Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/1/34352e3139312e3132382e302f32322d3234203d3e20313938393439.roa
File:                     34352e3139312e3132382e302f32322d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          6Vujtzpd3V7AERVoADg3mTn5madZiLFuhJMis2/pVQc=
Subject key identifier:   1E:A4:0E:D6:FA:B7:9F:A8:11:F3:1D:63:AA:3F:D4:28:58:BC:06:79
Certificate issuer:       /CN=5116131606911447B81AE3C7A8BE76D217A043B2
Certificate serial:       2B6E4A505BC60F0D9CA5B7D4CD9E17C17B1E133A
Authority key identifier: 51:16:13:16:06:91:14:47:B8:1A:E3:C7:A8:BE:76:D2:17:A0:43:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5116131606911447B81AE3C7A8BE76D217A043B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/1/34352e3139312e3132382e302f32322d3234203d3e20313938393439.roa
Signing time:             Mon 16 Mar 2026 20:28:51 +0000
ROA not before:           Mon 16 Mar 2026 20:23:51 +0000
ROA not after:            Mon 15 Mar 2027 20:28:51 +0000
asID:                     198949
IP address blocks:        45.191.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/1/5116131606911447B81AE3C7A8BE76D217A043B2.crl
                          rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/1/5116131606911447B81AE3C7A8BE76D217A043B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5116131606911447B81AE3C7A8BE76D217A043B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:6e:4a:50:5b:c6:0f:0d:9c:a5:b7:d4:cd:9e:17:c1:7b:1e:13:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5116131606911447B81AE3C7A8BE76D217A043B2
        Validity
            Not Before: Mar 16 20:23:51 2026 GMT
            Not After : Mar 15 20:28:51 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6e:bb:cd:45:1b:2f:e8:69:df:3c:b4:a8:a8:
                    b3:0e:44:58:fc:6e:66:a2:31:df:30:27:be:50:3a:
                    fc:67:9b:ed:05:8d:9c:90:b2:15:df:ab:d2:e1:ba:
                    52:0f:5f:4b:41:51:f6:01:3c:ec:3e:ed:d7:f0:67:
                    ef:bb:8f:fc:d3:d7:0a:cb:3d:7b:7d:a1:fa:30:99:
                    67:02:6f:f6:be:b2:12:17:3c:35:d3:8b:86:63:5f:
                    9f:dc:a2:30:6a:9c:32:d9:61:4b:e9:c8:bd:92:92:
                    db:76:50:b3:b7:77:c7:fb:71:b6:0d:d4:fd:3d:b0:
                    b3:26:71:c4:77:b5:1e:93:76:15:0e:b2:26:37:43:
                    c0:9f:d1:bc:9c:73:e4:37:a3:61:e7:e2:b4:a7:dd:
                    0c:4b:36:e6:a4:e0:b0:d3:b9:1a:41:82:df:59:af:
                    7b:15:a7:e3:7d:9e:6d:d2:0d:24:8a:3f:85:54:0f:
                    bc:9b:ec:ff:fc:62:ee:33:c9:bd:20:04:7f:4d:fd:
                    3f:6f:64:67:c4:15:64:35:3a:26:12:36:51:b1:af:
                    99:b8:0d:4b:d4:0a:1b:e7:d0:86:ef:33:c8:29:3d:
                    f9:3b:4b:a9:71:19:c2:12:7a:bd:64:cd:1f:26:3c:
                    65:bc:37:67:88:be:fa:ac:99:0b:cb:a1:e2:a1:52:
                    76:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A4:0E:D6:FA:B7:9F:A8:11:F3:1D:63:AA:3F:D4:28:58:BC:06:79
            X509v3 Authority Key Identifier:
                keyid:51:16:13:16:06:91:14:47:B8:1A:E3:C7:A8:BE:76:D2:17:A0:43:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/1/5116131606911447B81AE3C7A8BE76D217A043B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5116131606911447B81AE3C7A8BE76D217A043B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/1/34352e3139312e3132382e302f32322d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:89:71:6b:f9:1e:a4:29:66:07:21:2b:65:e2:47:b8:f3:28:
         ad:2a:c5:63:6a:81:e8:58:05:43:4f:f2:79:fc:ea:f2:42:59:
         6c:5a:59:ff:05:56:c0:e4:2f:51:9a:b1:8e:1a:db:68:d8:9e:
         2b:9f:f1:41:85:c7:8f:fd:18:49:17:14:b9:f5:c2:4a:ca:97:
         69:5c:b2:36:b0:9a:08:26:78:7d:79:52:42:c0:f1:b4:8a:10:
         79:17:10:35:51:07:31:e3:89:1f:81:0f:c5:63:5a:bd:87:9b:
         f0:41:25:0e:a9:66:e7:7f:9c:60:32:11:d7:6c:55:a9:30:2a:
         27:2b:7b:b9:11:7f:33:0a:e1:bb:3e:0a:01:07:26:b6:6a:e5:
         46:fc:1a:14:00:4b:49:d4:69:ce:a9:aa:a5:c2:48:99:9a:04:
         bf:44:96:0d:95:e6:9d:0a:05:eb:60:d6:85:d2:16:d3:ae:95:
         4d:dd:6b:60:27:6e:b6:2e:8c:b3:03:3a:4e:89:54:71:24:c5:
         6c:ce:93:f9:d0:07:18:1d:de:f8:1e:3c:19:e6:3d:df:3c:8f:
         08:a0:2e:45:1b:65:ea:c9:06:1e:4b:cf:c0:d3:15:35:64:ef:
         9e:3f:34:71:1b:0e:1d:30:63:6c:63:d3:b9:5d:35:64:08:b4:
         66:d0:18:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:20:44 2026 by rpki-client