Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/34352e3233372e3234302e302f32332d3233203d3e20323638333037.roa
File:                     34352e3233372e3234302e302f32332d3233203d3e20323638333037.roa (raw, json)
Hash identifier:          BqpMMrdgvJXPwMV9I0FuZ0jLqdn4Tu0A9eoKoRsA5Yk=
Subject key identifier:   CB:4E:EB:AF:B7:BC:97:C9:1C:E4:75:23:4F:AA:E1:AB:33:B2:C4:3E
Certificate issuer:       /CN=919559B7857557ABD92797154F2A7923EF470015
Certificate serial:       25716C610EDC6269E5363E1BFD4D3BEE6A583108
Authority key identifier: 91:95:59:B7:85:75:57:AB:D9:27:97:15:4F:2A:79:23:EF:47:00:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/919559B7857557ABD92797154F2A7923EF470015.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/34352e3233372e3234302e302f32332d3233203d3e20323638333037.roa
Signing time:             Sat 28 Mar 2026 13:23:49 +0000
ROA not before:           Sat 28 Mar 2026 13:18:49 +0000
ROA not after:            Sat 27 Mar 2027 13:23:49 +0000
asID:                     268307
IP address blocks:        45.237.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/919559B7857557ABD92797154F2A7923EF470015.crl
                          rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/919559B7857557ABD92797154F2A7923EF470015.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/919559B7857557ABD92797154F2A7923EF470015.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 17:16:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:71:6c:61:0e:dc:62:69:e5:36:3e:1b:fd:4d:3b:ee:6a:58:31:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=919559B7857557ABD92797154F2A7923EF470015
        Validity
            Not Before: Mar 28 13:18:49 2026 GMT
            Not After : Mar 27 13:23:49 2027 GMT
        Subject: CN=CB4EEBAFB7BC97C91CE475234FAAE1AB33B2C43E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:39:f7:7d:01:22:19:ed:5e:58:03:5e:6f:27:
                    05:1b:6e:91:8e:6f:16:99:c5:06:37:56:ce:8a:de:
                    f3:1d:c9:24:1d:d0:31:f7:94:3d:a6:8e:24:b2:b8:
                    ed:7a:db:eb:39:dd:f6:92:08:3d:3e:18:9e:e9:7a:
                    c5:2f:5a:c5:e7:c8:42:7a:0e:0d:da:9d:89:62:a6:
                    03:cc:ba:44:e5:6f:ec:63:a3:93:f9:1d:40:d0:a0:
                    9e:6c:a2:8f:0a:88:e0:27:5f:4f:88:05:82:35:35:
                    4e:ef:c6:52:2f:43:18:ba:6a:38:b7:de:f4:ee:10:
                    ed:59:80:5d:34:fc:5f:bc:fe:bb:86:48:81:64:4e:
                    d7:02:4e:c7:19:8c:1f:9f:b1:bc:01:cb:b6:ad:a4:
                    2f:19:5c:6b:cf:c2:22:f8:0c:14:52:8b:05:f4:06:
                    70:de:2f:95:37:ae:27:6f:20:2d:47:82:ac:90:3f:
                    92:bc:43:12:97:99:18:66:7b:da:4b:01:21:36:19:
                    4e:c1:5b:e5:74:52:eb:c8:cf:1f:22:18:54:0f:b7:
                    9d:dd:38:35:46:a0:bf:41:cc:d0:fc:7f:94:8d:be:
                    26:ad:10:41:08:ad:1e:b3:9c:db:45:0b:bb:19:76:
                    bc:b2:e4:ee:45:c9:bc:ff:2f:dc:71:97:c8:cd:b6:
                    df:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:4E:EB:AF:B7:BC:97:C9:1C:E4:75:23:4F:AA:E1:AB:33:B2:C4:3E
            X509v3 Authority Key Identifier:
                keyid:91:95:59:B7:85:75:57:AB:D9:27:97:15:4F:2A:79:23:EF:47:00:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/919559B7857557ABD92797154F2A7923EF470015.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/919559B7857557ABD92797154F2A7923EF470015.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/34352e3233372e3234302e302f32332d3233203d3e20323638333037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c6:7d:c6:ed:4d:5c:21:a0:d8:b4:b7:e8:d2:a6:e4:37:0a:50:
         f7:27:9e:a5:da:49:cb:a3:23:27:5d:d3:2e:7a:0a:b9:df:d0:
         3c:be:6d:6c:75:4a:14:2f:83:d9:02:1f:b3:1e:03:49:ca:40:
         6c:ba:66:4f:0a:4b:0d:83:ba:f6:90:70:e9:16:6f:83:e6:06:
         3b:b0:0b:03:68:f8:36:63:7f:0e:36:fe:df:fa:5f:5f:7f:ad:
         7d:83:b6:ef:25:34:2a:b1:d9:93:73:c0:97:70:70:ad:de:61:
         de:8d:62:c5:03:80:75:25:82:88:5f:68:5f:e5:21:f0:e0:16:
         60:12:44:8e:49:45:bc:2b:ab:ec:98:08:03:60:9e:8a:0d:75:
         6f:6d:62:f4:79:14:19:5f:4f:bd:30:33:ab:61:bd:f2:aa:a2:
         92:e0:66:b0:4f:de:89:87:dc:2c:3e:fd:08:74:b0:1a:f7:14:
         95:08:55:09:4a:55:38:f3:3b:ed:26:80:fa:ca:e9:2f:e0:b0:
         65:ad:39:c8:16:97:91:fb:1d:3b:dc:24:a0:af:39:f1:3c:cc:
         dd:32:a1:f2:a3:18:5d:4a:68:73:03:87:6a:f9:47:f7:fb:f1:
         f2:41:62:fd:cf:17:59:b3:98:3f:1f:88:e4:56:33:16:85:f1:
         15:e2:14:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 22:00:05 2026 by rpki-client