Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/3137302e3233332e37362e302f32322d3332203d3e20323633343935.roa
File:                     3137302e3233332e37362e302f32322d3332203d3e20323633343935.roa (raw, json)
Hash identifier:          giVLep1PTgSWw0gzlIWibd5u3T+K/oxaRedSTsxg/JI=
Subject key identifier:   42:1F:14:A1:DF:2D:E6:0E:88:00:E2:98:2F:2D:7A:21:CE:9B:C6:AC
Certificate issuer:       /CN=145465E5D0E267A3C7581F7C83C130C002FEA01E
Certificate serial:       288BC70A790DC8C22B59CED8536CD996010CA5EE
Authority key identifier: 14:54:65:E5:D0:E2:67:A3:C7:58:1F:7C:83:C1:30:C0:02:FE:A0:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/145465E5D0E267A3C7581F7C83C130C002FEA01E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/3137302e3233332e37362e302f32322d3332203d3e20323633343935.roa
Signing time:             Thu 19 Mar 2026 17:43:03 +0000
ROA not before:           Thu 19 Mar 2026 17:38:03 +0000
ROA not after:            Thu 18 Mar 2027 17:43:03 +0000
asID:                     263495
IP address blocks:        170.233.76.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/145465E5D0E267A3C7581F7C83C130C002FEA01E.crl
                          rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/145465E5D0E267A3C7581F7C83C130C002FEA01E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/145465E5D0E267A3C7581F7C83C130C002FEA01E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 01:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:8b:c7:0a:79:0d:c8:c2:2b:59:ce:d8:53:6c:d9:96:01:0c:a5:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=145465E5D0E267A3C7581F7C83C130C002FEA01E
        Validity
            Not Before: Mar 19 17:38:03 2026 GMT
            Not After : Mar 18 17:43:03 2027 GMT
        Subject: CN=421F14A1DF2DE60E8800E2982F2D7A21CE9BC6AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:93:38:e0:05:94:19:06:8d:44:e1:4b:cc:d3:
                    b7:1c:4f:54:7f:13:ed:ac:86:cf:7f:ac:f3:b0:c5:
                    39:c5:42:b0:be:95:78:57:5a:79:56:e0:15:de:1c:
                    5c:74:aa:ad:b4:e6:9a:27:33:cb:91:5e:af:ab:cc:
                    91:b5:7e:f2:32:5c:88:24:6f:d7:c7:a1:22:b5:33:
                    58:a8:e8:32:6f:13:88:cf:21:eb:27:5c:14:2f:bb:
                    d6:03:04:f8:27:dc:ae:c9:7c:b6:ca:50:57:91:a4:
                    28:ec:03:95:d9:3f:3d:ee:97:db:2a:54:eb:2d:32:
                    ed:cf:16:bd:95:b5:cc:a3:7e:d9:ea:7e:13:25:28:
                    d5:bf:eb:08:68:74:bc:a9:74:2a:bf:9a:90:01:4f:
                    d1:b3:ad:23:c3:b5:e2:42:dc:44:59:c3:da:79:6d:
                    b8:10:f7:ad:0d:6f:f3:41:47:18:bc:16:dc:a1:25:
                    29:17:a9:49:5d:7b:f4:69:6f:eb:b5:b5:98:22:34:
                    8d:61:9f:b1:6a:50:98:ad:a9:c0:72:d7:18:12:c5:
                    3b:48:24:7d:0f:5b:95:2f:21:a9:33:29:fd:00:05:
                    e7:2d:36:90:24:2e:3c:ec:01:9e:1a:d3:14:d8:f8:
                    a1:9c:04:1b:81:b2:ba:9e:c3:9e:93:e3:d8:a8:81:
                    8b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:1F:14:A1:DF:2D:E6:0E:88:00:E2:98:2F:2D:7A:21:CE:9B:C6:AC
            X509v3 Authority Key Identifier:
                keyid:14:54:65:E5:D0:E2:67:A3:C7:58:1F:7C:83:C1:30:C0:02:FE:A0:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/145465E5D0E267A3C7581F7C83C130C002FEA01E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/145465E5D0E267A3C7581F7C83C130C002FEA01E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/3137302e3233332e37362e302f32322d3332203d3e20323633343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:ae:ea:c4:36:be:96:7c:a0:9c:78:2a:1d:a2:1f:25:e7:f4:
         12:86:30:c7:4b:af:91:90:41:ac:d5:41:88:df:56:6f:70:62:
         d9:94:00:93:33:0f:9d:94:72:9a:95:be:1a:ad:ed:4b:45:4d:
         4c:12:9f:f9:fc:da:59:44:6b:15:fd:fd:41:a7:05:80:87:49:
         b5:10:2d:a3:b2:44:61:a7:99:02:f6:d9:9e:a9:68:a3:91:3a:
         51:4c:cb:f9:f5:b2:44:5a:2d:87:28:b3:2d:89:19:e4:85:ef:
         3e:5d:e9:29:f2:ac:a9:de:77:6d:5a:bd:9f:2d:1d:df:36:46:
         58:d5:79:77:ae:47:ee:e7:da:8a:6c:f9:15:40:af:19:74:9d:
         9e:09:0a:95:72:90:ca:37:33:8c:cf:e5:e9:fc:d4:ec:73:c6:
         fa:22:e5:62:9d:0a:53:a0:c4:be:35:8c:f3:cb:f6:d8:4e:df:
         4a:56:6e:a3:93:db:bf:2f:e1:4b:53:e6:bb:3d:7b:33:fd:47:
         ce:fa:20:15:a0:3a:41:7c:c7:f1:07:8e:f9:02:3a:cb:4d:9f:
         89:57:1e:f4:59:fd:44:58:7c:43:c4:3f:95:c9:35:49:11:f1:
         8e:34:36:df:2a:df:22:e1:b9:56:44:05:13:d0:0f:95:50:c5:
         bc:a2:ca:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:01:59 2026 by rpki-client