Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/34352e3136302e3132342e302f32322d3232203d3e20323634323933.roa
File:                     34352e3136302e3132342e302f32322d3232203d3e20323634323933.roa (raw, json)
Hash identifier:          E7S9EMUTFNTUVLnb9UziOVK6BJGyCqs1+WD/mM98qls=
Subject key identifier:   7F:AA:5D:26:03:36:E7:C1:D3:8D:DA:7B:A4:63:A4:16:8A:CA:38:C6
Certificate issuer:       /CN=F10026B57CA4D9F259FA4AE52692B1EA34B0897E
Certificate serial:       61C3E71E09AC83FDB0A09EC4FEFC841FC9EC2DBB
Authority key identifier: F1:00:26:B5:7C:A4:D9:F2:59:FA:4A:E5:26:92:B1:EA:34:B0:89:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F10026B57CA4D9F259FA4AE52692B1EA34B0897E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/34352e3136302e3132342e302f32322d3232203d3e20323634323933.roa
Signing time:             Mon 06 Apr 2026 19:18:48 +0000
ROA not before:           Mon 06 Apr 2026 19:13:48 +0000
ROA not after:            Mon 05 Apr 2027 19:18:48 +0000
asID:                     264293
IP address blocks:        45.160.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/F10026B57CA4D9F259FA4AE52692B1EA34B0897E.crl
                          rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/F10026B57CA4D9F259FA4AE52692B1EA34B0897E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F10026B57CA4D9F259FA4AE52692B1EA34B0897E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 09:17:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:c3:e7:1e:09:ac:83:fd:b0:a0:9e:c4:fe:fc:84:1f:c9:ec:2d:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F10026B57CA4D9F259FA4AE52692B1EA34B0897E
        Validity
            Not Before: Apr  6 19:13:48 2026 GMT
            Not After : Apr  5 19:18:48 2027 GMT
        Subject: CN=7FAA5D260336E7C1D38DDA7BA463A4168ACA38C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:63:f9:b1:35:8d:78:8f:22:9c:97:3f:d3:ba:
                    e6:58:ac:fa:64:0b:e5:14:38:4d:64:61:ce:b2:5b:
                    9b:e9:3b:6f:d6:fa:36:ec:4c:ba:42:79:b7:d6:5b:
                    74:63:8d:00:dc:99:55:12:ea:51:b4:1a:f5:aa:17:
                    a2:41:61:2b:63:8f:2f:1f:43:df:ef:66:02:45:d4:
                    7d:bc:bf:5c:a4:1f:05:27:6f:76:68:9e:72:c7:e0:
                    81:cf:3c:19:5a:a4:3f:a0:5a:9b:26:84:ec:5d:45:
                    54:d2:58:90:b7:f7:80:90:5b:48:51:4f:a9:80:a0:
                    6c:05:bb:f3:7d:99:37:21:1a:af:79:84:57:b2:92:
                    c3:09:6e:a8:b7:6b:ef:c0:ef:a9:c9:46:4a:f6:be:
                    d0:a8:9a:2b:46:88:33:80:0e:f1:82:ef:bb:3c:35:
                    b5:8c:01:31:0e:c9:a7:a0:fc:4a:85:e9:e3:df:56:
                    43:7e:49:6e:35:c6:57:15:db:aa:09:5f:a8:50:14:
                    03:e5:0c:5a:8a:5e:ff:71:a4:45:6e:dd:f5:bf:32:
                    ab:ca:eb:91:9b:77:58:83:22:11:fc:6b:72:12:65:
                    1f:99:98:df:19:0c:a9:ad:92:10:21:a5:ae:83:a9:
                    c8:6d:14:4c:f0:5e:37:9b:03:af:0c:00:04:02:90:
                    7f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:AA:5D:26:03:36:E7:C1:D3:8D:DA:7B:A4:63:A4:16:8A:CA:38:C6
            X509v3 Authority Key Identifier:
                keyid:F1:00:26:B5:7C:A4:D9:F2:59:FA:4A:E5:26:92:B1:EA:34:B0:89:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/F10026B57CA4D9F259FA4AE52692B1EA34B0897E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F10026B57CA4D9F259FA4AE52692B1EA34B0897E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/34352e3136302e3132342e302f32322d3232203d3e20323634323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:1b:18:64:f0:64:29:c8:46:4c:6a:43:fb:d2:80:e0:1e:4d:
         6b:19:ae:28:9f:69:f5:c7:ca:96:23:13:83:c0:5d:d4:56:08:
         de:a8:1b:01:85:56:3a:b6:b6:b4:48:55:62:68:05:46:a4:4e:
         dd:bc:07:5c:ec:80:f6:c3:aa:3c:70:0a:65:bd:75:1d:64:ab:
         fc:08:0a:e6:1f:76:b3:03:43:7b:68:b9:9b:4a:33:b5:e4:32:
         3d:15:d7:1f:d2:cc:8c:18:82:6f:b1:fc:c0:ac:f8:9c:8c:04:
         e3:49:32:0c:fd:91:a3:01:9c:54:21:28:2e:89:5f:cd:36:cf:
         68:05:ca:49:9f:1a:b1:c7:81:b7:61:f8:0f:cb:c0:3d:6c:75:
         1f:cc:15:68:a3:ee:ed:1b:21:9a:f4:f7:5e:7b:2e:cf:2e:a6:
         02:98:9f:4f:49:48:02:d8:55:b0:43:e4:29:86:ea:00:1a:20:
         d9:4b:e6:75:c0:84:77:c3:40:58:a1:9d:9b:84:7e:31:78:41:
         6c:4c:ec:72:3b:c3:68:91:b1:f8:30:03:5a:3d:42:53:9d:79:
         20:4f:30:34:b6:76:c6:b5:40:3c:3a:b5:8a:60:d4:16:ac:69:
         d4:d7:f4:4e:66:c3:40:33:1e:a5:b6:5d:8e:6c:29:b5:41:32:
         98:08:38:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 13:21:52 2026 by rpki-client