:DB:3A:F9:48:9A:C0:44:A0:18:94:F7:F3:DE:A5:01:6C:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/34352e37312e3132392e302f32342d3234203d3e20323637363038.roa
Signing time:             Sat 02 May 2026 00:03:20 +0000
ROA not before:           Fri 01 May 2026 23:58:20 +0000
ROA not after:            Sat 01 May 2027 00:03:20 +0000
asID:                     267608
IP address blocks:        45.71.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.crl
                          rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 11:16:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:37:bc:f4:57:a2:31:19:a5:e6:bf:7d:62:a5:e3:c7:36:5f:d1:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=371070DB3AF9489AC044A01894F7F3DEA5016C1F
        Validity
            Not Before: May  1 23:58:20 2026 GMT
            Not After : May  1 00:03:20 2027 GMT
        Subject: CN=0ABEE3F47ED5F918CA524DDC7EA88EA02DA07109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0a:d0:5e:01:75:ff:47:2c:29:3b:63:89:2a:
                    4f:71:1b:25:45:9f:12:1c:61:0d:1c:2b:a3:33:cd:
                    f0:7a:8f:2a:b8:86:ec:a0:4c:8e:85:cd:d5:61:d3:
                    c6:30:bd:a0:31:6f:67:d4:77:a9:b1:48:6e:66:9b:
                    08:e8:eb:c1:9e:9b:f8:60:43:ce:98:43:2c:78:79:
                    7d:6f:f1:0e:a3:ea:98:53:d8:fa:3b:51:bb:c0:a6:
                    b4:0c:0a:5b:4b:07:0b:5a:61:18:06:eb:b9:b6:21:
                    a1:2e:43:65:28:a3:9e:05:7b:e1:d7:72:26:9f:f8:
                    1a:77:e5:59:68:3a:8d:f7:4f:60:16:55:18:ef:9c:
                    39:90:ae:79:85:5c:90:e3:39:60:46:06:e6:d7:ef:
                    b5:dc:17:84:8b:92:7f:fd:f7:39:17:69:eb:e5:b9:
                    bc:a9:c6:86:fd:1e:16:b2:f6:90:99:c9:a1:a8:fe:
                    93:ef:7a:87:aa:a3:ce:49:4a:4a:19:c9:70:71:1f:
                    5d:b2:7b:fe:c1:99:89:03:00:cc:95:d7:cd:02:8d:
                    fe:59:05:07:5c:b9:88:92:28:ac:77:91:48:23:b9:
                    84:65:b2:80:f5:13:cb:54:42:df:b1:89:37:b7:3f:
                    db:a3:22:a4:85:64:14:5f:e7:8a:2b:bf:c4:25:a6:
                    99:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:BE:E3:F4:7E:D5:F9:18:CA:52:4D:DC:7E:A8:8E:A0:2D:A0:71:09
            X509v3 Authority Key Identifier:
                keyid:37:10:70:DB:3A:F9:48:9A:C0:44:A0:18:94:F7:F3:DE:A5:01:6C:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/34352e37312e3132392e302f32342d3234203d3e20323637363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:2b:90:68:c9:47:e8:56:5e:00:5c:aa:87:12:96:fc:98:c3:
         ac:f3:56:c4:25:cf:d9:0e:22:28:e8:e7:32:e6:3a:57:b2:b9:
         cc:55:85:07:f7:57:3e:36:82:9c:0c:ea:67:e7:a2:9e:41:02:
         cb:42:31:2c:97:6e:4a:c6:f4:13:9d:01:1b:0e:1c:53:93:57:
         ea:cd:dd:21:0d:c5:cb:bd:b4:4e:ec:cd:76:1f:d8:08:9f:6f:
         bf:e0:c4:d1:15:b1:89:96:94:6e:ff:7f:e1:b2:a0:c5:88:8f:
         c7:68:b1:8f:61:c2:05:cc:17:95:b6:cd:3b:e6:81:8c:95:df:
         ac:2d:aa:e0:20:16:75:26:93:2a:8d:da:54:b6:ca:2e:32:74:
         48:08:d9:5d:2c:5d:00:9c:5f:ba:81:76:8b:94:a0:5f:d4:21:
         f7:a2:7e:8b:0b:ef:e5:1c:f4:b9:ad:6f:43:0a:2e:fc:0a:11:
         ce:90:06:7e:51:31:d7:e5:6b:45:84:ea:6a:62:b3:da:37:4e:
         76:b2:09:81:01:c3:58:7e:22:e8:e8:16:27:84:d3:52:ea:c7:
         af:da:2a:e0:3e:32:d5:ac:5b:03:cc:30:51:cf:5a:76:e2:b8:
         f8:5a:a0:58:a7:47:7a:73:0b:2c:87:63:83:31:85:fb:23:7b:
         da:43:48:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:43:57 2026 by rpki-client