Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRQft5eS3acTCS4kKrMXMBcEpHTjkSiYrAd82k6T2jnq/0/34352e3137352e36302e302f32322d3234203d3e20323638383835.roa
File:                     34352e3137352e36302e302f32322d3234203d3e20323638383835.roa (raw, json)
Hash identifier:          xxZaVnQXq7k+W19sDrh8ZrubAHqKwDgk822shAw9MvI=
Subject key identifier:   83:68:9B:E8:43:76:A6:E6:06:6A:CB:EF:02:AA:6B:89:55:F2:36:73
Certificate issuer:       /CN=FAA3CA7253FF7DA2F25A4D4C953367E9662154DD
Certificate serial:       702198960E8A13BC259465BF15686CFC3ACE42E3
Authority key identifier: FA:A3:CA:72:53:FF:7D:A2:F2:5A:4D:4C:95:33:67:E9:66:21:54:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA3CA7253FF7DA2F25A4D4C953367E9662154DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRQft5eS3acTCS4kKrMXMBcEpHTjkSiYrAd82k6T2jnq/0/34352e3137352e36302e302f32322d3234203d3e20323638383835.roa
Signing time:             Thu 26 Mar 2026 12:55:23 +0000
ROA not before:           Thu 26 Mar 2026 12:50:23 +0000
ROA not after:            Thu 25 Mar 2027 12:55:23 +0000
asID:                     268885
IP address blocks:        45.175.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRQft5eS3acTCS4kKrMXMBcEpHTjkSiYrAd82k6T2jnq/0/FAA3CA7253FF7DA2F25A4D4C953367E9662154DD.crl
                          rsync://rpki-repo.registro.br/repo/BRQft5eS3acTCS4kKrMXMBcEpHTjkSiYrAd82k6T2jnq/0/FAA3CA7253FF7DA2F25A4D4C953367E9662154DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA3CA7253FF7DA2F25A4D4C953367E9662154DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 14:58:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:21:98:96:0e:8a:13:bc:25:94:65:bf:15:68:6c:fc:3a:ce:42:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAA3CA7253FF7DA2F25A4D4C953367E9662154DD
        Validity
            Not Before: Mar 26 12:50:23 2026 GMT
            Not After : Mar 25 12:55:23 2027 GMT
        Subject: CN=83689BE84376A6E6066ACBEF02AA6B8955F23673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5e:a9:45:df:30:e6:d9:5c:a1:43:17:b4:57:
                    0b:0d:bb:af:79:ab:5b:9c:73:c4:fb:81:2c:fd:94:
                    77:fb:31:5f:14:6d:08:e5:bb:d0:72:b7:9b:42:99:
                    16:de:c1:e5:b3:ca:a6:2a:85:1c:39:5d:b8:1f:76:
                    43:b5:cb:59:f3:a0:dc:13:2f:81:dd:da:06:1d:f9:
                    ed:80:2c:b6:11:a7:6a:42:30:62:de:f8:dd:01:3e:
                    e5:ca:55:df:94:f2:f0:33:cd:61:07:ab:b2:d9:f9:
                    e0:c5:f1:ea:15:e6:04:44:06:57:7d:1e:35:d2:25:
                    1c:6e:b8:66:7d:ce:c7:96:33:20:17:ca:69:72:e9:
                    d8:8e:96:4a:a7:4a:6c:ab:8a:c3:9a:f8:8e:f3:a7:
                    48:cf:fe:a3:cd:05:13:44:ae:c7:57:56:26:71:eb:
                    3a:c4:70:6a:26:dd:f8:6a:51:52:2b:81:f6:45:4a:
                    89:97:33:77:3e:67:79:52:c4:ad:b2:ca:8f:b4:d6:
                    63:14:d2:d4:8e:cf:1e:8e:68:d4:c1:7e:4a:0b:44:
                    5c:a5:09:3d:44:8c:b0:96:b8:f0:e8:88:0e:3a:50:
                    9e:0a:b6:36:10:be:04:4b:a5:41:c0:98:06:da:ec:
                    38:c1:da:92:d0:ae:c7:0c:52:e6:52:40:f3:6f:c5:
                    ca:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:68:9B:E8:43:76:A6:E6:06:6A:CB:EF:02:AA:6B:89:55:F2:36:73
            X509v3 Authority Key Identifier:
                keyid:FA:A3:CA:72:53:FF:7D:A2:F2:5A:4D:4C:95:33:67:E9:66:21:54:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRQft5eS3acTCS4kKrMXMBcEpHTjkSiYrAd82k6T2jnq/0/FAA3CA7253FF7DA2F25A4D4C953367E9662154DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA3CA7253FF7DA2F25A4D4C953367E9662154DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRQft5eS3acTCS4kKrMXMBcEpHTjkSiYrAd82k6T2jnq/0/34352e3137352e36302e302f32322d3234203d3e20323638383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:e5:b9:99:72:1f:93:c0:04:2f:37:9f:bc:8b:4e:87:b8:80:
         4a:ea:2a:69:35:7e:19:fd:8a:5d:73:b4:95:1b:1b:02:e8:90:
         f5:77:47:f2:af:2d:9f:c6:27:e7:1a:40:46:a7:0b:8e:d2:7f:
         33:e0:1b:b4:53:c9:0a:d2:97:af:ae:a9:4e:db:43:10:0d:cd:
         0b:bf:fa:d1:32:5b:ab:94:5b:d3:ce:89:f3:28:c9:df:98:54:
         6a:9e:be:8e:e5:9d:b5:e2:76:fc:e3:15:e4:6d:51:d5:c6:8c:
         86:3c:54:cb:4a:40:92:b0:8e:b1:a4:fa:68:2a:69:35:11:1c:
         44:a2:e3:64:9d:92:82:b1:82:84:56:1c:36:9b:70:16:ae:a4:
         5c:69:d2:bf:2d:3a:e9:16:c8:30:c2:16:f3:84:45:26:55:51:
         74:3f:14:be:fa:f8:70:fb:57:75:d3:1d:5d:81:05:41:e1:fd:
         2c:2b:94:88:fd:4f:58:2d:e4:c6:87:8d:e4:9e:48:59:cb:8b:
         4d:cb:23:ab:6d:d5:6d:d5:c4:e4:9a:17:95:c5:ec:df:bd:8e:
         59:1e:92:d4:ea:db:f4:40:aa:98:8f:3f:0e:56:ae:13:93:ed:
         7c:d8:17:b3:2f:15:a0:ae:80:7c:36:9e:4c:23:13:03:d6:95:
         e1:8c:50:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:57:39 2026 by rpki-client