Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FtF4JDKPJFs633UF32uNxEaASTJixXwGYSCeNHNncNpT/0/34352e3136332e3130342e302f32322d3235203d3e20323638353532.roa
File:                     34352e3136332e3130342e302f32322d3235203d3e20323638353532.roa (raw, json)
Hash identifier:          050gkRiKO3CZvVYaPk9iWUTzZfXhoAcFITleYc+hYl4=
Subject key identifier:   B6:E8:B0:C1:D3:42:C9:C4:65:2C:47:0F:99:97:03:9F:EF:E9:7F:6B
Certificate issuer:       /CN=5C1C802C76A88186E314E4E57858891B31CE5033
Certificate serial:       349144F777C3CECD961BDDFAF02F71D8B367945F
Authority key identifier: 5C:1C:80:2C:76:A8:81:86:E3:14:E4:E5:78:58:89:1B:31:CE:50:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C1C802C76A88186E314E4E57858891B31CE5033.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FtF4JDKPJFs633UF32uNxEaASTJixXwGYSCeNHNncNpT/0/34352e3136332e3130342e302f32322d3235203d3e20323638353532.roa
Signing time:             Mon 09 Mar 2026 16:38:15 +0000
ROA not before:           Mon 09 Mar 2026 16:33:15 +0000
ROA not after:            Mon 08 Mar 2027 16:38:15 +0000
asID:                     268552
IP address blocks:        45.163.104.0/22 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FtF4JDKPJFs633UF32uNxEaASTJixXwGYSCeNHNncNpT/0/5C1C802C76A88186E314E4E57858891B31CE5033.crl
                          rsync://rpki-repo.registro.br/repo/FtF4JDKPJFs633UF32uNxEaASTJixXwGYSCeNHNncNpT/0/5C1C802C76A88186E314E4E57858891B31CE5033.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C1C802C76A88186E314E4E57858891B31CE5033.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 06:52:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:91:44:f7:77:c3:ce:cd:96:1b:dd:fa:f0:2f:71:d8:b3:67:94:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C1C802C76A88186E314E4E57858891B31CE5033
        Validity
            Not Before: Mar  9 16:33:15 2026 GMT
            Not After : Mar  8 16:38:15 2027 GMT
        Subject: CN=B6E8B0C1D342C9C4652C470F9997039FEFE97F6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:9e:db:28:a1:bb:fd:67:19:9c:53:bb:67:ca:
                    4f:68:63:f2:67:41:c0:e3:d7:5e:b8:a9:25:e3:4d:
                    e9:c9:30:f1:11:1e:35:3c:7f:a6:a8:6d:ac:31:e7:
                    24:a0:5a:70:f6:6f:fe:f7:2e:9c:91:4e:0d:8a:d4:
                    fd:b0:aa:0f:d5:44:57:ec:07:c5:fa:11:d3:67:e1:
                    c3:46:ef:e3:27:83:16:8e:e3:bd:3e:5d:c2:3b:09:
                    01:37:de:39:60:42:9b:ea:94:02:49:a3:37:0c:20:
                    18:5b:d1:57:59:53:77:e2:d5:54:73:56:32:9e:a5:
                    e3:97:2c:fd:7e:1d:7b:2d:d1:15:c2:58:b8:0b:ee:
                    e2:67:a5:42:cd:87:e5:48:3d:6f:cf:ce:1a:10:8e:
                    ba:47:a0:2c:95:4a:83:23:ac:3a:27:1d:90:59:3f:
                    eb:26:27:e8:31:78:8a:a8:25:a6:ff:01:a8:15:c1:
                    6a:7e:9b:be:18:2c:1e:97:30:c2:2f:cc:ae:05:d0:
                    82:71:92:20:0e:d4:01:c2:05:f6:c9:1a:22:a4:19:
                    b9:f5:0d:36:c1:77:95:d0:ba:91:ff:22:0e:ea:de:
                    ec:0e:24:08:8d:49:d3:06:b9:98:4f:04:79:e5:81:
                    c5:7b:89:44:dd:14:ab:d4:25:dd:86:2f:85:a3:9a:
                    ed:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E8:B0:C1:D3:42:C9:C4:65:2C:47:0F:99:97:03:9F:EF:E9:7F:6B
            X509v3 Authority Key Identifier:
                keyid:5C:1C:80:2C:76:A8:81:86:E3:14:E4:E5:78:58:89:1B:31:CE:50:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FtF4JDKPJFs633UF32uNxEaASTJixXwGYSCeNHNncNpT/0/5C1C802C76A88186E314E4E57858891B31CE5033.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C1C802C76A88186E314E4E57858891B31CE5033.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FtF4JDKPJFs633UF32uNxEaASTJixXwGYSCeNHNncNpT/0/34352e3136332e3130342e302f32322d3235203d3e20323638353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:54:d1:e0:a3:2a:c8:e2:ec:e7:e2:ac:7b:e3:86:ba:84:d6:
         62:86:95:1d:66:16:c9:d1:46:ed:cc:a2:c8:6f:6a:fa:56:38:
         82:79:3a:de:18:7d:d7:5f:d7:83:82:0a:10:ba:a3:8b:af:dc:
         bc:3c:95:e1:9e:e2:fe:c6:a0:59:e8:54:1c:3a:22:d4:5d:51:
         fc:85:c9:14:32:29:a0:d9:19:8b:9e:72:97:56:e1:d0:84:53:
         38:9b:c4:1f:32:5e:56:7a:86:ac:e8:de:45:49:a0:53:7d:b8:
         13:05:a7:a7:e1:8a:6e:53:06:36:cc:96:49:91:22:b9:76:69:
         c2:ff:dc:dd:92:4d:00:84:f4:a8:e6:23:a3:b6:30:02:d7:a0:
         88:cd:1a:44:d0:68:48:ed:68:d3:74:c4:65:91:91:c0:ae:18:
         1a:c4:58:3b:c9:f5:1a:71:05:29:00:d8:3e:7d:be:83:55:fe:
         ef:ce:e8:c8:7d:c5:57:62:e0:be:fa:6b:9e:13:91:2a:28:44:
         4a:74:1d:f2:2a:e9:dc:9a:c3:3b:fd:13:f9:d4:55:5a:c6:fe:
         be:95:ef:72:b3:1e:f2:08:d5:29:c8:72:29:d7:7f:25:29:ca:
         6f:50:c9:37:e4:45:36:d3:b1:1e:a0:92:b5:73:49:24:0f:55:
         b0:14:93:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:17:50 2026 by rpki-client