Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DCzugT1fx6Gdcm4H8CV3vCuuVmh3CEPTCQomYkE2tUa1/0/34352e3233322e37302e302f32342d3234203d3e20323637323530.roa
File:                     34352e3233322e37302e302f32342d3234203d3e20323637323530.roa (raw, json)
Hash identifier:          BoR5CpTz0lwaeiRlckqhStAm2//yrMauc6k08Fx9TPU=
Subject key identifier:   42:0D:CC:E9:FE:E3:6F:0C:C4:BB:4E:94:75:9B:A7:30:33:7B:4E:D0
Certificate issuer:       /CN=C1912018C110A24C0048F831DD489DB1483ACB47
Certificate serial:       3823948839FDA2DEFA324AA7787534C0A43782BA
Authority key identifier: C1:91:20:18:C1:10:A2:4C:00:48:F8:31:DD:48:9D:B1:48:3A:CB:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1912018C110A24C0048F831DD489DB1483ACB47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DCzugT1fx6Gdcm4H8CV3vCuuVmh3CEPTCQomYkE2tUa1/0/34352e3233322e37302e302f32342d3234203d3e20323637323530.roa
Signing time:             Mon 23 Mar 2026 12:08:51 +0000
ROA not before:           Mon 23 Mar 2026 12:03:51 +0000
ROA not after:            Mon 22 Mar 2027 12:08:51 +0000
asID:                     267250
IP address blocks:        45.232.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DCzugT1fx6Gdcm4H8CV3vCuuVmh3CEPTCQomYkE2tUa1/0/C1912018C110A24C0048F831DD489DB1483ACB47.crl
                          rsync://rpki-repo.registro.br/repo/DCzugT1fx6Gdcm4H8CV3vCuuVmh3CEPTCQomYkE2tUa1/0/C1912018C110A24C0048F831DD489DB1483ACB47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1912018C110A24C0048F831DD489DB1483ACB47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 16:49:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:23:94:88:39:fd:a2:de:fa:32:4a:a7:78:75:34:c0:a4:37:82:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1912018C110A24C0048F831DD489DB1483ACB47
        Validity
            Not Before: Mar 23 12:03:51 2026 GMT
            Not After : Mar 22 12:08:51 2027 GMT
        Subject: CN=420DCCE9FEE36F0CC4BB4E94759BA730337B4ED0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b8:bc:f0:31:9c:87:92:a3:1d:d2:91:4a:5f:
                    7e:d1:d5:3e:b4:bb:2e:5e:ec:dd:dd:e9:75:f7:9d:
                    7b:79:fa:09:34:23:3d:e9:22:db:f2:f3:53:a8:26:
                    f7:29:a3:31:e3:39:f8:0c:b2:48:3e:56:76:b5:53:
                    f1:3a:bb:18:b3:00:92:5f:74:b8:b9:db:ea:f4:f3:
                    ab:15:92:3a:03:20:80:dd:d4:5d:87:2b:9b:49:4d:
                    5e:b7:f5:b8:bc:82:50:b2:dd:3d:82:e7:78:ea:c5:
                    db:7c:86:95:b5:fa:73:06:f1:ee:62:db:16:21:07:
                    e4:7f:9e:06:46:20:5f:7e:98:8d:ed:97:ea:9d:40:
                    e8:41:6f:06:36:47:70:58:b1:36:fe:95:25:24:71:
                    eb:da:78:22:75:7b:44:ef:07:a6:7b:ea:d6:32:c7:
                    65:38:0b:1c:51:15:80:08:c1:b5:28:0e:de:8a:16:
                    b6:d4:83:29:46:fb:63:fc:92:35:68:27:fd:60:2d:
                    64:d1:31:53:2e:6f:f5:85:15:0f:b6:f5:a4:8d:f9:
                    58:ad:5d:f3:b1:71:28:04:18:a6:25:3f:fb:a3:8f:
                    ae:50:4c:c8:91:ef:c5:58:17:4d:d6:a1:58:de:d5:
                    22:04:d5:fa:91:54:46:a3:fc:a3:ca:ea:fd:69:f2:
                    bf:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:0D:CC:E9:FE:E3:6F:0C:C4:BB:4E:94:75:9B:A7:30:33:7B:4E:D0
            X509v3 Authority Key Identifier:
                keyid:C1:91:20:18:C1:10:A2:4C:00:48:F8:31:DD:48:9D:B1:48:3A:CB:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DCzugT1fx6Gdcm4H8CV3vCuuVmh3CEPTCQomYkE2tUa1/0/C1912018C110A24C0048F831DD489DB1483ACB47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1912018C110A24C0048F831DD489DB1483ACB47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCzugT1fx6Gdcm4H8CV3vCuuVmh3CEPTCQomYkE2tUa1/0/34352e3233322e37302e302f32342d3234203d3e20323637323530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:af:27:f5:44:4e:f1:7e:e6:a2:a0:16:14:f7:95:24:25:f4:
         d1:37:60:d6:e0:78:07:07:e1:c7:34:a5:bc:fc:35:a1:a5:4e:
         77:e0:ae:fb:a1:85:73:70:ca:9c:7d:9f:d0:37:81:b1:74:52:
         14:d6:1b:81:fb:e7:a8:0e:85:60:65:27:d2:32:22:6d:d7:09:
         e9:fc:a9:b9:9a:26:3e:85:79:ec:16:cf:a1:bb:e6:fd:7d:77:
         81:d4:ad:fb:13:a3:bf:c5:3b:2d:a3:76:93:36:95:fe:77:84:
         6b:93:da:dd:29:2f:a8:63:ba:ee:67:ef:51:bd:7e:03:20:50:
         55:81:72:a7:b8:06:99:b7:88:b4:e7:0a:db:c4:22:d4:af:6f:
         15:a6:35:7e:d0:13:8e:7d:80:1f:5c:69:10:ad:4c:0f:2f:5b:
         cc:19:cd:70:64:c2:7c:6a:f8:93:80:3e:b6:be:3d:3c:30:0f:
         42:33:9b:9b:25:68:0b:49:6b:1a:60:fb:5a:63:a3:fc:86:94:
         53:d1:43:8f:da:8e:5c:10:9e:c5:14:dc:77:ab:95:40:e1:67:
         d4:18:e6:29:34:bd:d1:33:52:43:4d:20:63:91:d4:b7:85:d4:
         8d:fd:53:e8:a3:8e:2a:38:1e:f0:14:e4:53:da:13:30:50:cc:
         23:6b:34:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:20:37 2026 by rpki-client