Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/34352e3136302e3137312e302f32342d3234203d3e20323638343235.roa
File:                     34352e3136302e3137312e302f32342d3234203d3e20323638343235.roa (raw, json)
Hash identifier:          EURFQRYd1io75AO8BqD1OhAaSdMZsxxkYHxhBjJ1pf4=
Subject key identifier:   98:AD:33:48:BB:DE:7A:D0:5A:E3:14:AA:5E:36:B4:A5:15:79:A1:E9
Certificate issuer:       /CN=E968F08C3BD0A821112BDBD86914ED5964A1FF29
Certificate serial:       0D3B39F580AFB42849689C0F91EC88A19A6BFB29
Authority key identifier: E9:68:F0:8C:3B:D0:A8:21:11:2B:DB:D8:69:14:ED:59:64:A1:FF:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/34352e3136302e3137312e302f32342d3234203d3e20323638343235.roa
Signing time:             Tue 07 Apr 2026 19:12:16 +0000
ROA not before:           Tue 07 Apr 2026 19:07:16 +0000
ROA not after:            Tue 06 Apr 2027 19:12:16 +0000
asID:                     268425
IP address blocks:        45.160.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.crl
                          rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 13:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:3b:39:f5:80:af:b4:28:49:68:9c:0f:91:ec:88:a1:9a:6b:fb:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E968F08C3BD0A821112BDBD86914ED5964A1FF29
        Validity
            Not Before: Apr  7 19:07:16 2026 GMT
            Not After : Apr  6 19:12:16 2027 GMT
        Subject: CN=98AD3348BBDE7AD05AE314AA5E36B4A51579A1E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6b:78:aa:dc:3e:05:53:0d:c4:eb:84:5c:99:
                    6e:f0:91:8a:e3:8a:24:56:c2:b5:e1:18:a6:28:ed:
                    44:09:7d:81:71:27:eb:ae:53:78:c1:c0:fc:72:f4:
                    02:af:d9:08:3f:e3:ee:a3:a9:28:75:bb:a6:68:1a:
                    46:b3:f9:50:01:88:aa:e6:06:f7:ba:f3:2a:d1:12:
                    ec:97:8d:0b:62:7b:1d:78:29:df:c6:ca:b3:7a:44:
                    8a:e7:3a:32:c8:0f:b2:56:95:8a:de:ee:a9:2e:88:
                    67:68:cd:a5:d5:17:40:ff:e9:9c:96:c0:d8:48:ec:
                    55:a4:47:72:82:01:01:c7:ec:18:c9:d1:6c:43:88:
                    f8:bb:09:9f:df:76:53:f7:65:b5:d7:9d:d2:cb:51:
                    56:b1:20:f4:35:e0:ce:b4:d3:6b:6e:44:c7:8e:54:
                    af:43:c4:69:ad:20:d1:44:bb:e0:3d:36:f4:10:94:
                    a7:32:7b:34:d3:7e:0e:24:12:8b:ad:4b:57:05:bd:
                    21:26:24:b7:49:79:1f:6d:56:24:3a:b1:99:bb:ed:
                    3b:00:78:13:a5:3a:fe:8d:14:e4:66:e0:e4:f8:62:
                    3c:c1:c6:48:23:12:e1:80:ff:3d:c0:12:0f:bb:c0:
                    09:78:b1:12:3c:11:e1:d1:5c:2d:a8:66:9d:7d:26:
                    27:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:AD:33:48:BB:DE:7A:D0:5A:E3:14:AA:5E:36:B4:A5:15:79:A1:E9
            X509v3 Authority Key Identifier:
                keyid:E9:68:F0:8C:3B:D0:A8:21:11:2B:DB:D8:69:14:ED:59:64:A1:FF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/34352e3136302e3137312e302f32342d3234203d3e20323638343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:98:10:15:d7:04:2f:12:c7:cd:ba:ae:b5:75:1b:55:74:af:
         9c:a0:81:d3:a6:c2:b8:b9:ba:50:76:09:ad:50:23:3c:af:46:
         17:e4:68:64:5d:fe:68:94:4b:67:1d:7e:ea:a3:de:1f:49:4e:
         75:cc:51:f0:2c:89:71:52:7a:d8:1c:04:7c:23:4d:b9:72:c2:
         64:b7:34:6d:c4:93:8d:50:7c:24:db:ba:c3:50:48:39:67:df:
         1c:2a:de:54:2b:07:e8:22:89:e8:74:c0:84:b2:a8:09:fd:b5:
         76:c1:09:f6:94:fb:ff:45:23:67:e1:2a:46:18:bb:f4:e6:78:
         ed:55:08:53:d8:78:19:ff:f0:82:c5:ee:2f:01:5c:27:22:b3:
         ee:f8:35:84:32:be:d4:8d:a4:8f:dd:f1:fe:d0:e8:d5:78:95:
         91:89:26:76:4a:f0:52:46:8e:06:3c:49:9f:d4:32:b1:44:eb:
         48:63:ef:b7:fe:63:69:d6:63:34:46:d5:4d:0c:a2:5e:3c:ed:
         f6:c2:ce:66:42:8d:ce:d5:00:be:45:2f:96:31:76:c3:5b:0b:
         13:ca:d3:a1:9c:67:df:02:11:fb:48:3c:e0:28:2a:84:76:62:
         87:d9:74:94:4f:f5:21:84:f2:91:15:e4:16:c4:6d:d2:38:e0:
         04:f7:0e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:29:41 2026 by rpki-client