Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/34352e3233352e31362e302f32332d3234203d3e20323632333931.roa
File:                     34352e3233352e31362e302f32332d3234203d3e20323632333931.roa (raw, json)
Hash identifier:          ysaS3F1vU2BBq+J2APylrjKnWLi3DSFVmK87W6jk8wo=
Subject key identifier:   6F:FF:20:0C:38:8C:ED:C9:28:5E:09:C3:4B:31:80:53:6C:16:CD:DA
Certificate issuer:       /CN=1063B5203A1581839E177D89B6F58F1744A1E5D8
Certificate serial:       641959589390FCDE49D31F89C39847547A259943
Authority key identifier: 10:63:B5:20:3A:15:81:83:9E:17:7D:89:B6:F5:8F:17:44:A1:E5:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1063B5203A1581839E177D89B6F58F1744A1E5D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/34352e3233352e31362e302f32332d3234203d3e20323632333931.roa
Signing time:             Mon 02 Mar 2026 20:36:27 +0000
ROA not before:           Mon 02 Mar 2026 20:31:27 +0000
ROA not after:            Mon 01 Mar 2027 20:36:27 +0000
asID:                     262391
IP address blocks:        45.235.16.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/1063B5203A1581839E177D89B6F58F1744A1E5D8.crl
                          rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/1063B5203A1581839E177D89B6F58F1744A1E5D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1063B5203A1581839E177D89B6F58F1744A1E5D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 04:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:19:59:58:93:90:fc:de:49:d3:1f:89:c3:98:47:54:7a:25:99:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1063B5203A1581839E177D89B6F58F1744A1E5D8
        Validity
            Not Before: Mar  2 20:31:27 2026 GMT
            Not After : Mar  1 20:36:27 2027 GMT
        Subject: CN=6FFF200C388CEDC9285E09C34B3180536C16CDDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:58:de:e2:e2:3c:78:b7:1c:08:4e:48:22:52:
                    d0:c7:7c:9c:67:62:32:4c:ab:00:a4:cc:64:b5:a0:
                    c3:5f:47:5f:f3:b7:e4:50:20:dc:bc:2a:ed:87:4e:
                    bc:a0:17:d5:40:d2:d4:6c:ee:db:36:5f:95:04:d0:
                    23:7d:73:bf:86:2c:70:3e:5a:04:5d:04:6e:e5:d9:
                    3d:91:c0:69:02:af:db:5d:c6:2a:10:da:5d:15:2e:
                    b1:98:b7:7c:79:41:83:4c:62:3f:44:be:60:c2:20:
                    ca:1c:47:20:4e:cb:4a:8c:12:c2:c8:b0:67:d2:19:
                    d7:3a:49:75:0a:8e:eb:d6:88:14:2b:7f:b0:2f:45:
                    20:68:04:f0:ba:16:e0:9a:ac:59:59:7d:8c:02:a3:
                    08:93:4a:b7:2d:37:83:32:58:e3:dd:45:ae:d8:a7:
                    cd:5f:21:bb:f0:2b:f1:bc:b0:4b:04:8a:33:06:b0:
                    8e:13:88:2c:ca:14:a3:40:cd:04:2f:02:c2:d5:cb:
                    bf:6d:2e:49:2c:64:55:3b:a5:fe:a9:9b:cc:47:8a:
                    fd:8b:dc:ef:8d:8e:39:68:b0:cf:f8:40:e6:e0:72:
                    8d:d4:1d:de:79:b5:8d:f3:b0:1f:fa:79:36:44:e3:
                    7d:bf:eb:7c:97:c1:df:db:aa:05:37:1d:92:61:00:
                    52:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:FF:20:0C:38:8C:ED:C9:28:5E:09:C3:4B:31:80:53:6C:16:CD:DA
            X509v3 Authority Key Identifier:
                keyid:10:63:B5:20:3A:15:81:83:9E:17:7D:89:B6:F5:8F:17:44:A1:E5:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/1063B5203A1581839E177D89B6F58F1744A1E5D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1063B5203A1581839E177D89B6F58F1744A1E5D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/34352e3233352e31362e302f32332d3234203d3e20323632333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:7c:d3:eb:6b:da:98:f8:23:f7:92:38:6d:83:11:77:e9:a7:
         15:98:01:32:71:e8:d4:2e:03:c7:d0:40:d4:86:b1:13:27:3a:
         52:2a:34:32:f2:93:98:29:a5:8c:69:90:6d:a3:22:34:00:c6:
         cf:5b:b2:5c:77:b0:7a:e8:cb:aa:8e:a2:e8:74:9f:91:a6:b8:
         79:6f:35:d9:49:c8:a0:4b:8a:f1:4d:9b:e9:21:ef:3c:cc:54:
         15:30:31:58:63:e9:a4:a1:dd:ed:3a:c8:d3:82:54:96:12:5f:
         82:b7:58:6e:a2:f2:94:4d:a3:c1:5b:4e:9b:01:54:95:b0:df:
         9b:80:b6:ed:3e:13:27:0e:36:ea:12:3f:b2:e9:4a:b3:11:27:
         76:ac:ca:1b:5e:bd:1a:ea:e5:04:a5:79:f7:37:d5:26:65:9e:
         58:7d:74:94:35:60:83:bc:1d:ec:7a:c5:27:16:2c:3c:07:a9:
         dd:45:18:86:00:0e:78:70:e1:1a:00:57:f7:16:c3:e9:d5:da:
         b5:a8:52:dc:92:4c:de:05:f2:93:7b:14:9d:f0:02:f2:82:54:
         fa:af:f6:77:07:24:06:03:60:c3:b5:45:75:05:7f:d1:55:ec:
         2f:6d:07:35:9c:f0:57:c2:be:1f:30:e4:77:56:96:18:dd:5e:
         df:44:33:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:52:29 2026 by rpki-client