Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/34352e3233332e3232352e302f32342d3234203d3e20323637333330.roa
File:                     34352e3233332e3232352e302f32342d3234203d3e20323637333330.roa (raw, json)
Hash identifier:          PQrO7KaaLsNyTrc5SXrnK6GQSl8ayUdh9Kte0qWq/XE=
Subject key identifier:   A6:37:BA:FC:7A:31:77:32:8A:1E:1C:BB:25:8E:95:FF:15:DF:6A:F4
Certificate issuer:       /CN=0A467B137635F43F91188ECBB9D30961A5B090C1
Certificate serial:       7687984793A7A08A49590945F111499CEBC60E45
Authority key identifier: 0A:46:7B:13:76:35:F4:3F:91:18:8E:CB:B9:D3:09:61:A5:B0:90:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A467B137635F43F91188ECBB9D30961A5B090C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/34352e3233332e3232352e302f32342d3234203d3e20323637333330.roa
Signing time:             Thu 02 Apr 2026 13:04:04 +0000
ROA not before:           Thu 02 Apr 2026 12:59:04 +0000
ROA not after:            Thu 01 Apr 2027 13:04:04 +0000
asID:                     267330
IP address blocks:        45.233.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/0A467B137635F43F91188ECBB9D30961A5B090C1.crl
                          rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/0A467B137635F43F91188ECBB9D30961A5B090C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A467B137635F43F91188ECBB9D30961A5B090C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 01:40:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:87:98:47:93:a7:a0:8a:49:59:09:45:f1:11:49:9c:eb:c6:0e:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A467B137635F43F91188ECBB9D30961A5B090C1
        Validity
            Not Before: Apr  2 12:59:04 2026 GMT
            Not After : Apr  1 13:04:04 2027 GMT
        Subject: CN=A637BAFC7A3177328A1E1CBB258E95FF15DF6AF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:40:38:39:f5:b8:8b:14:b1:14:13:22:71:6a:
                    a4:4a:c5:03:0f:3a:37:cd:05:7f:45:8a:50:f1:97:
                    5d:49:02:55:06:ba:38:ff:f3:e6:f4:0e:4a:20:0c:
                    25:1e:69:8a:7d:2d:5f:97:3c:21:e9:b6:1e:97:00:
                    78:78:b2:14:d7:99:ce:09:4a:a9:b0:4c:36:d5:c0:
                    3a:97:b6:d6:e0:68:e7:77:da:c9:7a:f1:b6:db:66:
                    18:e6:09:7d:8a:83:a5:31:12:ea:70:b1:2d:34:34:
                    6b:59:11:fb:5d:6b:cc:08:6d:b4:b4:60:0c:87:93:
                    f7:9e:01:d5:af:73:57:b1:a9:9c:98:19:4f:d9:c8:
                    66:48:9f:89:60:8a:97:f0:1e:3d:61:39:73:5b:8a:
                    85:e2:2f:78:83:09:17:e0:a7:07:c9:a7:6c:50:a0:
                    53:94:46:cc:ce:60:ed:7a:cd:2e:f9:7a:ae:93:fc:
                    76:b9:ab:19:c9:68:6c:47:a1:4a:f7:0a:53:2c:d3:
                    84:68:a3:4e:b2:8b:df:bc:08:05:53:83:e5:f5:f8:
                    29:30:c7:65:41:c8:de:9a:16:1d:b3:b5:2b:0a:af:
                    13:96:90:63:81:74:22:a0:02:b2:11:7e:47:1c:70:
                    8b:1a:29:8f:60:e4:ed:5c:e4:d3:7d:19:57:d7:d3:
                    27:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:37:BA:FC:7A:31:77:32:8A:1E:1C:BB:25:8E:95:FF:15:DF:6A:F4
            X509v3 Authority Key Identifier:
                keyid:0A:46:7B:13:76:35:F4:3F:91:18:8E:CB:B9:D3:09:61:A5:B0:90:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/0A467B137635F43F91188ECBB9D30961A5B090C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A467B137635F43F91188ECBB9D30961A5B090C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/34352e3233332e3232352e302f32342d3234203d3e20323637333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:f4:c6:b2:22:db:d3:4e:11:1a:9b:9d:b4:27:c7:11:e8:58:
         df:23:14:8a:7d:d5:e1:35:01:a7:de:c3:20:c7:31:4a:d4:87:
         f7:39:af:0a:92:b3:7a:10:7b:04:2e:0c:22:2e:12:1a:a1:14:
         35:ee:ba:b8:c3:69:9d:62:11:de:33:d1:3a:dc:7e:7d:c6:d8:
         a2:b9:ea:f3:7b:14:b4:63:71:24:0d:65:9b:4b:12:04:2a:ea:
         9b:cf:fc:93:8c:0a:5f:0f:3b:c8:63:18:f7:3c:ec:46:83:dd:
         1c:7d:76:b3:44:a2:5b:01:4c:a1:7c:c0:71:96:e6:8c:94:73:
         6b:1f:cb:9a:77:9c:04:80:32:c6:09:aa:07:12:43:68:06:3a:
         7a:cf:c4:f1:6f:fb:cd:11:b3:a2:b1:17:51:0d:9a:3b:08:db:
         7b:20:7d:2a:f2:a7:7a:f0:4f:37:3b:86:7b:7a:50:2d:c0:12:
         76:cc:30:d7:b5:19:b3:f6:8e:1b:82:89:a3:05:19:62:63:22:
         01:67:21:64:18:6e:9b:7a:78:48:2b:cf:5a:62:f2:4f:3f:58:
         1c:15:6d:c5:c1:91:a7:2a:f7:1c:61:f7:d1:be:fe:74:12:14:
         cd:fa:92:26:a7:4a:9f:4c:38:43:4c:35:3d:cc:22:38:30:8d:
         59:15:ed:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 06:38:24 2026 by rpki-client