Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/34352e37312e32302e302f32332d3233203d3e20323637353936.roa
File:                     34352e37312e32302e302f32332d3233203d3e20323637353936.roa (raw, json)
Hash identifier:          c6L09K39tK9TFM4CA17IjFODMIIK6j3kSO4lggVk3ew=
Subject key identifier:   B3:6E:53:5B:20:D3:C4:50:D7:F3:0E:D1:C3:1C:4D:0C:68:02:A2:6B
Certificate issuer:       /CN=C897631CE96A2A90A30DA3393E1D10F2C3AD702C
Certificate serial:       0FAA519EB7A61831451BCCB40CF22067EB71983C
Authority key identifier: C8:97:63:1C:E9:6A:2A:90:A3:0D:A3:39:3E:1D:10:F2:C3:AD:70:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C897631CE96A2A90A30DA3393E1D10F2C3AD702C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/34352e37312e32302e302f32332d3233203d3e20323637353936.roa
Signing time:             Wed 04 Mar 2026 21:39:21 +0000
ROA not before:           Wed 04 Mar 2026 21:34:21 +0000
ROA not after:            Wed 03 Mar 2027 21:39:21 +0000
asID:                     267596
IP address blocks:        45.71.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/C897631CE96A2A90A30DA3393E1D10F2C3AD702C.crl
                          rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/C897631CE96A2A90A30DA3393E1D10F2C3AD702C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C897631CE96A2A90A30DA3393E1D10F2C3AD702C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 20:28:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:aa:51:9e:b7:a6:18:31:45:1b:cc:b4:0c:f2:20:67:eb:71:98:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C897631CE96A2A90A30DA3393E1D10F2C3AD702C
        Validity
            Not Before: Mar  4 21:34:21 2026 GMT
            Not After : Mar  3 21:39:21 2027 GMT
        Subject: CN=B36E535B20D3C450D7F30ED1C31C4D0C6802A26B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ec:04:37:a4:a8:9d:f8:05:e8:f5:19:fe:e9:
                    30:89:3e:2c:fd:db:e2:09:6b:c5:0d:82:95:7b:c2:
                    5f:92:5c:0a:6a:0b:6f:00:f5:52:13:c3:de:57:83:
                    9c:8d:94:3f:80:fb:82:e1:ad:fa:d9:e2:1e:c8:ac:
                    35:5e:6a:3c:c1:8a:14:93:9e:1c:3e:5f:86:5a:3b:
                    0d:ad:4b:dd:54:74:f1:66:53:2e:be:24:3f:60:cd:
                    34:13:b5:a7:a8:f5:ee:88:06:10:45:53:81:49:29:
                    81:a3:b3:2c:45:0a:3d:ee:e8:ec:46:ad:e0:b0:2c:
                    d6:7c:72:02:c2:49:c0:72:73:1e:cc:8e:43:f6:88:
                    48:c6:b9:cb:9f:72:26:7f:96:a9:fd:8d:a4:db:90:
                    80:0a:fc:72:b0:ca:db:22:00:cf:6f:9c:74:69:85:
                    6a:fd:77:e2:63:55:39:fa:fd:8e:c1:1e:1e:18:ec:
                    67:e4:03:97:d4:07:50:c0:b3:a0:8d:d3:6d:03:50:
                    37:ed:2b:07:84:f3:44:69:d3:ca:72:e0:3e:3c:69:
                    81:31:91:68:39:0a:ef:96:1c:a9:c8:42:c1:3f:3f:
                    49:72:f6:f6:de:4f:43:ac:d5:de:38:f2:aa:56:05:
                    ba:de:31:b5:96:44:7e:f0:38:4e:f1:c0:34:3e:dc:
                    10:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:6E:53:5B:20:D3:C4:50:D7:F3:0E:D1:C3:1C:4D:0C:68:02:A2:6B
            X509v3 Authority Key Identifier:
                keyid:C8:97:63:1C:E9:6A:2A:90:A3:0D:A3:39:3E:1D:10:F2:C3:AD:70:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/C897631CE96A2A90A30DA3393E1D10F2C3AD702C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C897631CE96A2A90A30DA3393E1D10F2C3AD702C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/34352e37312e32302e302f32332d3233203d3e20323637353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:86:1d:e7:c8:08:57:c4:b0:cd:5c:8d:f9:fd:ea:08:33:18:
         7a:a2:9b:b8:af:be:4e:d2:eb:c8:ad:ea:b5:31:ac:67:c0:1c:
         3b:41:dd:82:66:30:80:23:a0:1d:aa:97:6c:6c:91:e7:e4:98:
         53:94:7e:5e:19:c7:5d:85:f0:6d:0d:8f:47:81:3d:31:55:3b:
         d8:c4:96:94:bd:6a:2f:53:68:85:84:cc:99:fb:f1:25:02:f5:
         6c:a5:b2:f3:f3:e5:49:15:27:47:b3:73:db:1c:85:3d:98:41:
         70:4b:c8:f0:0e:9f:c1:1d:7b:6a:f2:d9:d5:af:0c:b0:59:97:
         de:a7:f2:68:c2:70:2b:cb:26:80:d3:63:5d:99:f3:4f:6d:10:
         46:33:ee:de:4f:75:f1:d5:55:60:ad:57:30:5e:2b:68:0a:87:
         36:f1:f9:8f:fa:51:af:41:1f:83:93:a4:87:df:2f:1d:90:f7:
         90:63:d1:d3:b9:1b:68:85:57:5e:31:0a:f4:c7:a1:c0:3b:b2:
         89:72:a8:4a:ef:ac:0a:3b:44:9f:c9:4f:56:ee:7c:77:f3:a5:
         62:38:88:3e:db:33:a0:0b:29:b8:97:fb:71:0c:ac:99:51:9f:
         d8:b5:53:c5:4b:b7:f9:cc:d1:62:8b:eb:f3:1f:fc:fb:32:a3:
         60:3d:bb:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:37:40 2026 by rpki-client