Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234362e302f32332d3233203d3e20323638323936.roa
File:                     34352e3233372e3234362e302f32332d3233203d3e20323638323936.roa (raw, json)
Hash identifier:          qQAEvw5JcviocEgoP39JvNRfF5j90+1pL0WmTHEnmIU=
Subject key identifier:   E7:2C:2E:04:A5:FE:04:2A:18:63:66:7A:AE:AE:E9:D4:99:F0:A5:6B
Certificate issuer:       /CN=5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2
Certificate serial:       7AE0F2B2C015C66F1C22BDC9A2FEC9F695F4025D
Authority key identifier: 5F:0A:FA:8A:F3:FB:CB:95:22:11:4C:46:E2:AB:F0:26:20:0D:47:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234362e302f32332d3233203d3e20323638323936.roa
Signing time:             Wed 01 Apr 2026 17:40:28 +0000
ROA not before:           Wed 01 Apr 2026 17:35:28 +0000
ROA not after:            Wed 31 Mar 2027 17:40:28 +0000
asID:                     268296
IP address blocks:        45.237.246.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 20:51:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:e0:f2:b2:c0:15:c6:6f:1c:22:bd:c9:a2:fe:c9:f6:95:f4:02:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2
        Validity
            Not Before: Apr  1 17:35:28 2026 GMT
            Not After : Mar 31 17:40:28 2027 GMT
        Subject: CN=E72C2E04A5FE042A1863667AAEAEE9D499F0A56B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bb:39:0d:a5:64:1c:7e:e4:13:45:ca:27:d9:
                    0f:af:4e:1a:c8:50:3e:8f:b2:58:cc:84:7f:5b:d7:
                    d8:c2:d4:62:62:a1:bd:74:ed:2b:b1:47:da:85:bb:
                    08:cd:b9:7f:14:00:b5:75:12:52:a3:3f:0d:37:7b:
                    ff:1b:1a:e6:a8:a6:97:71:84:55:82:68:3c:f9:87:
                    8b:0b:1a:87:51:4b:e9:66:a2:4e:8b:27:a8:13:b5:
                    ab:1e:8d:90:e9:80:1e:a3:33:cb:2a:2a:ae:07:85:
                    bd:65:73:de:2a:cd:d1:81:2d:36:51:ca:07:72:cd:
                    99:6e:b5:a1:ab:5e:fd:de:f7:21:2e:f1:60:1e:c5:
                    83:78:80:45:3c:97:44:e5:a2:59:ac:d9:e9:c3:95:
                    6d:d3:d0:18:66:8e:ed:c7:67:ac:b6:fa:1f:df:c3:
                    82:0e:ce:0b:7e:20:77:84:2f:47:99:12:13:21:fb:
                    d7:91:4a:86:1a:17:9c:8d:e5:8f:cb:6f:bf:7c:53:
                    6e:97:c6:a2:f5:74:dd:3e:03:c4:e9:01:f4:3d:94:
                    c7:02:32:4c:32:67:2b:65:7e:ae:e1:ad:9a:4b:09:
                    93:d5:18:5c:90:ed:e4:39:15:3c:c0:ab:29:33:50:
                    5d:59:97:91:c1:ee:a4:63:f4:0c:74:52:35:f8:94:
                    c8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:2C:2E:04:A5:FE:04:2A:18:63:66:7A:AE:AE:E9:D4:99:F0:A5:6B
            X509v3 Authority Key Identifier:
                keyid:5F:0A:FA:8A:F3:FB:CB:95:22:11:4C:46:E2:AB:F0:26:20:0D:47:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234362e302f32332d3233203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:cb:50:21:b2:68:34:cc:27:6a:f8:52:94:e6:58:94:67:06:
         69:1c:80:9d:dc:84:b8:53:e3:b8:a5:74:39:95:cd:a9:a8:5b:
         41:86:c7:94:4f:db:a5:d1:c8:59:54:76:f0:70:e9:39:7e:d5:
         62:99:76:18:24:da:21:e6:c4:fd:24:eb:93:94:7a:ec:fd:fd:
         f7:ab:c0:2b:94:7c:1c:ab:1f:d2:7c:57:97:a1:c7:fa:0f:72:
         ea:07:8a:ff:3b:eb:f0:26:a4:32:88:ad:60:fc:6c:a5:7f:cc:
         ea:3f:96:91:1d:2c:3e:0b:fa:d5:d1:aa:43:0d:8e:1b:7f:be:
         46:07:f9:99:4b:63:f8:25:57:fc:26:06:d1:44:32:45:96:5d:
         9c:02:93:e2:e9:95:92:7f:6c:39:58:2a:17:eb:f7:18:c5:ce:
         a7:ac:a5:3f:2a:67:a4:28:53:32:83:ea:da:8a:0f:82:5b:16:
         83:cd:f7:fb:75:a7:b7:2c:12:ae:1d:0d:43:aa:ad:8d:43:fc:
         ba:d5:67:13:8a:9b:b0:b3:94:42:30:3f:74:de:4f:dc:00:87:
         67:aa:0c:f2:97:ea:7b:c2:52:d9:3f:bb:6e:e7:a7:c5:61:b9:
         61:d3:eb:0e:43:9b:af:35:08:37:68:2f:ab:17:4d:ab:e5:05:
         79:73:cf:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 10:59:36 2026 by rpki-client