Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/34352e3136382e31342e302f32332d3233203d3e20323638303335.roa
File:                     34352e3136382e31342e302f32332d3233203d3e20323638303335.roa (raw, json)
Hash identifier:          OCSUY6qIRUZk0uZzeR5nzQb+yh86RfXjEV5wLeuuzCM=
Subject key identifier:   56:20:B9:DF:AA:94:A8:37:59:9F:83:EF:B9:86:E2:2B:4B:D2:FD:44
Certificate issuer:       /CN=746F62E0AEFCCD80381655BD82E017B375D2EC7E
Certificate serial:       4654007AD40CEAFC1ACFE104BD66C3A5ED151234
Authority key identifier: 74:6F:62:E0:AE:FC:CD:80:38:16:55:BD:82:E0:17:B3:75:D2:EC:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/746F62E0AEFCCD80381655BD82E017B375D2EC7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/34352e3136382e31342e302f32332d3233203d3e20323638303335.roa
Signing time:             Fri 27 Mar 2026 18:36:37 +0000
ROA not before:           Fri 27 Mar 2026 18:31:37 +0000
ROA not after:            Fri 26 Mar 2027 18:36:37 +0000
asID:                     268035
IP address blocks:        45.168.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/746F62E0AEFCCD80381655BD82E017B375D2EC7E.crl
                          rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/746F62E0AEFCCD80381655BD82E017B375D2EC7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/746F62E0AEFCCD80381655BD82E017B375D2EC7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 04:04:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:54:00:7a:d4:0c:ea:fc:1a:cf:e1:04:bd:66:c3:a5:ed:15:12:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746F62E0AEFCCD80381655BD82E017B375D2EC7E
        Validity
            Not Before: Mar 27 18:31:37 2026 GMT
            Not After : Mar 26 18:36:37 2027 GMT
        Subject: CN=5620B9DFAA94A837599F83EFB986E22B4BD2FD44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0e:c0:ec:92:94:0b:4b:6c:a3:66:85:28:d0:
                    ab:56:a2:64:dc:86:5e:80:93:99:dd:06:5f:6b:b3:
                    f5:78:0a:2b:eb:f5:09:c8:38:2e:27:db:43:86:65:
                    7f:84:ca:29:2d:6e:9c:18:d0:d8:a8:ab:b7:31:77:
                    b2:03:05:bf:1d:70:77:ef:f2:28:15:14:e4:0c:7a:
                    6c:7e:10:af:09:59:18:3f:f1:00:ea:06:40:95:be:
                    4c:18:c6:3c:a3:be:ce:3c:88:6f:be:05:c9:fa:89:
                    f7:79:2c:f4:07:49:fe:09:14:96:18:30:02:7d:a6:
                    83:41:87:3a:1d:0a:4d:44:1c:39:e9:cd:1f:58:07:
                    1e:6e:d9:6b:42:d4:cb:dc:08:48:7b:5c:06:a9:49:
                    df:ea:ad:73:20:db:59:1f:48:38:7d:41:00:1f:70:
                    3d:fb:5e:92:6c:57:68:f2:e8:6e:14:05:55:cd:27:
                    ea:8b:71:5d:dd:11:4b:14:e9:90:52:e4:cc:1c:2f:
                    57:ad:05:f0:d1:66:17:a0:60:f2:4f:df:b4:c6:d9:
                    1a:1f:a7:d9:17:cc:94:48:67:41:1a:93:bf:e5:94:
                    1a:a6:cb:b1:7a:a9:3f:3a:5f:7a:a7:c5:56:32:e9:
                    d7:e1:68:37:17:41:dc:ac:c8:48:ad:aa:c3:73:b4:
                    dc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:20:B9:DF:AA:94:A8:37:59:9F:83:EF:B9:86:E2:2B:4B:D2:FD:44
            X509v3 Authority Key Identifier:
                keyid:74:6F:62:E0:AE:FC:CD:80:38:16:55:BD:82:E0:17:B3:75:D2:EC:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/746F62E0AEFCCD80381655BD82E017B375D2EC7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/746F62E0AEFCCD80381655BD82E017B375D2EC7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/34352e3136382e31342e302f32332d3233203d3e20323638303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:c7:6c:63:ae:9a:af:98:ff:c8:c3:8b:bd:3a:4f:30:e6:7d:
         78:71:1e:ed:40:4d:35:c6:f0:9d:1f:3f:c0:91:31:0b:3c:22:
         af:f7:d8:18:74:9c:bb:80:91:c7:f3:5e:e2:de:6a:ba:27:4b:
         e4:70:17:3d:8b:a3:dc:ae:13:44:4f:a2:6a:88:f3:bc:b1:b0:
         1d:05:6b:1b:a7:31:73:9f:42:14:f5:e4:69:59:ba:71:2a:f6:
         1f:11:a6:52:33:58:b2:f4:78:ac:d9:3d:86:6c:25:84:dd:ab:
         b5:e9:5c:6e:2a:53:51:22:ef:73:1d:c8:07:d4:03:84:1c:d4:
         6e:ae:7b:c6:d6:26:b5:70:90:2d:a4:3d:9b:39:a1:dd:5c:37:
         45:fe:17:28:45:9b:8b:80:af:0e:46:42:ab:89:f8:a5:54:75:
         2a:22:c4:d5:6c:00:b1:0b:c1:59:e1:c9:4d:66:f7:d1:db:aa:
         59:d1:3b:48:1f:47:b3:c2:ad:db:c5:19:bd:ed:bf:81:26:3f:
         5e:dd:47:18:6b:07:f3:46:8d:6b:d8:09:18:1f:be:37:b3:35:
         e8:24:7c:62:d9:92:d8:73:77:ab:b7:7f:83:2a:d6:4e:b4:7b:
         39:33:97:78:24:6a:8a:4b:4b:8b:01:ee:78:c4:ea:e5:78:c4:
         9c:b8:2d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 13:34:47 2026 by rpki-client