Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/34352e3137382e3230342e302f32322d3234203d3e20323639303536.roa
File:                     34352e3137382e3230342e302f32322d3234203d3e20323639303536.roa (raw, json)
Hash identifier:          tBXdwLy7/tWHVQvsRGNA04PQgcTdIrEjDQgrZp1wOJM=
Subject key identifier:   F8:C6:E5:C9:BD:8A:29:86:6B:68:9B:C2:26:6B:28:E9:80:11:31:6F
Certificate issuer:       /CN=424C5A8D6BB2C966347D9D6030EE2504C1547766
Certificate serial:       60C903EAB6B0D0B9357B4305E21AA0ABDDB32417
Authority key identifier: 42:4C:5A:8D:6B:B2:C9:66:34:7D:9D:60:30:EE:25:04:C1:54:77:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/424C5A8D6BB2C966347D9D6030EE2504C1547766.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/34352e3137382e3230342e302f32322d3234203d3e20323639303536.roa
Signing time:             Thu 26 Mar 2026 13:47:18 +0000
ROA not before:           Thu 26 Mar 2026 13:42:18 +0000
ROA not after:            Thu 25 Mar 2027 13:47:18 +0000
asID:                     269056
IP address blocks:        45.178.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/424C5A8D6BB2C966347D9D6030EE2504C1547766.crl
                          rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/424C5A8D6BB2C966347D9D6030EE2504C1547766.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/424C5A8D6BB2C966347D9D6030EE2504C1547766.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 03:03:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c9:03:ea:b6:b0:d0:b9:35:7b:43:05:e2:1a:a0:ab:dd:b3:24:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=424C5A8D6BB2C966347D9D6030EE2504C1547766
        Validity
            Not Before: Mar 26 13:42:18 2026 GMT
            Not After : Mar 25 13:47:18 2027 GMT
        Subject: CN=F8C6E5C9BD8A29866B689BC2266B28E98011316F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3e:cd:05:50:a8:e7:e0:5d:9a:c0:3e:97:8b:
                    bc:44:a5:cf:f6:ee:49:1d:83:74:7d:70:f1:06:98:
                    e0:03:23:a0:1c:2c:fc:de:bf:51:ce:1b:59:9d:c7:
                    1b:0d:9e:7e:dd:cf:e3:15:ca:7b:81:2e:5b:59:5a:
                    52:42:d8:76:28:e4:0f:c5:b3:5e:cb:2f:46:c4:d4:
                    a3:5a:29:18:26:3e:2d:9e:83:ae:ce:f0:58:c4:16:
                    4f:29:f2:67:5e:ff:a3:92:bc:dd:39:ec:2b:88:b9:
                    14:b4:52:23:16:85:4d:bf:d8:bf:d5:f7:a2:53:d0:
                    89:b8:5c:6f:06:6f:d8:c2:b8:a4:88:cc:10:09:60:
                    16:19:f1:79:a9:4f:bd:55:02:47:02:41:63:66:9a:
                    05:8b:15:2f:7d:ca:e7:3c:bf:58:b1:da:b2:dc:d2:
                    0c:96:fd:56:67:7a:03:75:f4:a6:2f:09:12:ee:da:
                    f7:77:88:5c:1b:f0:ab:b0:ad:bb:ae:2d:ef:3e:58:
                    2d:16:1e:2f:6a:57:71:c0:8d:ff:05:78:a5:98:a0:
                    a0:57:ce:9b:26:0a:2d:75:53:06:50:c8:40:ca:20:
                    74:5d:14:4e:83:4a:62:e3:05:5b:f0:b4:71:bb:04:
                    4f:46:cf:1a:55:d9:c7:cd:73:67:7e:63:38:7d:8f:
                    c2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:C6:E5:C9:BD:8A:29:86:6B:68:9B:C2:26:6B:28:E9:80:11:31:6F
            X509v3 Authority Key Identifier:
                keyid:42:4C:5A:8D:6B:B2:C9:66:34:7D:9D:60:30:EE:25:04:C1:54:77:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/424C5A8D6BB2C966347D9D6030EE2504C1547766.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/424C5A8D6BB2C966347D9D6030EE2504C1547766.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/34352e3137382e3230342e302f32322d3234203d3e20323639303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:bf:94:d1:92:c4:82:5a:9c:03:95:1c:5a:b6:b9:53:ab:31:
         2f:b9:fc:4b:ae:68:28:24:b4:51:dd:72:c8:77:ce:40:ac:6e:
         a4:5f:4d:02:38:88:c4:9d:08:39:a2:19:5c:7b:59:0a:c8:0d:
         8c:9c:8f:c0:2e:a9:67:a7:ed:d4:fb:b4:6a:ef:8a:b6:c6:3f:
         98:fa:a5:e5:22:ee:2c:24:9b:5a:31:ac:5e:24:c8:49:49:f1:
         d4:a0:3b:bf:10:70:02:0f:09:66:f9:ad:7a:a0:e2:08:77:71:
         ee:01:13:49:5a:fb:b1:f8:b5:a8:58:15:d0:15:3a:10:58:87:
         63:e6:e6:5e:00:4e:8d:ee:42:cc:93:fd:38:b2:95:8e:90:1b:
         03:35:b6:3d:95:fd:bf:6c:c4:e7:d6:f9:6b:a7:2c:ad:2c:b0:
         33:f3:1a:5b:3e:29:83:c9:b6:d3:d1:42:b9:21:52:29:c6:c4:
         dc:3c:35:93:8b:a5:c5:a3:74:b0:0a:dc:15:c3:08:f0:36:ad:
         2e:e9:1f:48:3b:b0:df:92:4a:94:12:1e:af:71:1e:f3:8f:b7:
         a8:ea:8f:c2:71:fe:ef:7e:f4:3d:6f:56:0e:2b:cb:c2:b3:70:
         af:33:bf:8c:f6:c1:4e:0f:c3:71:cf:8c:1e:94:4d:87:e0:26:
         33:19:4d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 12:50:44 2026 by rpki-client