Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/34352e3137362e3133362e302f32322d3332203d3e20323638393433.roa
File:                     34352e3137362e3133362e302f32322d3332203d3e20323638393433.roa (raw, json)
Hash identifier:          TRPA58Mcz7Ddd+zDIN9Mtsekqgb0NwFP2Lkur8Q94xQ=
Subject key identifier:   27:10:2A:FA:3E:36:DD:DF:F7:DD:52:22:CD:C9:B2:79:C2:57:56:AD
Certificate issuer:       /CN=DA8E43A00C92DE5BA2203260A37BE38E19F1C2A2
Certificate serial:       0DEA34581CC2C5F49B34333C99AD00EA6A0BC3C6
Authority key identifier: DA:8E:43:A0:0C:92:DE:5B:A2:20:32:60:A3:7B:E3:8E:19:F1:C2:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA8E43A00C92DE5BA2203260A37BE38E19F1C2A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/34352e3137362e3133362e302f32322d3332203d3e20323638393433.roa
Signing time:             Thu 26 Mar 2026 14:59:50 +0000
ROA not before:           Thu 26 Mar 2026 14:54:50 +0000
ROA not after:            Thu 25 Mar 2027 14:59:50 +0000
asID:                     268943
IP address blocks:        45.176.136.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/DA8E43A00C92DE5BA2203260A37BE38E19F1C2A2.crl
                          rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/DA8E43A00C92DE5BA2203260A37BE38E19F1C2A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA8E43A00C92DE5BA2203260A37BE38E19F1C2A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 04:29:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:ea:34:58:1c:c2:c5:f4:9b:34:33:3c:99:ad:00:ea:6a:0b:c3:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA8E43A00C92DE5BA2203260A37BE38E19F1C2A2
        Validity
            Not Before: Mar 26 14:54:50 2026 GMT
            Not After : Mar 25 14:59:50 2027 GMT
        Subject: CN=27102AFA3E36DDDFF7DD5222CDC9B279C25756AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:89:2a:30:66:f7:c3:b4:29:bb:29:af:cb:3a:
                    39:62:e6:f4:ee:d1:11:12:1a:3c:e5:37:5f:5d:1e:
                    fd:23:52:3b:f8:f1:93:fc:35:a0:81:ef:27:e5:47:
                    35:e4:69:c7:05:5d:13:31:3d:ba:ac:96:77:83:1e:
                    0c:df:05:b4:51:e9:4a:2e:af:3d:a0:f0:32:d5:ad:
                    69:ff:2f:ac:7a:04:65:7e:04:ca:35:f8:5a:6f:31:
                    25:02:0a:9d:2d:a2:34:41:b1:d2:cd:85:ed:60:84:
                    f1:82:02:b8:e6:85:f9:d7:8a:b6:3a:e3:86:d5:7b:
                    3c:e8:52:4d:33:1b:85:7e:a2:5e:e2:fa:0a:77:b8:
                    db:6e:73:85:d3:ea:ea:3e:7e:f4:23:f8:a2:43:67:
                    9a:04:70:32:11:d2:54:62:19:98:cd:5c:6d:43:db:
                    72:43:49:3b:3f:ff:bd:6c:4d:72:58:58:f8:69:b4:
                    76:39:4b:a6:5c:33:b3:6b:7b:29:0b:7b:ae:96:3b:
                    b8:ab:95:9f:61:03:73:87:c7:90:bf:2e:0f:aa:bd:
                    21:9a:5f:83:bc:24:bd:4a:d8:57:c2:77:6c:99:0e:
                    f2:43:06:03:9c:fc:11:94:e4:5d:0d:1e:13:f9:8c:
                    c1:f3:5d:8f:99:66:78:04:14:66:bb:af:5c:2f:fd:
                    5e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:10:2A:FA:3E:36:DD:DF:F7:DD:52:22:CD:C9:B2:79:C2:57:56:AD
            X509v3 Authority Key Identifier:
                keyid:DA:8E:43:A0:0C:92:DE:5B:A2:20:32:60:A3:7B:E3:8E:19:F1:C2:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/DA8E43A00C92DE5BA2203260A37BE38E19F1C2A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA8E43A00C92DE5BA2203260A37BE38E19F1C2A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/34352e3137362e3133362e302f32322d3332203d3e20323638393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bf:2a:34:41:ff:53:ef:f5:5e:5f:80:dd:82:6f:45:3c:fe:e9:
         a3:7a:53:5c:c6:52:a8:c7:a0:8f:e4:02:ef:c1:00:ea:89:ff:
         b4:7f:ff:80:fa:b0:24:55:04:18:e6:ad:ce:0b:9b:b4:20:7b:
         53:d8:cb:f4:8a:4c:71:bb:74:8f:c5:28:18:00:1d:e3:3f:cd:
         f9:e6:29:24:89:9c:fa:69:cc:d4:33:1a:ce:ad:bb:85:9d:46:
         59:fd:e8:df:fb:a5:73:70:92:e2:ba:a8:5e:6a:76:eb:95:ad:
         5c:3c:73:a4:57:34:f9:e2:3e:da:d1:0b:0a:61:55:5c:89:35:
         62:5e:60:c6:e8:79:bb:98:a6:d9:77:d2:4f:b8:71:08:4a:de:
         76:f8:1b:b4:12:c3:f7:26:1b:db:90:7d:eb:b1:26:77:63:f7:
         14:39:eb:bb:6f:20:5b:90:68:7b:7c:4a:6d:22:f6:12:85:b1:
         3a:59:30:89:fe:0b:16:ba:b9:50:17:9a:aa:de:38:4c:d0:31:
         8f:c4:f0:d6:81:f6:31:48:5b:a1:2f:31:f0:ea:f8:ad:24:84:
         63:70:75:37:8b:03:a7:42:b4:b0:bb:af:7a:14:36:38:4c:a7:
         0c:c0:57:d7:03:45:41:71:eb:c7:42:6e:04:8d:68:36:31:6e:
         8b:64:df:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 16:45:53 2026 by rpki-client