Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DCzugT1fx6Gdcm4H8CV3vCuuVmh3CEPTCQomYkE2tUa1/0/34352e3233322e37312e302f32342d3234203d3e20323637323530.roa
File:                     34352e3233322e37312e302f32342d3234203d3e20323637323530.roa (raw, json)
Hash identifier:          6xdAs8Ey4gIdVyRU6brU2Pp+ZrIGF6ZU6Tt4amrCzPo=
Subject key identifier:   A5:68:A0:C1:2E:F4:68:97:D4:D2:8B:7B:40:3B:0A:4A:9C:24:4B:14
Certificate issuer:       /CN=C1912018C110A24C0048F831DD489DB1483ACB47
Certificate serial:       6F52838D27E4945DFBA9577BDFD7D7C92AAE0383
Authority key identifier: C1:91:20:18:C1:10:A2:4C:00:48:F8:31:DD:48:9D:B1:48:3A:CB:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1912018C110A24C0048F831DD489DB1483ACB47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DCzugT1fx6Gdcm4H8CV3vCuuVmh3CEPTCQomYkE2tUa1/0/34352e3233322e37312e302f32342d3234203d3e20323637323530.roa
Signing time:             Mon 23 Mar 2026 12:08:50 +0000
ROA not before:           Mon 23 Mar 2026 12:03:50 +0000
ROA not after:            Mon 22 Mar 2027 12:08:50 +0000
asID:                     267250
IP address blocks:        45.232.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DCzugT1fx6Gdcm4H8CV3vCuuVmh3CEPTCQomYkE2tUa1/0/C1912018C110A24C0048F831DD489DB1483ACB47.crl
                          rsync://rpki-repo.registro.br/repo/DCzugT1fx6Gdcm4H8CV3vCuuVmh3CEPTCQomYkE2tUa1/0/C1912018C110A24C0048F831DD489DB1483ACB47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1912018C110A24C0048F831DD489DB1483ACB47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 16:49:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:52:83:8d:27:e4:94:5d:fb:a9:57:7b:df:d7:d7:c9:2a:ae:03:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1912018C110A24C0048F831DD489DB1483ACB47
        Validity
            Not Before: Mar 23 12:03:50 2026 GMT
            Not After : Mar 22 12:08:50 2027 GMT
        Subject: CN=A568A0C12EF46897D4D28B7B403B0A4A9C244B14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:17:18:e3:53:76:5e:b4:68:95:3b:79:67:42:
                    51:cd:b9:6b:35:d4:79:b7:ee:8e:d2:b9:57:0e:ef:
                    ef:3d:8e:36:5c:cc:20:84:4b:d2:c0:a0:ca:57:24:
                    f1:37:94:4f:4f:c4:c1:f4:c8:20:3d:d3:ee:7b:a6:
                    33:21:44:5d:c6:5e:38:d6:f1:78:da:27:57:6c:4e:
                    20:36:20:7e:79:99:b1:6e:0e:e8:d4:d1:64:90:8c:
                    5f:c6:2a:a9:aa:6e:10:30:84:b1:f2:d6:70:eb:57:
                    98:7f:be:06:fa:58:b4:0b:12:46:3e:6f:51:90:f5:
                    10:18:19:a7:1c:e1:ec:59:a8:32:98:d8:92:8f:0f:
                    1a:5f:12:52:da:81:f8:5b:00:c7:2a:eb:2c:41:2e:
                    03:ae:cd:20:aa:f8:60:7f:05:b5:1f:b3:d4:b7:2f:
                    3a:b1:be:3c:c8:b7:b4:69:51:f3:5f:b3:4f:c2:0a:
                    4d:58:63:8a:df:f9:be:c8:35:f7:85:65:6a:0a:3e:
                    f8:8c:ab:c7:5a:27:85:79:18:c1:91:35:aa:78:56:
                    c7:e5:e0:c4:eb:42:80:e5:47:ab:63:ef:4c:6e:76:
                    ba:f0:e6:bb:48:b2:b1:2b:3b:98:bc:16:da:a6:48:
                    ea:bf:be:ef:80:b0:49:47:83:ae:68:d5:22:39:d0:
                    4f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:68:A0:C1:2E:F4:68:97:D4:D2:8B:7B:40:3B:0A:4A:9C:24:4B:14
            X509v3 Authority Key Identifier:
                keyid:C1:91:20:18:C1:10:A2:4C:00:48:F8:31:DD:48:9D:B1:48:3A:CB:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DCzugT1fx6Gdcm4H8CV3vCuuVmh3CEPTCQomYkE2tUa1/0/C1912018C110A24C0048F831DD489DB1483ACB47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1912018C110A24C0048F831DD489DB1483ACB47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCzugT1fx6Gdcm4H8CV3vCuuVmh3CEPTCQomYkE2tUa1/0/34352e3233322e37312e302f32342d3234203d3e20323637323530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:94:1a:41:46:78:ea:87:f1:d6:d6:53:70:aa:74:e1:4a:7b:
         e6:5e:08:3c:38:b0:52:19:6b:3e:cb:51:49:b3:27:13:fa:5f:
         3e:9c:f2:ef:2f:79:f7:8e:f9:33:e1:d1:98:dc:da:87:cb:ab:
         1b:66:6f:c3:ca:58:cf:9d:88:f0:7b:2e:3c:db:d1:28:e7:46:
         cc:e8:67:3a:b6:27:c0:d3:cf:eb:0d:07:79:dc:4f:a0:89:1c:
         04:c2:68:0d:72:21:c1:6d:f3:ed:af:f2:12:dc:2b:95:45:79:
         c3:49:1a:9e:0a:93:ae:2f:e4:4c:91:d2:cc:7f:d1:f2:fe:30:
         3a:43:eb:41:2d:c2:94:37:c5:0f:93:a5:d6:77:d8:15:13:de:
         56:c5:87:80:7a:6d:e6:d8:8a:e9:bc:8e:1e:d0:3f:b0:d6:a8:
         a0:51:9c:fd:27:30:06:96:64:c2:1f:06:99:be:94:76:87:f4:
         c2:e3:96:c5:50:6e:c5:a4:98:dc:bf:2e:63:fe:1b:02:55:67:
         75:ad:7f:29:c0:12:29:24:09:ef:9a:04:46:7d:56:4a:a8:a9:
         78:a4:d8:de:37:ac:50:e8:b1:71:fb:ce:48:21:62:b7:16:23:
         e8:da:f6:cb:d3:0e:93:2e:3a:fb:03:e6:dc:78:6f:4c:13:3d:
         fe:08:eb:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:47:59 2026 by rpki-client