Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/34352e3233372e32342e302f32332d3332203d3e20323638323632.roa
File:                     34352e3233372e32342e302f32332d3332203d3e20323638323632.roa (raw, json)
Hash identifier:          vArVfhgGT8R3/jx9frBmP+FJTOy42OB4PQrNLGQ5JQY=
Subject key identifier:   38:66:CD:51:23:FD:29:B7:A3:07:C2:8A:EA:0A:45:49:87:C0:86:33
Certificate issuer:       /CN=72DB29ACFB9A8FA91BA7A8A94F819DEC61A0C74B
Certificate serial:       51D969F8C590F84A14591296CF912110AF8833E0
Authority key identifier: 72:DB:29:AC:FB:9A:8F:A9:1B:A7:A8:A9:4F:81:9D:EC:61:A0:C7:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72DB29ACFB9A8FA91BA7A8A94F819DEC61A0C74B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/34352e3233372e32342e302f32332d3332203d3e20323638323632.roa
Signing time:             Mon 23 Mar 2026 13:40:04 +0000
ROA not before:           Mon 23 Mar 2026 13:35:04 +0000
ROA not after:            Mon 22 Mar 2027 13:40:04 +0000
asID:                     268262
IP address blocks:        45.237.24.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/72DB29ACFB9A8FA91BA7A8A94F819DEC61A0C74B.crl
                          rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/72DB29ACFB9A8FA91BA7A8A94F819DEC61A0C74B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72DB29ACFB9A8FA91BA7A8A94F819DEC61A0C74B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 15:33:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:d9:69:f8:c5:90:f8:4a:14:59:12:96:cf:91:21:10:af:88:33:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72DB29ACFB9A8FA91BA7A8A94F819DEC61A0C74B
        Validity
            Not Before: Mar 23 13:35:04 2026 GMT
            Not After : Mar 22 13:40:04 2027 GMT
        Subject: CN=3866CD5123FD29B7A307C28AEA0A454987C08633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:de:6a:13:c8:90:1b:d3:e2:75:2f:05:27:68:
                    de:f5:b0:4f:45:d8:27:1d:53:69:91:0d:cc:83:19:
                    2a:a0:bd:f1:b8:a8:55:ac:68:4d:64:89:4d:21:72:
                    d4:a0:fa:b2:66:05:a6:6d:9e:81:8a:3b:bd:b4:2a:
                    d2:02:2f:8c:49:ba:73:0d:63:c1:3b:5c:15:a0:76:
                    56:cf:38:2f:95:57:cc:3b:24:0e:62:44:03:43:e7:
                    7c:8a:44:2a:1e:df:b6:b0:6f:c3:e7:34:f4:85:3c:
                    73:27:26:a7:52:da:ed:c3:0d:54:65:d9:f1:88:44:
                    93:8b:bf:ac:c3:f8:3a:e1:6e:1e:db:96:26:ed:b0:
                    d5:b3:5a:b9:53:fb:7d:bf:0c:f1:8d:f2:02:28:84:
                    bd:3a:fe:07:a5:a0:b4:ea:e6:60:5c:c2:b1:84:ba:
                    d2:5e:d0:d4:ce:f6:61:90:51:98:f3:f2:a3:51:38:
                    75:e7:32:d6:c8:41:da:a8:a1:80:d4:0f:1a:06:4e:
                    56:c4:06:ec:49:42:05:e3:7e:9c:c0:fd:09:24:2a:
                    11:6d:19:c7:a9:77:b3:d6:6f:48:39:2b:ac:ed:83:
                    5c:83:fe:fd:46:ef:31:6e:7a:1a:3a:81:81:d1:ea:
                    c2:f6:64:a9:ad:b5:13:8f:47:3c:72:a1:e6:d7:4d:
                    11:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:66:CD:51:23:FD:29:B7:A3:07:C2:8A:EA:0A:45:49:87:C0:86:33
            X509v3 Authority Key Identifier:
                keyid:72:DB:29:AC:FB:9A:8F:A9:1B:A7:A8:A9:4F:81:9D:EC:61:A0:C7:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/72DB29ACFB9A8FA91BA7A8A94F819DEC61A0C74B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72DB29ACFB9A8FA91BA7A8A94F819DEC61A0C74B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/34352e3233372e32342e302f32332d3332203d3e20323638323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:65:4b:44:93:8c:b4:ac:74:e1:7f:df:0c:d3:95:94:7b:b9:
         df:4b:ba:60:b5:cd:28:ce:e7:cb:dd:23:05:e8:98:14:89:13:
         56:b1:53:3e:40:a8:2a:10:d8:aa:07:9f:2d:58:02:6e:d6:bc:
         68:0c:6a:6f:b1:37:22:0f:36:d6:49:48:0f:b5:c5:a7:c1:37:
         09:0a:49:95:cd:9e:3c:da:0e:09:01:38:52:c0:74:86:99:79:
         97:87:01:05:56:78:9d:48:46:72:ec:48:f7:08:e9:86:e2:11:
         df:b8:f6:bb:f5:37:bd:78:dc:71:08:14:ed:cf:68:0b:fb:73:
         40:97:bd:81:b8:cc:75:02:58:45:ec:2a:31:5c:37:8d:ca:e6:
         99:ab:e9:68:10:9d:d1:11:5d:64:d0:c3:45:6c:c1:c7:70:99:
         f6:ea:c8:e5:f1:be:6c:c3:f9:7f:cc:23:4c:fc:4e:fb:3b:7e:
         8a:4e:e4:a0:d9:26:e1:b4:ff:e5:fe:44:7f:34:8c:79:25:2f:
         c4:7d:39:2a:79:78:59:db:bc:0c:6d:ec:6c:17:52:ff:5f:44:
         8d:50:08:24:50:ae:38:f1:16:6c:0e:2f:81:b5:52:73:e6:99:
         c4:64:38:bf:d3:b6:fa:61:ca:8e:40:d7:5b:03:42:29:60:7a:
         68:3b:88:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:51:45 2026 by rpki-client