Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/34352e3136302e3136392e302f32342d3234203d3e20323638343235.roa
File:                     34352e3136302e3136392e302f32342d3234203d3e20323638343235.roa (raw, json)
Hash identifier:          kAnO70CXvFkE5M4NLR/pq7OZQ/KkfvoRBLrFOk2Xbc4=
Subject key identifier:   94:94:49:1D:E9:A6:37:4A:59:75:6D:DE:A3:36:20:C0:1A:74:0B:CE
Certificate issuer:       /CN=E968F08C3BD0A821112BDBD86914ED5964A1FF29
Certificate serial:       17AD27158849D3C34D232D5DBA41F71592130078
Authority key identifier: E9:68:F0:8C:3B:D0:A8:21:11:2B:DB:D8:69:14:ED:59:64:A1:FF:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/34352e3136302e3136392e302f32342d3234203d3e20323638343235.roa
Signing time:             Tue 07 Apr 2026 19:12:16 +0000
ROA not before:           Tue 07 Apr 2026 19:07:16 +0000
ROA not after:            Tue 06 Apr 2027 19:12:16 +0000
asID:                     268425
IP address blocks:        45.160.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.crl
                          rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 13:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ad:27:15:88:49:d3:c3:4d:23:2d:5d:ba:41:f7:15:92:13:00:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E968F08C3BD0A821112BDBD86914ED5964A1FF29
        Validity
            Not Before: Apr  7 19:07:16 2026 GMT
            Not After : Apr  6 19:12:16 2027 GMT
        Subject: CN=9494491DE9A6374A59756DDEA33620C01A740BCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f9:60:a1:24:31:11:b3:f0:f4:43:29:ec:de:
                    a6:14:72:fb:33:fc:ba:92:fc:7f:41:e6:41:eb:da:
                    40:c2:b5:49:2d:46:3a:9c:17:92:16:84:1d:9c:e9:
                    18:3c:01:a8:64:69:04:c1:82:31:bc:cc:2a:e2:ac:
                    63:8f:65:20:38:1b:7d:01:fe:13:44:92:90:28:74:
                    11:a2:84:e7:11:fa:5a:91:6a:b4:fb:dc:b5:e4:73:
                    64:ab:fa:fc:e7:09:56:04:c0:eb:58:65:97:29:3f:
                    c3:d2:a7:6e:9a:a2:d3:c0:4d:a9:ce:2e:63:98:09:
                    2a:96:26:d8:3c:de:b1:88:0e:9a:18:1b:ac:80:d4:
                    5d:b5:96:68:24:23:a5:3a:5d:ac:44:b1:7e:b6:7f:
                    5c:8f:c9:d8:e8:bb:f9:d6:7a:1c:dc:d2:db:2f:a0:
                    7c:0c:c8:3e:2d:76:36:eb:91:51:c2:59:ef:63:3f:
                    2c:8b:a8:83:26:0f:a0:7c:08:d7:c7:5a:1c:eb:6f:
                    f2:49:1f:45:f3:35:9d:e3:a1:5d:a5:c1:e9:fc:c8:
                    87:73:08:ee:a2:38:c3:70:d8:56:2d:5c:b1:c4:8e:
                    6d:a5:00:2c:b1:df:53:8d:2d:63:c8:7f:ff:ba:3e:
                    96:d4:c9:99:8a:d2:59:94:44:fc:2b:81:b6:4d:72:
                    d0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:94:49:1D:E9:A6:37:4A:59:75:6D:DE:A3:36:20:C0:1A:74:0B:CE
            X509v3 Authority Key Identifier:
                keyid:E9:68:F0:8C:3B:D0:A8:21:11:2B:DB:D8:69:14:ED:59:64:A1:FF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/34352e3136302e3136392e302f32342d3234203d3e20323638343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:1e:27:3b:96:5e:5f:d3:a9:e0:72:c6:ee:a1:7f:19:9d:04:
         4d:95:dd:4e:d2:d3:d3:c8:24:2f:8b:4e:2a:8a:2f:76:2c:0f:
         67:69:20:8f:82:b9:ff:66:e7:79:b0:73:0c:dc:06:f8:48:bb:
         ed:37:87:ea:0d:99:f1:16:84:d2:8d:3f:e2:37:31:36:0a:7b:
         ec:4d:e9:4b:dd:83:43:86:ef:88:52:af:d2:47:7f:ba:96:12:
         f8:d2:8e:29:77:2f:16:7a:f8:1b:1c:dd:e1:e6:22:8f:63:7a:
         80:36:a8:fa:d7:0c:a7:80:88:8a:73:d0:f9:ff:36:90:91:c8:
         bc:92:22:f1:56:de:21:69:55:70:43:3d:8e:f4:cf:cf:1d:f3:
         07:40:79:c8:d6:a9:fc:a1:4b:87:86:52:63:63:23:cc:f3:fd:
         6d:05:93:30:ca:26:ce:8a:b4:7a:a1:ca:25:16:2a:dd:8f:40:
         10:c5:3e:49:2f:30:70:bd:67:b2:5f:e7:5f:62:39:81:e1:bb:
         5e:3b:d5:96:25:fe:56:ef:56:ba:dc:b3:74:cb:f6:45:fb:c2:
         46:6a:fb:b1:65:da:29:41:63:c9:d9:a9:84:eb:32:fe:b4:a6:
         bd:13:18:4f:33:64:f7:09:1d:82:2b:97:8d:c4:1c:2c:0d:8e:
         8f:f4:77:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 15:55:56 2026 by rpki-client