Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/34352e3233372e34302e302f32322d3332203d3e20323638393736.roa
File:                     34352e3233372e34302e302f32322d3332203d3e20323638393736.roa (raw, json)
Hash identifier:          oPY+P6VCNZCEJe3ouhkBpjFpq1SPUVOWr1ZLnqY5MD8=
Subject key identifier:   E4:F0:07:96:DA:FF:9D:08:D5:16:F5:54:E9:EB:F4:B4:29:D2:E5:81
Certificate issuer:       /CN=81693D2B616AFC0CE814A28BA2622B591A667447
Certificate serial:       0F026E31CE58406183A6934500D8F2FB46A1351F
Authority key identifier: 81:69:3D:2B:61:6A:FC:0C:E8:14:A2:8B:A2:62:2B:59:1A:66:74:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81693D2B616AFC0CE814A28BA2622B591A667447.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/34352e3233372e34302e302f32322d3332203d3e20323638393736.roa
Signing time:             Mon 06 Apr 2026 17:59:27 +0000
ROA not before:           Mon 06 Apr 2026 17:54:27 +0000
ROA not after:            Mon 05 Apr 2027 17:59:27 +0000
asID:                     268976
IP address blocks:        45.237.40.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/81693D2B616AFC0CE814A28BA2622B591A667447.crl
                          rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/81693D2B616AFC0CE814A28BA2622B591A667447.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81693D2B616AFC0CE814A28BA2622B591A667447.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 Apr 2026 07:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:02:6e:31:ce:58:40:61:83:a6:93:45:00:d8:f2:fb:46:a1:35:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81693D2B616AFC0CE814A28BA2622B591A667447
        Validity
            Not Before: Apr  6 17:54:27 2026 GMT
            Not After : Apr  5 17:59:27 2027 GMT
        Subject: CN=E4F00796DAFF9D08D516F554E9EBF4B429D2E581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ec:09:22:5e:e6:42:85:87:ea:40:18:98:be:
                    38:6a:82:c8:4c:d0:06:a7:ec:09:bf:aa:af:a9:4c:
                    c3:61:df:d3:5c:f7:7d:e1:b9:0e:34:e1:ee:6f:6f:
                    68:be:e9:a4:67:7c:17:7e:29:d5:07:47:98:62:54:
                    ed:a9:1d:1b:7d:49:f7:b8:08:93:80:fe:90:ba:aa:
                    52:19:65:a2:53:c6:b1:3b:3d:ae:1c:f5:f4:a7:f0:
                    ac:bc:b2:71:da:62:e9:4c:78:ea:75:9d:69:6d:60:
                    4a:b2:b8:37:8e:b3:76:42:1f:ae:c1:28:c5:96:86:
                    21:b3:61:28:42:4e:c2:ba:c4:59:94:c0:c7:dc:5d:
                    39:2c:77:15:a3:80:78:88:2b:60:2a:ee:ae:5f:1d:
                    34:73:72:4a:90:fb:8e:82:05:c8:5d:d5:28:5f:e3:
                    61:ce:ae:e5:11:a0:57:e8:3f:ab:03:4a:c2:e9:c6:
                    1b:02:6e:a5:69:9e:31:31:68:37:a9:3d:55:24:37:
                    3e:2a:ca:f1:8a:79:98:c5:d5:cc:01:1b:86:16:d3:
                    b3:b6:40:30:2e:04:19:ef:d3:30:db:7b:de:ee:d7:
                    09:2a:94:2a:7a:ad:c3:7b:70:45:e4:b9:a2:aa:14:
                    5f:ee:41:94:66:a1:cd:b4:8d:8c:61:a5:f9:fd:da:
                    aa:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F0:07:96:DA:FF:9D:08:D5:16:F5:54:E9:EB:F4:B4:29:D2:E5:81
            X509v3 Authority Key Identifier:
                keyid:81:69:3D:2B:61:6A:FC:0C:E8:14:A2:8B:A2:62:2B:59:1A:66:74:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/81693D2B616AFC0CE814A28BA2622B591A667447.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81693D2B616AFC0CE814A28BA2622B591A667447.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/34352e3233372e34302e302f32322d3332203d3e20323638393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:98:9e:2f:59:44:27:19:52:04:be:07:df:51:d7:78:d7:09:
         6d:05:e8:45:35:90:a8:ca:0b:22:22:ce:c3:72:4a:85:58:94:
         86:68:ce:05:58:db:b7:5b:c5:c5:9f:1f:09:84:28:2c:6b:05:
         1d:1b:7a:1e:d9:af:3d:20:b3:ff:91:0e:51:7c:9b:c8:4e:2f:
         3a:2b:53:fb:d4:1b:04:6b:df:84:6b:06:54:21:3f:c4:23:2f:
         ec:24:87:2e:09:1d:a5:e0:3e:21:31:3c:37:ae:5d:e9:98:27:
         a4:be:fe:e9:d3:36:87:80:be:fc:ac:98:bc:1e:3d:72:ee:57:
         5a:58:08:d0:1c:18:4a:6a:19:87:e0:41:85:3e:7e:49:db:b6:
         a0:71:7d:44:fc:34:6f:8b:56:56:df:f4:1f:a6:26:d1:90:24:
         f5:b9:2d:53:e4:06:cd:96:87:e7:33:21:8f:39:00:8d:4f:de:
         ce:44:4d:a7:c9:3f:9c:77:62:00:4f:a6:23:e4:54:59:ff:2b:
         3f:5a:36:41:c1:22:13:77:b5:07:67:ff:71:94:2e:9a:9c:55:
         ff:3c:41:99:b9:bd:9d:42:e3:34:d0:dd:14:58:9d:64:c6:16:
         46:3c:a2:cd:a6:f1:7e:e0:89:30:00:2f:d3:cf:af:21:78:15:
         cb:b4:5f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 09:19:39 2026 by rpki-client