Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/34352e37302e3230362e302f32342d3234203d3e20323637353836.roa
File:                     34352e37302e3230362e302f32342d3234203d3e20323637353836.roa (raw, json)
Hash identifier:          6pHgwJ2cBJNeMoywLQfJKDWb0vVE//XaITwXdGGeU5s=
Subject key identifier:   92:C5:77:50:55:11:6F:CE:56:8C:DA:78:69:88:E9:05:F4:59:C8:FD
Certificate issuer:       /CN=1E240D6445B519D0AD6DBAB1529023E200344D71
Certificate serial:       08046AE22B876C66FA4CAF48AE64048C2CAC33AA
Authority key identifier: 1E:24:0D:64:45:B5:19:D0:AD:6D:BA:B1:52:90:23:E2:00:34:4D:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E240D6445B519D0AD6DBAB1529023E200344D71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/34352e37302e3230362e302f32342d3234203d3e20323637353836.roa
Signing time:             Wed 25 Mar 2026 21:25:16 +0000
ROA not before:           Wed 25 Mar 2026 21:20:16 +0000
ROA not after:            Wed 24 Mar 2027 21:25:16 +0000
asID:                     267586
IP address blocks:        45.70.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/1E240D6445B519D0AD6DBAB1529023E200344D71.crl
                          rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/1E240D6445B519D0AD6DBAB1529023E200344D71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E240D6445B519D0AD6DBAB1529023E200344D71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 11:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:04:6a:e2:2b:87:6c:66:fa:4c:af:48:ae:64:04:8c:2c:ac:33:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E240D6445B519D0AD6DBAB1529023E200344D71
        Validity
            Not Before: Mar 25 21:20:16 2026 GMT
            Not After : Mar 24 21:25:16 2027 GMT
        Subject: CN=92C5775055116FCE568CDA786988E905F459C8FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a3:a1:2f:fb:0b:19:44:b6:7b:e9:a1:10:77:
                    ce:72:0b:24:53:68:3a:2c:23:66:2c:83:8e:1f:95:
                    9c:fc:f8:37:11:c5:d5:0b:ed:17:42:e4:40:52:e9:
                    bd:41:35:c6:b6:5a:2d:ce:2e:61:6f:e6:cf:bf:bd:
                    98:d5:93:60:0e:96:5d:4b:71:2b:fc:74:2b:79:8b:
                    29:31:5c:3a:3b:37:db:7d:29:be:7e:69:93:3d:e5:
                    a0:a7:13:f5:22:50:bf:56:cf:a2:2a:7c:81:46:d5:
                    6c:6d:f4:05:87:97:6a:a5:e1:95:7b:7d:08:8a:88:
                    54:e5:59:ea:6e:e9:66:ac:69:0c:47:1b:5f:38:46:
                    7c:19:a9:e8:a6:f9:a8:65:9a:2b:d8:f8:7c:c2:8e:
                    7c:4b:2a:b4:21:2c:d9:89:f1:b1:2e:3a:32:19:0a:
                    52:d1:d4:68:1b:f0:7e:43:54:f7:56:01:01:fd:5f:
                    16:67:13:75:c2:3b:00:06:e3:e4:09:12:51:b2:21:
                    e3:57:dc:c8:1d:ce:09:6d:e7:49:ad:fb:d9:20:70:
                    c2:d9:de:ee:3f:20:62:1d:a4:d4:10:70:a9:b4:28:
                    79:21:e0:2a:ae:66:40:8b:81:e1:62:4a:c8:70:92:
                    67:f2:06:3b:bb:5b:28:b5:ef:23:eb:bc:7f:94:e9:
                    b3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C5:77:50:55:11:6F:CE:56:8C:DA:78:69:88:E9:05:F4:59:C8:FD
            X509v3 Authority Key Identifier:
                keyid:1E:24:0D:64:45:B5:19:D0:AD:6D:BA:B1:52:90:23:E2:00:34:4D:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/1E240D6445B519D0AD6DBAB1529023E200344D71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E240D6445B519D0AD6DBAB1529023E200344D71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/34352e37302e3230362e302f32342d3234203d3e20323637353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:a8:0c:7f:88:8d:3b:d8:b7:2d:e0:55:5b:cf:f7:d3:54:36:
         ae:be:be:84:8f:8a:5b:75:4e:20:e6:ad:60:30:1f:56:d9:bf:
         bd:a9:f1:78:2e:69:d1:d3:0d:f1:cf:f3:79:7c:7b:0e:a6:71:
         ba:6e:f1:99:02:4e:91:4f:8c:d1:87:1b:46:c7:af:61:de:41:
         c6:17:bf:b6:23:65:fe:2c:1b:51:03:e1:78:65:fd:7b:31:40:
         f7:3b:80:21:14:ee:c4:f5:18:23:0a:46:0c:1c:f2:91:a1:91:
         33:9e:59:e2:db:28:f0:e1:dd:87:03:b1:d3:24:af:f7:77:2a:
         f3:d7:58:46:52:17:c9:5c:f7:92:41:86:4d:28:fc:7a:bd:38:
         22:c0:9d:1c:09:ad:18:10:74:35:23:1d:64:ac:9b:9f:28:17:
         c4:95:99:62:e2:ed:f3:4c:9f:5d:4b:e2:7d:ac:88:d3:34:03:
         e7:7f:ff:18:f2:3f:85:9d:fe:b7:0a:aa:94:13:e8:64:fb:bb:
         66:7a:fc:8d:5c:62:66:9f:66:91:5d:c9:a1:28:de:01:4e:30:
         f1:6f:e1:06:87:fd:46:b3:4d:ff:82:69:85:f6:cd:bf:92:0c:
         ba:80:53:82:2e:97:7f:41:e2:cb:42:57:e5:3d:c6:c4:92:8c:
         8a:c3:a4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 16:45:16 2026 by rpki-client