Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/34352e3233352e31392e302f32342d3234203d3e20323632333931.roa
File:                     34352e3233352e31392e302f32342d3234203d3e20323632333931.roa (raw, json)
Hash identifier:          +Im2oVGPwv9zqkUbKUE1EmlpKNpy224WRCXAKTzVji4=
Subject key identifier:   A0:DC:6C:59:9E:38:E4:55:F6:B1:2B:D9:37:3E:93:FA:C8:D9:55:BB
Certificate issuer:       /CN=1063B5203A1581839E177D89B6F58F1744A1E5D8
Certificate serial:       389243AC74F9DEF328FE457DB7A5FCA9BE9E464C
Authority key identifier: 10:63:B5:20:3A:15:81:83:9E:17:7D:89:B6:F5:8F:17:44:A1:E5:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1063B5203A1581839E177D89B6F58F1744A1E5D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/34352e3233352e31392e302f32342d3234203d3e20323632333931.roa
Signing time:             Mon 02 Mar 2026 20:36:27 +0000
ROA not before:           Mon 02 Mar 2026 20:31:27 +0000
ROA not after:            Mon 01 Mar 2027 20:36:27 +0000
asID:                     262391
IP address blocks:        45.235.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/1063B5203A1581839E177D89B6F58F1744A1E5D8.crl
                          rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/1063B5203A1581839E177D89B6F58F1744A1E5D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1063B5203A1581839E177D89B6F58F1744A1E5D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 04:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:92:43:ac:74:f9:de:f3:28:fe:45:7d:b7:a5:fc:a9:be:9e:46:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1063B5203A1581839E177D89B6F58F1744A1E5D8
        Validity
            Not Before: Mar  2 20:31:27 2026 GMT
            Not After : Mar  1 20:36:27 2027 GMT
        Subject: CN=A0DC6C599E38E455F6B12BD9373E93FAC8D955BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c9:84:0e:17:f0:e3:2c:ef:07:e1:0a:70:c3:
                    ef:93:a8:e1:20:30:be:e5:f2:2f:7f:52:c2:a9:79:
                    62:ff:52:d2:19:23:35:c8:d0:88:29:76:09:fd:af:
                    fc:c0:bf:e4:a2:48:28:f2:77:1e:aa:6a:3d:2e:17:
                    d1:f1:66:d3:a0:a4:e1:b7:6b:16:f4:cf:15:a1:e7:
                    78:28:95:8c:4c:3f:a7:ed:5d:fa:ba:7e:1e:7b:e0:
                    68:53:8d:7b:ad:5d:55:76:89:ac:1d:e5:3c:31:e9:
                    f2:5d:c5:74:96:32:10:9d:6b:0d:e7:52:aa:47:54:
                    a2:fc:a9:75:54:6d:73:c8:52:5d:05:9b:46:c6:db:
                    0f:18:0e:c4:e8:71:da:d7:7f:07:b3:11:68:a0:c6:
                    a3:dd:f4:88:99:04:bb:fd:bb:33:25:58:96:34:c5:
                    7e:11:8b:45:d3:76:1a:68:8a:59:80:12:22:90:be:
                    8c:00:71:49:fa:87:3a:d3:d6:05:0f:dc:f2:fa:0f:
                    dd:47:0d:69:ba:a3:17:c9:ec:e0:1e:00:d7:b2:0c:
                    c4:b7:5e:56:ca:42:64:e2:f3:d2:fc:46:d4:0b:4e:
                    7a:90:70:46:ec:6b:4b:bc:f1:01:74:a8:65:e6:73:
                    4f:f2:37:7e:af:b4:25:03:f4:e7:af:79:7f:b1:eb:
                    16:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:DC:6C:59:9E:38:E4:55:F6:B1:2B:D9:37:3E:93:FA:C8:D9:55:BB
            X509v3 Authority Key Identifier:
                keyid:10:63:B5:20:3A:15:81:83:9E:17:7D:89:B6:F5:8F:17:44:A1:E5:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/1063B5203A1581839E177D89B6F58F1744A1E5D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1063B5203A1581839E177D89B6F58F1744A1E5D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/34352e3233352e31392e302f32342d3234203d3e20323632333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:fb:08:b0:b0:63:0d:69:57:ef:d1:4d:53:ce:18:b0:05:22:
         46:58:72:32:f2:c3:81:8f:3d:e6:72:de:c9:d2:49:f2:37:82:
         86:52:3a:0b:a6:2d:2b:c1:24:83:cd:3a:8e:f3:f7:5f:64:46:
         ec:68:7a:35:83:90:db:78:56:07:ff:60:4d:ac:8d:dd:58:67:
         a6:28:d1:5c:cc:07:e9:22:f6:d8:82:a1:ca:22:9f:e4:f3:bf:
         a2:b9:2a:31:2b:a3:53:49:8d:ff:28:3c:33:f3:85:93:35:bf:
         65:3e:9f:3b:a6:51:29:dd:36:e7:9d:04:e4:59:48:fa:e2:09:
         69:a5:6e:7b:ac:3f:80:92:a1:51:98:1b:63:ca:d4:aa:f7:60:
         37:2d:45:da:3d:58:17:aa:7e:51:40:e1:a9:cd:14:53:f7:53:
         68:8a:6f:39:e5:33:99:4a:a2:c7:5a:9c:e1:11:a9:94:ea:d2:
         52:09:37:34:a8:08:e6:11:4f:11:c6:31:ff:53:1a:d5:76:0a:
         ae:6b:06:c5:64:46:50:5b:e9:31:58:7a:b1:55:25:8b:83:70:
         20:d5:19:ea:aa:32:52:48:be:27:51:cc:d4:41:e3:ce:cb:26:
         59:a8:1b:77:45:79:02:d2:93:94:84:29:c0:82:30:20:16:70:
         4f:1f:e8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:52:23 2026 by rpki-client