Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/34352e3137372e3137342e302f32332d3233203d3e20323639303338.roa
File:                     34352e3137372e3137342e302f32332d3233203d3e20323639303338.roa (raw, json)
Hash identifier:          oyXn/08uC6GV/1hZ2nYtMco2PirLd7Xco2G4eI5i7CE=
Subject key identifier:   57:1C:A4:1E:EC:18:3C:73:83:F4:64:BC:96:AB:96:2B:DD:68:FC:57
Certificate issuer:       /CN=7CF640D40A98BEDEB3FAC955113876C0B04FEE62
Certificate serial:       6034946A5DF615D2A087142935536F9A560C669C
Authority key identifier: 7C:F6:40:D4:0A:98:BE:DE:B3:FA:C9:55:11:38:76:C0:B0:4F:EE:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/34352e3137372e3137342e302f32332d3233203d3e20323639303338.roa
Signing time:             Mon 06 Apr 2026 13:25:11 +0000
ROA not before:           Mon 06 Apr 2026 13:20:11 +0000
ROA not after:            Mon 05 Apr 2027 13:25:11 +0000
asID:                     269038
IP address blocks:        45.177.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.crl
                          rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 03:53:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:34:94:6a:5d:f6:15:d2:a0:87:14:29:35:53:6f:9a:56:0c:66:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CF640D40A98BEDEB3FAC955113876C0B04FEE62
        Validity
            Not Before: Apr  6 13:20:11 2026 GMT
            Not After : Apr  5 13:25:11 2027 GMT
        Subject: CN=571CA41EEC183C7383F464BC96AB962BDD68FC57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:df:83:6f:73:8b:24:4b:e0:68:ac:48:56:e7:
                    ac:7f:9f:c7:eb:7d:57:cc:6c:37:56:c0:68:2b:ec:
                    3a:72:d2:19:95:b5:b0:b4:f6:35:70:68:4a:a0:96:
                    f9:5a:5a:d7:d8:d0:3c:f4:f8:7c:d7:38:c6:dd:a1:
                    a7:57:f1:27:fe:e1:c0:96:e8:f6:2d:60:e9:2b:bb:
                    2f:99:d5:51:e3:b4:fb:44:52:9c:b6:5c:ff:56:f6:
                    01:90:f2:04:2c:d7:1d:7c:df:84:e2:46:c8:bb:63:
                    10:b2:e9:0a:23:04:54:f8:68:66:02:73:a6:d6:c7:
                    b1:78:7c:3a:ac:df:63:8a:9b:f1:b4:8b:a9:fb:90:
                    45:91:e5:85:73:4f:14:a4:fc:b0:76:ab:99:4e:bd:
                    4a:48:2c:e2:b8:8a:7b:74:32:3a:63:37:5b:a3:43:
                    e0:a4:20:e0:4c:0a:a8:e3:64:80:ac:c3:0f:81:60:
                    ae:f4:29:e7:2f:fa:9f:6d:f0:44:a0:48:72:fe:a8:
                    d8:cc:2d:a1:33:c0:02:06:b1:ae:6a:15:60:1d:01:
                    89:5a:40:8b:fe:39:7f:36:b5:b1:47:1c:0a:c5:66:
                    8b:3a:80:ec:b0:9f:de:46:30:4c:c6:9e:e3:f6:02:
                    a6:07:90:ad:8a:28:68:d1:14:28:6d:d3:a1:d3:be:
                    6f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:1C:A4:1E:EC:18:3C:73:83:F4:64:BC:96:AB:96:2B:DD:68:FC:57
            X509v3 Authority Key Identifier:
                keyid:7C:F6:40:D4:0A:98:BE:DE:B3:FA:C9:55:11:38:76:C0:B0:4F:EE:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/34352e3137372e3137342e302f32332d3233203d3e20323639303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:e7:6d:fe:54:71:d2:b3:6b:4a:51:a1:6d:86:63:1c:25:1d:
         4f:6f:14:f4:bc:ed:e9:08:90:8a:3d:74:94:93:7b:72:75:4d:
         e9:7a:8c:dc:e5:e9:5d:84:c1:51:84:98:12:10:b5:1c:f3:b7:
         e9:a7:23:f2:c9:81:21:bd:42:0c:3b:82:dd:e7:2e:73:e8:30:
         5b:97:c5:6c:a5:86:61:ef:9e:3a:14:f7:d6:19:77:9e:97:fe:
         3d:bb:f7:3b:89:3b:f4:24:db:c8:3f:ef:d2:6a:21:24:3d:d9:
         f6:43:7b:d4:47:37:4b:62:38:5e:64:22:cd:57:23:8f:b6:53:
         d6:ab:0b:c5:16:6b:f5:36:f5:41:c8:66:27:0f:d7:5f:ee:fe:
         5a:c2:41:5d:94:14:8e:53:3a:1e:ce:fc:7d:66:ac:bd:3d:24:
         5b:27:60:73:db:95:08:da:5e:f4:45:88:cb:db:22:16:4e:fd:
         c5:5a:16:b1:f0:d7:9b:ed:e4:3b:d0:a8:1c:5b:6e:65:ae:ad:
         3c:27:e4:24:a0:2d:71:d2:60:f2:7e:0e:1e:9e:b6:d0:ac:50:
         0b:e0:33:12:31:45:20:b0:ed:69:42:b1:b5:c6:09:ba:3b:0b:
         c7:30:df:40:d1:89:ce:d6:72:a7:3c:ad:f9:d7:1f:9d:f0:d3:
         cb:f1:eb:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 19:13:00 2026 by rpki-client