Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/34352e3232352e3233322e302f32322d3234203d3e20323636393634.roa
File:                     34352e3232352e3233322e302f32322d3234203d3e20323636393634.roa (raw, json)
Hash identifier:          iUOiPG4ceAtreoVN+lTdn03EQI/OmwQaXTqI9x64Kq8=
Subject key identifier:   32:98:AD:DF:0F:16:D3:7A:8C:27:72:24:7B:63:49:C4:89:09:18:5F
Certificate issuer:       /CN=009AD209F174E84F1CA5645CAD86B7AF61AAC24A
Certificate serial:       509AC1166323BF1F3D30355D6424CBE8795085CB
Authority key identifier: 00:9A:D2:09:F1:74:E8:4F:1C:A5:64:5C:AD:86:B7:AF:61:AA:C2:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/009AD209F174E84F1CA5645CAD86B7AF61AAC24A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/34352e3232352e3233322e302f32322d3234203d3e20323636393634.roa
Signing time:             Mon 09 Mar 2026 16:56:20 +0000
ROA not before:           Mon 09 Mar 2026 16:51:20 +0000
ROA not after:            Mon 08 Mar 2027 16:56:20 +0000
asID:                     266964
IP address blocks:        45.225.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/009AD209F174E84F1CA5645CAD86B7AF61AAC24A.crl
                          rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/009AD209F174E84F1CA5645CAD86B7AF61AAC24A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/009AD209F174E84F1CA5645CAD86B7AF61AAC24A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 04:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:9a:c1:16:63:23:bf:1f:3d:30:35:5d:64:24:cb:e8:79:50:85:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=009AD209F174E84F1CA5645CAD86B7AF61AAC24A
        Validity
            Not Before: Mar  9 16:51:20 2026 GMT
            Not After : Mar  8 16:56:20 2027 GMT
        Subject: CN=3298ADDF0F16D37A8C2772247B6349C48909185F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:80:9e:b3:22:d7:81:c3:bc:e9:df:4c:81:b1:
                    34:d4:e4:af:e0:5f:a0:77:15:9d:be:bd:e2:b6:02:
                    2c:e3:0b:b5:34:d7:10:39:19:1c:ba:51:c1:8b:ab:
                    45:b0:05:cf:46:44:e7:1d:3e:33:00:ea:cf:38:6b:
                    34:04:1d:e8:79:0f:4f:7c:f8:f5:8f:ff:5a:76:cd:
                    c9:1c:d4:47:ef:5e:20:a2:fa:6c:c8:a9:e6:b6:d0:
                    1c:ae:3b:69:5f:88:9a:af:a3:5a:39:22:d6:f6:62:
                    dc:ac:e2:3a:c6:69:b3:72:41:ef:50:99:fb:ac:49:
                    cd:b6:c5:98:a3:b2:01:fb:65:8c:0c:77:d5:af:a5:
                    43:aa:3e:06:27:62:f7:b4:f1:de:77:bf:ab:2e:0e:
                    41:5d:02:67:3f:78:d3:4a:c2:44:eb:1b:6e:1b:3b:
                    e2:cc:e9:82:cb:8e:88:8b:4d:22:9d:19:b2:19:5e:
                    54:21:28:74:96:1f:62:3d:a2:84:2a:64:bf:2f:1a:
                    0e:d2:14:59:bd:b7:2f:bf:88:27:24:24:ef:47:39:
                    72:4b:ee:f2:af:21:90:cd:7d:e4:f3:12:71:0f:cd:
                    98:48:4a:7c:4b:b2:3c:72:75:48:30:bc:50:77:c2:
                    d8:35:e0:70:8e:0f:6c:0b:ba:ba:72:e9:23:b0:f6:
                    09:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:98:AD:DF:0F:16:D3:7A:8C:27:72:24:7B:63:49:C4:89:09:18:5F
            X509v3 Authority Key Identifier:
                keyid:00:9A:D2:09:F1:74:E8:4F:1C:A5:64:5C:AD:86:B7:AF:61:AA:C2:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/009AD209F174E84F1CA5645CAD86B7AF61AAC24A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/009AD209F174E84F1CA5645CAD86B7AF61AAC24A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/34352e3232352e3233322e302f32322d3234203d3e20323636393634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:87:8d:34:c0:74:6b:c0:13:26:cd:22:5c:60:86:57:f4:b2:
         fe:50:05:0c:91:f2:dd:84:5b:8c:3f:46:b1:fc:31:ad:81:61:
         a3:89:e6:b9:79:fe:64:b5:d5:c5:b6:ce:34:f2:30:1f:25:9a:
         2f:f4:8b:c2:d3:38:5f:0b:a5:0d:8d:61:9b:24:ca:1e:e8:59:
         7b:07:82:51:03:d7:f8:b8:52:98:7b:1f:0b:51:41:42:dd:36:
         5d:2e:9c:a8:c0:6f:08:7c:aa:ab:86:33:ea:fd:3c:cf:5d:61:
         6b:d7:e7:1d:2c:94:38:81:81:5e:6e:65:51:82:ff:9e:dc:65:
         21:c6:43:ea:17:39:21:a3:5a:dc:78:3b:33:36:04:60:24:09:
         11:bc:da:e4:f6:ee:46:ad:bf:b8:b6:92:25:2d:15:0a:f4:09:
         f4:26:70:aa:95:2b:c7:1c:72:30:74:d6:22:eb:d3:11:c0:af:
         c4:95:fa:96:34:32:26:c8:df:0d:68:07:c5:2f:c6:91:97:34:
         e6:bc:82:f4:a0:a6:f3:6e:2c:6c:13:be:05:2f:32:eb:af:95:
         e0:94:3a:d2:d7:59:16:9a:e2:aa:9f:40:bd:ee:2a:22:cd:0a:
         01:dd:a8:28:dc:4f:07:68:2f:0c:8a:a0:e4:a5:dd:a5:93:74:
         6f:1f:4c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:07:04 2026 by rpki-client