Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/34352e3233352e3233362e302f32322d3234203d3e20323638323138.roa
File:                     34352e3233352e3233362e302f32322d3234203d3e20323638323138.roa (raw, json)
Hash identifier:          Ns6yup80Fi2ayxRwVUdSS4aFwNSUxJuXiRwttYdduFs=
Subject key identifier:   D6:F9:A7:BA:31:AF:D6:6B:48:B5:D5:6B:E2:3A:67:42:A7:2D:A5:C1
Certificate issuer:       /CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
Certificate serial:       06DB8586F3FB7F18E5E813B37D21CD3D5F2577B2
Authority key identifier: 02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/34352e3233352e3233362e302f32322d3234203d3e20323638323138.roa
Signing time:             Tue 21 Apr 2026 04:38:02 +0000
ROA not before:           Tue 21 Apr 2026 04:33:02 +0000
ROA not after:            Tue 20 Apr 2027 04:38:02 +0000
asID:                     268218
IP address blocks:        45.235.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl
                          rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 18:36:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:db:85:86:f3:fb:7f:18:e5:e8:13:b3:7d:21:cd:3d:5f:25:77:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
        Validity
            Not Before: Apr 21 04:33:02 2026 GMT
            Not After : Apr 20 04:38:02 2027 GMT
        Subject: CN=D6F9A7BA31AFD66B48B5D56BE23A6742A72DA5C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e0:3e:22:e5:2c:50:ec:af:6a:54:8d:52:53:
                    9a:aa:a5:3f:15:56:41:09:9e:aa:a0:00:bd:5e:ae:
                    13:53:22:97:50:ba:ac:e8:c6:9d:ee:39:36:c8:44:
                    a9:b8:b4:24:aa:77:95:32:ae:ca:e4:37:ba:d2:89:
                    ca:f4:d6:5c:65:8e:6b:87:fa:52:de:1f:dc:b1:b1:
                    ee:08:7e:26:70:f7:41:05:09:31:1a:cf:8e:92:85:
                    42:69:eb:d5:a9:b3:e4:9f:c9:4f:95:0b:a1:1b:9d:
                    34:b9:f0:4e:07:9f:0d:62:f9:19:76:58:ea:24:0a:
                    4c:d7:2b:b5:b6:0f:f6:91:92:d5:3f:6a:6c:33:11:
                    63:4d:34:d9:80:a2:4c:f8:1f:5e:a2:b8:0e:fd:d8:
                    57:f3:1f:6f:14:bf:98:f0:9f:fe:7a:a0:ec:92:bf:
                    81:c4:5b:15:06:6e:2c:d2:14:3b:50:be:48:e8:f6:
                    3b:26:16:db:a2:ee:b1:18:70:96:e5:34:25:dc:30:
                    3d:d2:93:f8:89:67:cb:76:8b:78:37:6b:c1:e7:42:
                    61:04:99:1c:2a:a9:0c:e1:f3:35:67:d2:4f:b5:6a:
                    34:d8:aa:ec:58:22:58:31:74:d4:48:11:9d:9f:a7:
                    db:3f:65:32:67:0d:24:df:9a:3c:41:9e:ee:30:0c:
                    2d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F9:A7:BA:31:AF:D6:6B:48:B5:D5:6B:E2:3A:67:42:A7:2D:A5:C1
            X509v3 Authority Key Identifier:
                keyid:02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/34352e3233352e3233362e302f32322d3234203d3e20323638323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:da:66:9f:36:e6:fd:40:8b:41:f0:5c:0f:90:dd:f2:d6:69:
         ae:9d:c3:de:fb:66:51:02:0f:0a:a3:f7:9a:3c:7f:7f:10:96:
         76:41:f8:f8:be:e1:c1:cc:be:04:40:fd:cb:2c:10:88:57:c7:
         8c:0b:99:b5:ea:96:3a:8e:98:ae:6f:13:fe:47:7a:7f:bb:17:
         38:93:bf:44:4e:82:b2:31:86:5b:ce:50:39:74:a7:9a:53:ef:
         c7:f5:98:6a:ef:76:98:f4:e7:f4:91:bd:a3:33:9d:53:41:d4:
         fa:e0:1a:36:2f:80:a7:04:ad:91:cf:39:82:43:00:6b:73:b5:
         5b:2f:2b:82:6a:be:6d:81:07:be:c5:76:96:8c:cb:ad:4e:ab:
         e1:37:06:c7:ce:d0:50:7e:11:7e:c0:51:fd:c7:6d:bf:25:50:
         46:0a:a7:b5:46:4f:a9:42:44:85:49:bb:af:47:7d:92:a4:61:
         41:9f:29:ee:b5:2b:ce:46:2a:5d:07:48:fc:3b:eb:04:d9:45:
         67:59:b6:f0:da:88:7e:c3:97:5c:b8:62:b7:8a:7f:d3:bc:f2:
         bc:5d:01:70:cb:c7:1e:4b:50:24:b2:da:45:8c:1a:f4:dc:7a:
         b1:b8:4a:df:df:eb:39:a8:96:9e:ef:7c:75:51:25:49:71:4c:
         c3:d5:e6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:55:52 2026 by rpki-client