Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/34352e3138302e3230342e302f32342d3234203d3e20323639313439.roa
File:                     34352e3138302e3230342e302f32342d3234203d3e20323639313439.roa (raw, json)
Hash identifier:          0AomBN/NoDDzAWw7kxLFLNc2qsQeyTzd20spRmkyqac=
Subject key identifier:   8C:13:A2:F2:55:4E:EA:3F:3E:F6:A2:07:28:17:36:3F:86:79:9B:9A
Certificate issuer:       /CN=F82D21AF854C0D12899CF9E18B7205BCF75379D1
Certificate serial:       1E130D8330E9267B082E0B050A18E3ED63A1ED51
Authority key identifier: F8:2D:21:AF:85:4C:0D:12:89:9C:F9:E1:8B:72:05:BC:F7:53:79:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F82D21AF854C0D12899CF9E18B7205BCF75379D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/34352e3138302e3230342e302f32342d3234203d3e20323639313439.roa
Signing time:             Tue 10 Mar 2026 12:05:25 +0000
ROA not before:           Tue 10 Mar 2026 12:00:25 +0000
ROA not after:            Tue 09 Mar 2027 12:05:25 +0000
asID:                     269149
IP address blocks:        45.180.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/F82D21AF854C0D12899CF9E18B7205BCF75379D1.crl
                          rsync://rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/F82D21AF854C0D12899CF9E18B7205BCF75379D1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F82D21AF854C0D12899CF9E18B7205BCF75379D1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 11:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:13:0d:83:30:e9:26:7b:08:2e:0b:05:0a:18:e3:ed:63:a1:ed:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F82D21AF854C0D12899CF9E18B7205BCF75379D1
        Validity
            Not Before: Mar 10 12:00:25 2026 GMT
            Not After : Mar  9 12:05:25 2027 GMT
        Subject: CN=8C13A2F2554EEA3F3EF6A2072817363F86799B9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bd:1e:a6:19:9b:94:74:42:22:8b:c5:d3:bb:
                    c5:9a:01:06:10:6f:ed:e6:a3:70:42:ea:35:3e:8b:
                    4c:1f:bb:55:b9:6e:6b:3d:cb:cf:6b:17:a4:86:66:
                    38:d8:4c:e6:62:69:2b:2a:2d:03:bd:b7:73:17:82:
                    f9:37:f7:b3:c9:85:da:d1:82:58:a0:16:48:42:98:
                    d4:a4:d8:84:f3:3b:97:3b:d7:f1:af:71:9a:8f:c7:
                    c6:79:4c:f6:5f:f1:6c:d0:2f:cb:94:5f:5c:61:76:
                    45:4c:5c:f5:ab:36:b4:29:fc:52:b4:f2:a5:2a:09:
                    90:97:3a:e1:9b:53:bb:71:ca:5f:9f:2e:bc:2c:3d:
                    17:6b:be:b7:73:b0:e1:bc:70:2d:ac:e0:fa:6a:ea:
                    19:be:a9:00:27:a2:05:28:60:5a:54:31:e3:80:4b:
                    df:03:72:ec:ac:1f:35:ea:73:34:f9:be:d7:a1:b5:
                    8f:bb:15:14:8b:ae:d0:c4:fa:37:c9:60:ed:c5:46:
                    74:15:4e:0f:01:fa:9d:6d:4e:2f:43:33:4a:69:91:
                    96:9f:7f:5f:1e:2d:23:3a:f6:24:d0:2e:99:40:8f:
                    0a:00:61:56:1f:62:68:7e:8e:cd:ae:25:2e:58:e6:
                    e7:7d:bc:09:2c:48:5c:c1:d8:aa:6c:4a:86:07:f8:
                    d4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:13:A2:F2:55:4E:EA:3F:3E:F6:A2:07:28:17:36:3F:86:79:9B:9A
            X509v3 Authority Key Identifier:
                keyid:F8:2D:21:AF:85:4C:0D:12:89:9C:F9:E1:8B:72:05:BC:F7:53:79:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/F82D21AF854C0D12899CF9E18B7205BCF75379D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F82D21AF854C0D12899CF9E18B7205BCF75379D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/34352e3138302e3230342e302f32342d3234203d3e20323639313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:56:36:8b:d7:35:14:5f:1c:53:9d:94:39:55:c4:ef:ea:71:
         2d:6a:01:d4:55:36:df:19:05:13:55:e9:2f:ff:96:d5:d5:6b:
         03:7a:77:f9:9e:d7:14:d8:58:98:a0:24:97:45:7b:17:dd:4e:
         6b:e0:37:27:40:cd:44:4c:ed:be:70:0c:05:3d:99:7e:0f:29:
         b2:2e:8b:0d:51:b3:3f:d4:b2:01:05:58:e1:ad:d4:8b:e7:64:
         e0:32:10:d4:25:49:37:b6:f6:96:9e:d3:d2:ad:94:d3:03:f0:
         2c:98:7b:e9:0d:da:0a:6e:d1:3b:1b:17:e8:d1:19:15:8e:fc:
         e7:ff:52:3b:6a:26:5d:08:3e:a3:b2:ed:34:e5:c4:07:05:01:
         49:26:82:a2:5e:5a:2b:90:72:0c:ac:de:94:5c:ad:7f:c6:a1:
         8d:f5:24:10:73:27:2a:85:9d:84:f2:a6:2e:83:5c:ea:7c:fd:
         fc:7d:e0:33:c7:4b:81:74:fe:ea:5d:6f:ce:10:f4:d1:1c:4a:
         c9:f8:df:67:b1:3d:cb:66:0d:f8:14:ed:9a:96:72:e6:77:0c:
         c9:cb:ff:9b:36:34:15:db:b0:c8:f6:5c:7b:13:7d:10:ea:f9:
         13:6b:cd:a8:da:d5:5d:e5:db:ee:c9:af:c5:ef:e8:04:b7:e6:
         7b:b8:ea:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:48:50 2026 by rpki-client