Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ED9JmKkwXSnVGPn7DmgL6C4Cyg8kcRYqFLsTjwcgM9Re/0/34352e37302e3231322e302f32322d3332203d3e20323637353837.roa
File:                     34352e37302e3231322e302f32322d3332203d3e20323637353837.roa (raw, json)
Hash identifier:          gbj/fuCJOhO3fKvPNd1CQ+an7sUI5tNdjp6Oeh2CnYQ=
Subject key identifier:   79:9B:B2:C9:15:70:FB:BD:3B:95:AE:1F:B0:8E:E3:FC:74:35:A2:AE
Certificate issuer:       /CN=0CF6378B0C328B8808911B34C9ECF5186D90691F
Certificate serial:       495AC1A2339B7F07D9B6E8EB0631A3C6C551BAEE
Authority key identifier: 0C:F6:37:8B:0C:32:8B:88:08:91:1B:34:C9:EC:F5:18:6D:90:69:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF6378B0C328B8808911B34C9ECF5186D90691F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ED9JmKkwXSnVGPn7DmgL6C4Cyg8kcRYqFLsTjwcgM9Re/0/34352e37302e3231322e302f32322d3332203d3e20323637353837.roa
Signing time:             Wed 01 Apr 2026 14:06:55 +0000
ROA not before:           Wed 01 Apr 2026 14:01:55 +0000
ROA not after:            Wed 31 Mar 2027 14:06:55 +0000
asID:                     267587
IP address blocks:        45.70.212.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ED9JmKkwXSnVGPn7DmgL6C4Cyg8kcRYqFLsTjwcgM9Re/0/0CF6378B0C328B8808911B34C9ECF5186D90691F.crl
                          rsync://rpki-repo.registro.br/repo/ED9JmKkwXSnVGPn7DmgL6C4Cyg8kcRYqFLsTjwcgM9Re/0/0CF6378B0C328B8808911B34C9ECF5186D90691F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF6378B0C328B8808911B34C9ECF5186D90691F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 08:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:5a:c1:a2:33:9b:7f:07:d9:b6:e8:eb:06:31:a3:c6:c5:51:ba:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF6378B0C328B8808911B34C9ECF5186D90691F
        Validity
            Not Before: Apr  1 14:01:55 2026 GMT
            Not After : Mar 31 14:06:55 2027 GMT
        Subject: CN=799BB2C91570FBBD3B95AE1FB08EE3FC7435A2AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:47:f9:81:00:06:9a:7b:0a:43:fa:10:9b:ad:
                    f4:2b:b8:9e:83:59:e3:74:12:ea:81:73:02:22:1e:
                    1f:03:0f:02:bd:d0:2b:cf:b9:36:88:53:86:a9:4f:
                    23:1d:f0:cd:d0:70:6d:d1:c6:57:f7:e1:41:87:06:
                    d0:45:cc:bd:08:da:e9:92:81:4d:49:e5:f6:d4:a6:
                    b7:72:ce:05:ba:d5:b4:69:b1:d4:8c:c4:44:ca:2d:
                    93:90:63:06:02:02:8b:b1:5e:c2:ba:ec:63:02:84:
                    81:05:e0:11:43:b7:1d:d0:90:19:9f:d9:9b:96:14:
                    c1:44:66:ec:52:cc:57:ba:83:4e:df:75:b1:9c:1b:
                    8d:d5:10:f4:ac:93:86:a4:c5:37:52:a6:7b:de:fa:
                    56:17:16:9b:5b:df:60:ed:b2:c2:6c:90:06:27:38:
                    f0:48:01:14:0f:cb:00:84:f7:5a:90:77:b5:98:9d:
                    3f:72:89:c7:92:e7:a0:13:e7:c8:f1:eb:95:0c:19:
                    54:fe:ee:5f:81:af:b9:1d:bc:22:bd:fb:ba:dc:2f:
                    8c:83:08:4b:8d:0f:52:72:12:d5:dc:47:08:51:77:
                    e8:05:16:76:4c:49:10:24:6e:80:79:41:c4:59:7c:
                    ad:2d:96:0a:e2:72:53:17:df:53:9d:b3:de:64:a0:
                    73:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:9B:B2:C9:15:70:FB:BD:3B:95:AE:1F:B0:8E:E3:FC:74:35:A2:AE
            X509v3 Authority Key Identifier:
                keyid:0C:F6:37:8B:0C:32:8B:88:08:91:1B:34:C9:EC:F5:18:6D:90:69:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ED9JmKkwXSnVGPn7DmgL6C4Cyg8kcRYqFLsTjwcgM9Re/0/0CF6378B0C328B8808911B34C9ECF5186D90691F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF6378B0C328B8808911B34C9ECF5186D90691F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ED9JmKkwXSnVGPn7DmgL6C4Cyg8kcRYqFLsTjwcgM9Re/0/34352e37302e3231322e302f32322d3332203d3e20323637353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:52:b6:13:2b:01:11:97:de:83:a9:c5:0a:82:7e:d6:8e:6b:
         9a:7c:eb:5f:34:b8:af:a6:43:fe:a0:d3:9d:12:89:d2:ee:18:
         d0:dc:8d:d4:48:1f:e8:54:4a:af:ca:06:bc:21:c4:4d:f7:22:
         c7:d5:c5:8d:29:d1:6c:e0:f7:a1:83:d3:40:ed:97:0e:f9:2f:
         16:85:5f:7f:c5:d1:25:e2:10:e4:30:e0:1b:9b:36:96:0a:56:
         ca:0d:1b:fd:4c:15:a5:6d:be:e6:22:a2:01:33:5e:4d:a6:26:
         d7:0b:5e:a4:3b:a4:bd:42:d1:d3:ab:09:ed:02:90:34:0c:f2:
         37:9d:81:a5:99:12:cf:c1:2c:ae:8b:10:75:a3:f3:93:68:ac:
         a6:6d:ed:83:b9:b0:e6:38:ef:6b:c7:22:4c:2d:11:bb:f5:45:
         9a:c1:d1:78:79:94:1c:91:ea:40:8e:02:8a:c9:68:31:64:9c:
         d2:97:f5:29:bb:de:f5:12:f7:09:04:b1:bd:77:03:10:9a:47:
         fc:2d:1e:6e:dc:e7:64:42:73:bf:66:49:02:01:78:96:f0:f6:
         31:79:a7:ce:e6:c3:3c:db:98:9e:b2:80:b3:b0:3f:68:62:b6:
         6b:01:a9:a2:6e:18:c8:9a:fd:20:e3:cd:4c:47:b4:4a:30:51:
         e2:02:cf:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 18:59:28 2026 by rpki-client