Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/34352e3233322e3136302e302f32332d3233203d3e20323634323933.roa
File:                     34352e3233322e3136302e302f32332d3233203d3e20323634323933.roa (raw, json)
Hash identifier:          jPM9CdcCXaV1pmbHhSwZt7cBvoqOaAgiKIKO9WI/7UU=
Subject key identifier:   75:81:88:93:A6:FB:6C:E2:54:87:FD:37:F7:95:20:D2:D0:45:00:9B
Certificate issuer:       /CN=F10026B57CA4D9F259FA4AE52692B1EA34B0897E
Certificate serial:       4F9F6F37E0A03C875416CF44E7F8C66F024D89E8
Authority key identifier: F1:00:26:B5:7C:A4:D9:F2:59:FA:4A:E5:26:92:B1:EA:34:B0:89:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F10026B57CA4D9F259FA4AE52692B1EA34B0897E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/34352e3233322e3136302e302f32332d3233203d3e20323634323933.roa
Signing time:             Mon 06 Apr 2026 19:18:48 +0000
ROA not before:           Mon 06 Apr 2026 19:13:48 +0000
ROA not after:            Mon 05 Apr 2027 19:18:48 +0000
asID:                     264293
IP address blocks:        45.232.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/F10026B57CA4D9F259FA4AE52692B1EA34B0897E.crl
                          rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/F10026B57CA4D9F259FA4AE52692B1EA34B0897E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F10026B57CA4D9F259FA4AE52692B1EA34B0897E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 09:17:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:9f:6f:37:e0:a0:3c:87:54:16:cf:44:e7:f8:c6:6f:02:4d:89:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F10026B57CA4D9F259FA4AE52692B1EA34B0897E
        Validity
            Not Before: Apr  6 19:13:48 2026 GMT
            Not After : Apr  5 19:18:48 2027 GMT
        Subject: CN=75818893A6FB6CE25487FD37F79520D2D045009B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5d:63:3b:53:38:d1:31:64:0e:e1:1b:fa:8d:
                    6f:82:f4:17:99:e2:8e:14:74:e7:b1:69:5e:40:01:
                    09:e4:b0:ad:7d:49:17:1f:c0:05:57:be:83:8d:24:
                    c4:c5:20:9d:32:83:02:ee:79:2b:55:17:8e:ef:95:
                    1a:ec:48:5b:2e:3e:1d:75:df:e7:14:07:fb:b3:4b:
                    68:a1:7d:94:c0:45:cd:51:f4:6d:21:89:8c:27:6c:
                    b9:78:c6:a1:5b:79:1f:8b:d2:7b:74:b2:2f:29:75:
                    20:84:23:b9:0c:95:d4:18:fc:ab:22:a6:60:98:1e:
                    15:ea:9a:b6:ee:b0:bc:fa:75:ed:a8:0f:59:d2:9a:
                    0b:fc:59:ad:fe:41:9f:2d:bd:64:78:2b:9d:0b:e1:
                    90:f1:a9:f9:d9:d1:65:a1:7b:b5:68:7b:cd:44:8e:
                    44:e9:b4:80:c6:03:62:12:12:a7:d3:1a:70:48:ce:
                    19:aa:39:f9:4b:ec:1a:14:19:8a:8b:b0:50:32:81:
                    c2:c0:16:a8:c2:1a:9a:c7:50:83:e9:8c:24:68:c4:
                    ef:7b:62:52:88:7a:04:99:92:9b:d2:57:0b:3e:57:
                    eb:43:3c:c9:32:2a:47:2a:2a:ba:7d:de:53:f6:26:
                    16:8f:30:91:ff:9f:ba:f9:cf:8c:1f:4c:d6:c3:1c:
                    41:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:81:88:93:A6:FB:6C:E2:54:87:FD:37:F7:95:20:D2:D0:45:00:9B
            X509v3 Authority Key Identifier:
                keyid:F1:00:26:B5:7C:A4:D9:F2:59:FA:4A:E5:26:92:B1:EA:34:B0:89:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/F10026B57CA4D9F259FA4AE52692B1EA34B0897E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F10026B57CA4D9F259FA4AE52692B1EA34B0897E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/34352e3233322e3136302e302f32332d3233203d3e20323634323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:bb:30:cf:5c:c4:fe:85:7c:59:45:9e:82:1e:18:18:6f:76:
         09:b8:d8:cd:7e:eb:fb:67:14:3b:1a:44:a0:e5:ac:1f:ab:da:
         0e:02:f1:6f:d2:94:8c:ae:e0:ea:e8:60:43:77:a0:96:93:7e:
         0f:2b:b2:20:b7:64:3e:7e:56:b1:9f:ed:b2:1c:ef:25:af:9f:
         c6:15:f1:fd:2a:b6:c2:29:f5:4d:16:9e:e3:66:8e:6e:f5:26:
         64:51:f7:fc:c6:47:ed:11:10:10:92:10:10:b9:be:64:8e:d4:
         b4:d2:b5:72:09:9f:bc:fe:1f:22:33:de:81:07:68:a3:ed:d1:
         3e:3c:37:97:75:70:02:bf:07:32:4d:f6:02:a9:f8:72:a0:52:
         5c:84:a6:a7:a8:0e:d0:60:5d:ba:4c:2d:86:ad:cd:36:ac:4a:
         64:66:be:ad:a1:b4:f5:7c:dc:18:be:f3:f1:86:06:b7:c9:6d:
         8a:2c:29:45:b6:ba:72:c9:4f:5e:b0:1e:c8:0c:48:bf:cc:95:
         a1:78:b5:af:8f:52:8f:5a:0c:69:63:70:84:72:01:41:cb:db:
         ef:31:a6:e5:e2:1c:21:db:3c:35:9e:94:69:7c:8b:9b:ca:62:
         59:32:9c:45:87:b1:82:45:a5:10:8a:9c:07:e5:9b:1e:cd:9c:
         99:c0:da:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 12:15:44 2026 by rpki-client