Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/34352e3138312e39322e302f32322d3234203d3e20323639313735.roa
File:                     34352e3138312e39322e302f32322d3234203d3e20323639313735.roa (raw, json)
Hash identifier:          GiE743EhfSOXHGIBrKqBmOMaTBFSozjDYLmG5toJg4k=
Subject key identifier:   85:FE:83:7D:78:30:23:C1:6E:8D:87:4B:46:4A:95:14:14:75:0A:0E
Certificate issuer:       /CN=870F31E28EB6835FE94CC62D908989A74790CB3E
Certificate serial:       0A215975AAE0EE546BDD76087B9CF9510B331C55
Authority key identifier: 87:0F:31:E2:8E:B6:83:5F:E9:4C:C6:2D:90:89:89:A7:47:90:CB:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/34352e3138312e39322e302f32322d3234203d3e20323639313735.roa
Signing time:             Fri 27 Mar 2026 12:24:05 +0000
ROA not before:           Fri 27 Mar 2026 12:19:05 +0000
ROA not after:            Fri 26 Mar 2027 12:24:05 +0000
asID:                     269175
IP address blocks:        45.181.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.crl
                          rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 00:28:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:21:59:75:aa:e0:ee:54:6b:dd:76:08:7b:9c:f9:51:0b:33:1c:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870F31E28EB6835FE94CC62D908989A74790CB3E
        Validity
            Not Before: Mar 27 12:19:05 2026 GMT
            Not After : Mar 26 12:24:05 2027 GMT
        Subject: CN=85FE837D783023C16E8D874B464A951414750A0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:eb:da:fc:af:7c:94:e8:64:c2:18:db:78:ea:
                    be:6e:ae:1d:a2:1a:d1:72:fd:05:7c:5f:86:6f:0c:
                    14:bb:4c:ee:3c:d8:ad:a2:45:d1:3b:99:89:7f:06:
                    21:54:10:28:0c:d7:aa:7e:9b:0f:e1:61:5e:a1:b4:
                    fc:25:25:7b:98:36:71:f1:7c:39:40:23:43:a0:50:
                    de:be:5d:e6:c6:97:7b:dd:4d:fe:54:d4:fe:84:9c:
                    68:8d:e2:a9:6d:72:ab:f3:4b:67:c2:fd:60:89:5d:
                    25:7c:7e:c1:c8:73:a1:e4:90:80:ee:2f:5e:5f:de:
                    b8:68:a6:a5:d6:69:8a:ac:45:68:cc:77:1a:d7:8d:
                    76:cc:1e:85:8c:5a:b6:5f:31:74:81:43:5f:00:a6:
                    1f:6c:9a:c6:3d:8e:76:be:71:fb:d6:af:b0:b7:9d:
                    62:a4:03:14:ea:0e:97:55:f8:c8:02:42:ef:b8:d5:
                    9c:9a:ec:56:9a:c6:d2:13:f0:f3:f2:8e:4a:50:87:
                    37:3a:20:53:8d:1b:65:f3:a2:87:80:30:1b:73:d0:
                    ce:f7:f7:3a:b7:3a:7b:8f:7d:6c:50:6a:c7:97:ed:
                    86:e8:0c:18:b4:7b:82:92:24:da:35:5e:29:00:9d:
                    be:75:9c:86:46:8e:9b:03:9b:00:91:ea:bd:1c:19:
                    02:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:FE:83:7D:78:30:23:C1:6E:8D:87:4B:46:4A:95:14:14:75:0A:0E
            X509v3 Authority Key Identifier:
                keyid:87:0F:31:E2:8E:B6:83:5F:E9:4C:C6:2D:90:89:89:A7:47:90:CB:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/34352e3138312e39322e302f32322d3234203d3e20323639313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:2d:9f:36:04:fe:4d:3a:d2:e3:d6:6f:57:e1:e5:cf:c9:20:
         a7:53:47:02:32:c1:39:ca:45:c5:3b:80:8e:a5:09:37:3e:bc:
         91:90:09:c1:87:53:91:1b:7a:ed:5b:a5:02:14:83:37:17:22:
         6f:ca:e6:51:6a:1a:f4:8a:4d:ab:91:d6:f4:a0:1a:96:24:72:
         82:4f:94:28:75:5e:aa:f3:bc:1f:83:ed:af:25:7e:44:35:59:
         f1:bc:fa:ad:bb:f6:28:e4:b3:e5:69:40:66:29:52:eb:de:4e:
         dd:1e:69:b1:57:ed:cb:0d:fd:24:50:00:ce:57:30:c8:f6:00:
         af:d7:f2:e9:bb:58:bc:62:e1:2d:1b:7f:de:44:6e:03:75:b6:
         70:b7:8e:c2:0f:38:34:74:4a:c8:a7:9c:09:38:e4:bb:1c:63:
         d8:9a:d7:bf:ef:14:0e:ac:a1:93:56:1e:01:ac:db:a0:25:4b:
         27:48:83:3b:62:67:76:6f:ce:2d:b1:51:07:00:8d:34:d8:37:
         86:df:b1:09:73:31:0a:b5:e3:bc:70:28:9a:e5:02:94:72:e2:
         c5:cf:d8:be:e8:60:c1:5c:ff:b8:d0:21:0a:75:f8:27:69:a8:
         28:f0:75:79:8b:64:2f:d1:30:5e:b0:31:c9:56:db:ea:1d:e2:
         37:09:56:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 23:14:19 2026 by rpki-client