Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/34352e3137362e3136302e302f32342d3234203d3e20323639303032.roa
File:                     34352e3137362e3136302e302f32342d3234203d3e20323639303032.roa (raw, json)
Hash identifier:          xp92J20t3WVSO3oGJkCAvaHWxzpBwduIYnzV5hcCK4k=
Subject key identifier:   AF:C3:46:D5:4F:87:C5:F0:5A:B0:D2:39:82:3B:DD:08:44:34:C6:62
Certificate issuer:       /CN=89421C5EE6A6B6E133F5868D831254A94BCD35D7
Certificate serial:       7283A6391ACE3FFB625EAB44E8A5593058872DB0
Authority key identifier: 89:42:1C:5E:E6:A6:B6:E1:33:F5:86:8D:83:12:54:A9:4B:CD:35:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89421C5EE6A6B6E133F5868D831254A94BCD35D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/34352e3137362e3136302e302f32342d3234203d3e20323639303032.roa
Signing time:             Mon 06 Apr 2026 13:38:53 +0000
ROA not before:           Mon 06 Apr 2026 13:33:53 +0000
ROA not after:            Mon 05 Apr 2027 13:38:53 +0000
asID:                     269002
IP address blocks:        45.176.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/89421C5EE6A6B6E133F5868D831254A94BCD35D7.crl
                          rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/89421C5EE6A6B6E133F5868D831254A94BCD35D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89421C5EE6A6B6E133F5868D831254A94BCD35D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 04:10:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:83:a6:39:1a:ce:3f:fb:62:5e:ab:44:e8:a5:59:30:58:87:2d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89421C5EE6A6B6E133F5868D831254A94BCD35D7
        Validity
            Not Before: Apr  6 13:33:53 2026 GMT
            Not After : Apr  5 13:38:53 2027 GMT
        Subject: CN=AFC346D54F87C5F05AB0D239823BDD084434C662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ce:12:ad:5c:d0:29:39:5f:8f:a4:5a:64:08:
                    a2:62:03:64:57:bc:e6:fb:54:ea:da:80:51:9c:1d:
                    ef:fe:05:4d:5f:0a:18:1a:d2:ef:7b:20:93:0a:0e:
                    9c:4d:fc:8e:c7:70:52:a3:57:31:d7:e4:51:7e:6a:
                    71:5e:c1:77:8b:1a:ac:2d:b9:2c:7f:5a:a4:a4:e4:
                    18:53:b4:5d:58:14:ae:67:2e:ca:1e:5a:1b:fc:fe:
                    56:48:75:7d:43:be:e9:de:c1:70:51:19:7c:cb:b6:
                    b9:6a:d5:d1:45:fc:a4:94:17:93:1f:8c:c0:06:fd:
                    0d:2f:66:c0:24:d3:70:6b:23:bf:47:b9:d7:7e:18:
                    31:0e:f6:a1:56:1b:38:bf:e9:63:1c:9a:d2:4f:da:
                    26:25:84:30:30:93:53:21:04:bc:ef:f4:a8:6b:d5:
                    31:0e:8c:b4:32:b2:a2:59:5f:e7:ad:2d:e4:16:7d:
                    67:b1:d0:55:f8:92:8f:31:0a:e1:9f:36:44:a4:9d:
                    3a:ed:b8:5a:33:d1:6b:37:b3:a6:3c:07:42:b2:65:
                    ff:27:13:4b:5b:8f:88:63:f9:b0:fc:b4:13:7b:35:
                    c7:29:ce:d5:75:54:87:9a:74:a0:bf:9c:27:f8:8e:
                    98:a6:a3:ed:46:b3:a5:ea:66:42:46:56:a9:71:58:
                    d3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C3:46:D5:4F:87:C5:F0:5A:B0:D2:39:82:3B:DD:08:44:34:C6:62
            X509v3 Authority Key Identifier:
                keyid:89:42:1C:5E:E6:A6:B6:E1:33:F5:86:8D:83:12:54:A9:4B:CD:35:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/89421C5EE6A6B6E133F5868D831254A94BCD35D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89421C5EE6A6B6E133F5868D831254A94BCD35D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/34352e3137362e3136302e302f32342d3234203d3e20323639303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:b7:96:ba:69:a8:7a:7a:9c:43:13:fd:ad:9c:9b:af:aa:79:
         9d:59:a4:5a:6f:ee:2f:ad:f2:29:cb:5f:81:a6:20:8d:b5:4f:
         40:28:56:c6:b0:27:75:c7:37:fc:51:01:17:0c:37:1f:93:b7:
         83:4a:5a:00:22:8d:38:76:76:91:44:5a:57:7e:72:2d:7f:cb:
         50:96:b1:f9:ab:f0:3a:90:09:6e:62:42:45:4f:47:31:95:37:
         e0:29:e2:db:f3:4e:b8:8f:51:4b:57:23:a9:91:ec:16:84:73:
         1c:53:f9:03:af:60:27:4d:dc:97:c4:1e:62:67:1a:f2:a4:21:
         f2:6f:81:bd:a5:0f:e1:e0:26:c1:9f:23:a7:11:27:cd:78:7d:
         41:88:1a:9b:74:90:bd:61:c1:ec:fc:e1:bc:ba:69:b5:a4:ca:
         02:ed:ad:d1:37:86:3c:f8:fe:79:1b:17:21:09:e1:b4:c9:35:
         98:b7:d2:9f:5e:e9:e6:4d:95:bb:3c:07:1d:30:4b:5e:df:cc:
         43:77:bc:f2:b6:b9:f3:7c:81:d6:fd:a7:e7:c0:76:c2:d6:3a:
         7f:08:ff:68:63:69:6a:de:7f:a3:4e:7d:e8:1c:98:cd:5a:5f:
         bd:81:9d:39:f8:36:4a:6e:3d:76:db:17:be:54:04:8a:61:b6:
         77:73:9c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 10:46:51 2026 by rpki-client