Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/34352e3137362e3136322e302f32332d3233203d3e20323639303032.roa
File:                     34352e3137362e3136322e302f32332d3233203d3e20323639303032.roa (raw, json)
Hash identifier:          d9JWKLiLqcw1nXD7WbaXVpuBET2P6lPML0wuWiylabI=
Subject key identifier:   19:61:73:E7:A7:D8:0D:9A:F5:1C:D0:3A:20:91:23:FA:F5:4D:18:BD
Certificate issuer:       /CN=89421C5EE6A6B6E133F5868D831254A94BCD35D7
Certificate serial:       2AC47C6199932F1A5D6B7AE6E5B1F19633E02158
Authority key identifier: 89:42:1C:5E:E6:A6:B6:E1:33:F5:86:8D:83:12:54:A9:4B:CD:35:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89421C5EE6A6B6E133F5868D831254A94BCD35D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/34352e3137362e3136322e302f32332d3233203d3e20323639303032.roa
Signing time:             Mon 06 Apr 2026 13:38:54 +0000
ROA not before:           Mon 06 Apr 2026 13:33:54 +0000
ROA not after:            Mon 05 Apr 2027 13:38:54 +0000
asID:                     269002
IP address blocks:        45.176.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/89421C5EE6A6B6E133F5868D831254A94BCD35D7.crl
                          rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/89421C5EE6A6B6E133F5868D831254A94BCD35D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89421C5EE6A6B6E133F5868D831254A94BCD35D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 04:10:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:c4:7c:61:99:93:2f:1a:5d:6b:7a:e6:e5:b1:f1:96:33:e0:21:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89421C5EE6A6B6E133F5868D831254A94BCD35D7
        Validity
            Not Before: Apr  6 13:33:54 2026 GMT
            Not After : Apr  5 13:38:54 2027 GMT
        Subject: CN=196173E7A7D80D9AF51CD03A209123FAF54D18BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e9:f1:10:f6:e4:81:d4:cc:4e:1a:bc:60:67:
                    29:9a:fa:63:0f:2d:e6:c5:cf:a9:ee:de:3c:b1:39:
                    fb:ce:a2:4e:2c:64:41:4f:e7:9b:2e:c3:ad:84:e4:
                    df:17:97:75:90:fa:38:14:69:b9:e7:c0:e6:45:3b:
                    07:05:65:87:8c:43:3e:1a:e6:39:ba:9e:8b:e5:44:
                    ee:fe:bd:fc:db:70:26:8f:12:cf:a6:c5:0f:d4:cd:
                    41:b8:a3:43:5d:c6:10:10:a9:d4:2e:3e:66:93:8e:
                    9b:65:98:59:c2:55:c2:69:d1:10:ea:ab:55:39:19:
                    60:36:bf:3e:7f:e9:70:c3:24:18:bd:ca:61:49:10:
                    8c:4d:be:be:a0:b8:47:7d:49:59:4e:20:51:e1:d3:
                    63:ac:90:15:e3:ec:21:06:49:c4:b4:8b:cc:8d:36:
                    fe:57:cf:e9:e4:53:82:80:74:60:44:5f:d2:46:73:
                    d6:ab:2d:5a:3c:79:0b:fa:af:bd:9b:58:c1:bd:0a:
                    f5:c4:c8:cf:b2:c4:54:1d:6b:cd:6a:44:48:52:4c:
                    13:df:3d:bd:0a:99:3c:22:f0:12:4a:29:2a:60:88:
                    da:14:b6:8a:b3:e1:df:2b:fa:04:18:4d:41:22:aa:
                    89:77:5a:0d:4e:14:ed:93:fb:9e:6f:be:ae:f4:2c:
                    64:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:61:73:E7:A7:D8:0D:9A:F5:1C:D0:3A:20:91:23:FA:F5:4D:18:BD
            X509v3 Authority Key Identifier:
                keyid:89:42:1C:5E:E6:A6:B6:E1:33:F5:86:8D:83:12:54:A9:4B:CD:35:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/89421C5EE6A6B6E133F5868D831254A94BCD35D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89421C5EE6A6B6E133F5868D831254A94BCD35D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/34352e3137362e3136322e302f32332d3233203d3e20323639303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:ef:03:d7:4f:39:f3:c8:60:6f:a3:24:0a:a1:51:c3:d7:92:
         b9:4d:b4:0b:17:41:83:e9:10:01:bb:a6:15:d0:fa:28:9a:94:
         b9:ed:34:bf:d7:1b:c4:e2:6e:24:e0:0d:4d:36:3f:29:b7:dc:
         5a:fe:3d:de:d9:00:5c:09:bb:e3:d4:70:fd:d7:5f:86:28:30:
         36:19:d4:29:8b:73:ba:b9:8a:18:85:f1:7b:59:30:4c:fc:a4:
         94:01:27:f3:59:04:aa:75:7f:aa:8e:06:3d:d3:ae:26:59:2a:
         70:d9:04:3d:45:bf:65:99:58:ba:17:da:5e:dd:aa:4a:e8:53:
         27:e6:27:82:e2:51:48:1e:fe:b6:35:d6:8b:0d:48:9c:7a:c7:
         90:fc:45:cf:c6:65:e7:e0:9f:44:14:60:f2:56:6f:04:60:25:
         83:37:76:a7:50:76:50:12:37:9e:da:e1:87:ff:ea:96:58:fe:
         5c:b2:87:4b:db:17:81:58:66:5d:bf:0a:73:d9:e3:d5:74:52:
         1e:cf:f3:0c:a9:a6:7c:f0:fa:a9:67:0a:96:f8:35:28:aa:9a:
         74:9e:06:f5:84:f6:03:c7:f0:ee:86:94:5d:d8:75:64:ad:7c:
         36:e1:52:3c:88:eb:42:04:13:c3:4d:56:d9:8f:33:49:34:31:
         00:15:81:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 10:57:18 2026 by rpki-client