Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVdjdmapt2GRVuaTo1dgXqKFBN6hsRqpwWR5mwETasaB/1/34352e3137322e302e302f32322d3234203d3e20323637303238.roa
File:                     34352e3137322e302e302f32322d3234203d3e20323637303238.roa (raw, json)
Hash identifier:          jHlmN6la/cmo1lRsKxRv1HyGncal53MoiZ6FZVL9ffg=
Subject key identifier:   79:87:03:FD:3C:FC:7B:3B:75:AA:FD:3F:1A:7F:2D:E5:35:2F:57:E0
Certificate issuer:       /CN=7651A842E34BF1A427ECE613831D697900FC14F9
Certificate serial:       72A79B1EF574ACC3BD3523BD3D01EDE5DE45070A
Authority key identifier: 76:51:A8:42:E3:4B:F1:A4:27:EC:E6:13:83:1D:69:79:00:FC:14:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7651A842E34BF1A427ECE613831D697900FC14F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVdjdmapt2GRVuaTo1dgXqKFBN6hsRqpwWR5mwETasaB/1/34352e3137322e302e302f32322d3234203d3e20323637303238.roa
Signing time:             Wed 11 Mar 2026 22:17:16 +0000
ROA not before:           Wed 11 Mar 2026 22:12:16 +0000
ROA not after:            Wed 10 Mar 2027 22:17:16 +0000
asID:                     267028
IP address blocks:        45.172.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GVdjdmapt2GRVuaTo1dgXqKFBN6hsRqpwWR5mwETasaB/1/7651A842E34BF1A427ECE613831D697900FC14F9.crl
                          rsync://rpki-repo.registro.br/repo/GVdjdmapt2GRVuaTo1dgXqKFBN6hsRqpwWR5mwETasaB/1/7651A842E34BF1A427ECE613831D697900FC14F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7651A842E34BF1A427ECE613831D697900FC14F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Mar 2026 01:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a7:9b:1e:f5:74:ac:c3:bd:35:23:bd:3d:01:ed:e5:de:45:07:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7651A842E34BF1A427ECE613831D697900FC14F9
        Validity
            Not Before: Mar 11 22:12:16 2026 GMT
            Not After : Mar 10 22:17:16 2027 GMT
        Subject: CN=798703FD3CFC7B3B75AAFD3F1A7F2DE5352F57E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6a:3e:c7:11:6c:6e:07:e6:d1:49:6f:4f:3a:
                    20:93:d0:19:34:5e:b1:3c:c3:f9:98:a3:02:92:0b:
                    f1:55:c2:f5:7c:bd:47:03:dd:67:eb:34:35:5a:ca:
                    2a:5c:01:07:c3:9d:27:6d:49:45:45:3a:6d:54:26:
                    22:cd:51:a3:2f:53:ad:ac:96:f8:85:b5:80:22:55:
                    7b:78:3f:36:5b:e0:59:85:4b:82:33:60:c9:7b:17:
                    0f:e1:48:fd:63:ca:5c:25:95:d0:1e:09:81:e2:a3:
                    11:0c:90:7a:90:58:18:cd:d6:2b:75:b5:9d:ce:91:
                    9e:ef:a7:86:9e:ef:7d:83:da:68:71:2a:27:97:bb:
                    38:c3:9f:0c:04:3d:69:35:af:05:05:c7:37:52:7e:
                    26:58:ea:3f:cd:85:da:b6:cb:7a:8c:1f:60:ed:45:
                    31:33:6c:40:df:0e:0b:80:0a:9c:f8:51:af:2e:e3:
                    bf:0a:35:96:b0:15:f0:9e:0d:66:7a:20:6b:22:a0:
                    61:8a:66:ef:bf:b7:27:b1:4a:36:89:d6:83:a1:84:
                    ab:1d:4d:ae:88:d9:21:0c:4a:4b:15:58:e0:dd:da:
                    11:81:28:e5:9a:fe:b9:cd:8a:e7:78:4e:37:5d:19:
                    51:7e:1f:b5:ae:17:63:d2:ee:c1:19:aa:cd:ff:e7:
                    f2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:87:03:FD:3C:FC:7B:3B:75:AA:FD:3F:1A:7F:2D:E5:35:2F:57:E0
            X509v3 Authority Key Identifier:
                keyid:76:51:A8:42:E3:4B:F1:A4:27:EC:E6:13:83:1D:69:79:00:FC:14:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVdjdmapt2GRVuaTo1dgXqKFBN6hsRqpwWR5mwETasaB/1/7651A842E34BF1A427ECE613831D697900FC14F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7651A842E34BF1A427ECE613831D697900FC14F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVdjdmapt2GRVuaTo1dgXqKFBN6hsRqpwWR5mwETasaB/1/34352e3137322e302e302f32322d3234203d3e20323637303238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cb:3a:10:4c:01:60:89:b1:8f:dc:da:3f:ef:17:7f:39:23:8d:
         46:9f:c6:d1:19:7e:a5:f7:ca:2b:60:09:81:6f:18:59:4b:da:
         7d:c8:b5:f0:2a:5e:eb:af:06:9c:b7:b7:44:ec:67:a2:5e:ec:
         be:13:ef:ea:ce:77:44:f5:25:fa:8f:88:9d:2a:48:49:a4:06:
         0c:d8:0c:7d:ce:30:44:03:80:c0:5f:42:f2:b7:aa:93:46:2d:
         f9:5e:20:f8:e0:b7:69:b9:62:f2:94:a3:d2:3b:36:9d:0f:ed:
         20:f8:b6:61:25:08:e1:a4:4d:36:5b:f4:be:52:be:b4:e7:86:
         20:97:b9:c3:66:12:a7:2c:78:3c:ac:62:cf:d2:1a:58:a4:9f:
         c4:c7:d1:ce:70:76:f1:d8:cc:2f:03:ae:03:1d:35:52:27:90:
         70:06:a5:2c:ae:65:8e:1e:a7:79:59:70:bf:77:0c:a8:39:9a:
         9b:cf:1b:a4:39:f3:b4:88:48:cd:47:c0:32:0a:1b:54:09:35:
         77:cc:73:ef:2d:7f:69:12:54:19:7e:4d:d6:81:06:59:cc:31:
         f5:5f:78:34:b2:9e:34:42:cc:8a:29:8f:7f:8f:d0:39:0a:e4:
         dd:c2:6c:29:09:58:13:f2:7e:00:20:c5:24:f1:66:2f:10:cc:
         51:6e:79:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:01:02 2026 by rpki-client