Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e31312e302f32342d3234203d3e20323639353636.roa
File:                     34352e3138382e31312e302f32342d3234203d3e20323639353636.roa (raw, json)
Hash identifier:          gOIVwmVdfP6CX+69LzXHtk4vj2fl5NkXou3CJVJ2LFI=
Subject key identifier:   49:5A:B8:F2:49:46:AC:3D:4B:59:05:84:13:DF:C6:71:55:81:A6:03
Certificate issuer:       /CN=74967978EA662073DBD0CD3EBA40601D6A8B1663
Certificate serial:       3AD84A165C7C8A6C2237D0A37C2A2B997838E22C
Authority key identifier: 74:96:79:78:EA:66:20:73:DB:D0:CD:3E:BA:40:60:1D:6A:8B:16:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74967978EA662073DBD0CD3EBA40601D6A8B1663.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e31312e302f32342d3234203d3e20323639353636.roa
Signing time:             Tue 24 Mar 2026 13:19:55 +0000
ROA not before:           Tue 24 Mar 2026 13:14:55 +0000
ROA not after:            Tue 23 Mar 2027 13:19:55 +0000
asID:                     269566
IP address blocks:        45.188.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/74967978EA662073DBD0CD3EBA40601D6A8B1663.crl
                          rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/74967978EA662073DBD0CD3EBA40601D6A8B1663.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74967978EA662073DBD0CD3EBA40601D6A8B1663.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 20:32:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:d8:4a:16:5c:7c:8a:6c:22:37:d0:a3:7c:2a:2b:99:78:38:e2:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74967978EA662073DBD0CD3EBA40601D6A8B1663
        Validity
            Not Before: Mar 24 13:14:55 2026 GMT
            Not After : Mar 23 13:19:55 2027 GMT
        Subject: CN=495AB8F24946AC3D4B59058413DFC6715581A603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6a:f5:23:5f:28:e9:31:1e:b1:99:5e:77:5d:
                    14:e9:18:bc:5a:fd:5c:3c:2c:c8:14:3a:0f:d3:40:
                    5d:42:42:8a:16:2f:e6:2c:c5:a5:57:29:0a:10:61:
                    42:97:80:78:3c:12:a3:7c:ff:b6:09:4e:14:aa:cd:
                    22:f1:24:5c:51:ab:a6:69:7b:e5:14:79:d3:58:eb:
                    73:fb:4a:8f:53:a4:da:68:e4:af:4c:10:a1:6f:80:
                    18:71:28:c5:7e:82:38:2c:34:51:2d:7a:6e:cd:78:
                    c2:02:57:80:ad:b4:5b:6d:c1:08:f0:d5:01:01:0a:
                    cd:50:7b:58:e2:9c:e9:7c:6b:85:ff:b7:a1:13:f7:
                    06:2e:45:34:62:66:5b:3a:cf:6e:97:17:d4:d0:03:
                    67:a2:13:76:7e:01:58:3d:09:d7:ca:e9:62:92:94:
                    9b:b8:91:ef:73:0a:b4:08:fa:39:a2:1d:67:79:46:
                    18:39:26:18:ee:8f:6a:31:41:0c:2b:e9:57:64:34:
                    a3:51:1c:eb:c2:00:ef:e2:44:1b:2a:d4:dd:80:29:
                    ea:5c:f5:f6:1f:d4:fb:a5:2a:58:ff:a2:b4:d6:9c:
                    10:45:8b:a3:19:17:5a:17:3f:19:47:7e:8b:c2:0c:
                    5a:3d:de:ef:29:2c:39:9d:25:4d:08:98:1e:88:36:
                    29:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:5A:B8:F2:49:46:AC:3D:4B:59:05:84:13:DF:C6:71:55:81:A6:03
            X509v3 Authority Key Identifier:
                keyid:74:96:79:78:EA:66:20:73:DB:D0:CD:3E:BA:40:60:1D:6A:8B:16:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/74967978EA662073DBD0CD3EBA40601D6A8B1663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74967978EA662073DBD0CD3EBA40601D6A8B1663.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e31312e302f32342d3234203d3e20323639353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:3b:b3:fa:b9:59:42:1c:45:57:66:7c:d3:67:34:1f:a4:b8:
         a3:3a:5b:f9:98:4c:fd:97:fd:a1:f8:a6:4a:c7:7c:d5:52:37:
         66:27:bd:b6:44:8f:c2:8e:90:3b:1e:a4:b1:f9:5b:63:c2:03:
         2d:d4:93:7a:c9:d6:9f:2e:2a:eb:12:e7:a7:2c:90:a9:97:e2:
         7d:b0:65:c7:aa:bb:ab:c7:0c:39:4e:15:9b:af:c9:01:63:cb:
         04:1f:e4:86:ea:9f:d3:13:d4:5c:44:3c:67:22:63:39:d9:dc:
         44:3a:8e:7c:26:9a:f6:72:c9:71:98:d2:a3:90:85:e2:05:1e:
         84:a9:fb:52:91:97:0d:75:06:1f:60:f2:d1:2c:ad:7d:46:60:
         18:ff:4a:36:35:e9:08:fe:ff:f2:5e:fc:b9:fd:1e:8e:c6:1e:
         4d:98:3c:0d:e9:6d:5a:1f:27:e7:5a:7d:2d:31:45:24:12:ef:
         8d:b0:6d:58:de:f4:9a:2e:67:f3:fc:aa:9f:77:a9:13:a6:af:
         df:6a:25:c7:0d:2d:dd:6a:3c:7b:aa:33:44:a0:cf:66:6d:31:
         70:0c:b3:f5:d5:7b:86:b1:e0:93:d9:22:bb:7d:e3:1b:8e:9d:
         da:2c:1c:56:98:67:72:48:a9:ad:d6:cc:3b:c7:ed:8c:97:2d:
         fc:e0:5f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:58:13 2026 by rpki-client