Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/34352e3138342e3138382e302f32342d3234203d3e20323639333437.roa
File:                     34352e3138342e3138382e302f32342d3234203d3e20323639333437.roa (raw, json)
Hash identifier:          N1xslCtzLLUpTvahhRv2qVoBWo1GuNYWjKYG5NkE2E4=
Subject key identifier:   22:67:04:97:94:6E:72:10:BD:BE:ED:7F:6D:B6:E4:E1:B0:00:8F:DF
Certificate issuer:       /CN=6DD53C4867079833703A1EDF2B50AADA5DE39710
Certificate serial:       2B0B3F5D47730E73DF09E86EA904458586A9E1E6
Authority key identifier: 6D:D5:3C:48:67:07:98:33:70:3A:1E:DF:2B:50:AA:DA:5D:E3:97:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DD53C4867079833703A1EDF2B50AADA5DE39710.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/34352e3138342e3138382e302f32342d3234203d3e20323639333437.roa
Signing time:             Sat 24 Jan 2026 19:56:20 +0000
ROA not before:           Sat 24 Jan 2026 19:51:20 +0000
ROA not after:            Sat 23 Jan 2027 19:56:20 +0000
asID:                     269347
IP address blocks:        45.184.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/6DD53C4867079833703A1EDF2B50AADA5DE39710.crl
                          rsync://rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/6DD53C4867079833703A1EDF2B50AADA5DE39710.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DD53C4867079833703A1EDF2B50AADA5DE39710.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 21:30:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:0b:3f:5d:47:73:0e:73:df:09:e8:6e:a9:04:45:85:86:a9:e1:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DD53C4867079833703A1EDF2B50AADA5DE39710
        Validity
            Not Before: Jan 24 19:51:20 2026 GMT
            Not After : Jan 23 19:56:20 2027 GMT
        Subject: CN=22670497946E7210BDBEED7F6DB6E4E1B0008FDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:10:7b:47:82:45:9c:f5:e1:be:81:c2:69:c7:
                    2b:23:a4:e9:71:9b:11:ae:0a:f1:af:86:dd:d3:b3:
                    22:4e:48:ad:43:26:94:59:94:b8:9d:bf:a1:42:0d:
                    5f:23:b9:02:e2:4a:db:0b:96:7a:3a:1a:68:f1:d1:
                    54:1a:60:de:4d:f9:ba:a0:f9:fc:a3:da:e1:fb:3e:
                    50:3b:00:e6:13:64:11:b1:e7:23:c7:1b:c8:cf:8d:
                    88:1b:eb:43:6e:20:8e:55:19:cb:47:5f:cf:d6:9b:
                    c8:bf:e9:de:21:0e:72:f7:03:d5:15:3e:92:51:02:
                    23:44:4d:51:6d:8c:46:22:64:82:bf:33:ac:1f:7b:
                    e9:c4:6a:4a:d8:d7:99:39:ea:c2:76:7e:79:b4:a5:
                    17:a5:01:7e:6c:8f:19:c3:95:7b:03:70:7f:8c:72:
                    9f:2a:c3:22:6b:47:5d:4b:45:cb:71:94:ac:9e:8d:
                    2c:2f:13:32:21:6d:7b:5c:79:31:79:4e:ed:43:ab:
                    d6:aa:9b:ea:33:c5:f8:ac:82:3c:1c:ee:5c:99:26:
                    61:ee:0e:9e:2e:e9:27:a7:28:8c:94:d8:c8:dc:f4:
                    90:c9:fc:17:7c:fb:4b:c5:83:71:b8:f4:2e:cf:9b:
                    92:a9:80:95:f6:77:0c:2c:a3:2d:54:d9:57:70:cd:
                    0d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:67:04:97:94:6E:72:10:BD:BE:ED:7F:6D:B6:E4:E1:B0:00:8F:DF
            X509v3 Authority Key Identifier:
                keyid:6D:D5:3C:48:67:07:98:33:70:3A:1E:DF:2B:50:AA:DA:5D:E3:97:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/6DD53C4867079833703A1EDF2B50AADA5DE39710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DD53C4867079833703A1EDF2B50AADA5DE39710.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/34352e3138342e3138382e302f32342d3234203d3e20323639333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:6b:44:fe:36:13:61:4b:2c:5c:b2:ea:6c:48:09:60:ea:42:
         05:74:07:9b:89:6b:6a:6f:fa:86:6f:ad:b1:1b:ff:60:39:e2:
         16:41:c4:ee:4f:be:b6:6f:a8:09:c4:f0:be:7e:74:c4:ca:e2:
         04:42:1b:a6:81:4d:2d:9a:c8:e8:2b:5e:4b:71:90:e6:04:83:
         2c:8b:5e:94:ad:26:7d:14:fd:2e:13:2a:d7:a4:a5:79:30:23:
         26:a6:95:f6:1e:7f:c1:4f:82:90:72:0d:2c:e2:39:51:47:3c:
         2a:9d:b9:10:9c:90:cf:fa:28:b3:6f:55:c4:db:ea:a4:d5:8c:
         53:15:a2:e8:ee:2e:0a:bc:aa:c9:07:4d:d1:2e:06:ed:0e:08:
         80:fd:c9:ca:05:f8:5f:68:34:32:e8:e8:cb:53:d1:5c:85:d3:
         2c:e7:6d:7c:65:5c:63:ec:72:18:f8:1f:50:e0:72:9d:6c:5e:
         e5:ff:bd:11:8d:63:8c:62:bc:d3:e9:1a:52:21:7d:e0:f7:6a:
         61:37:89:40:19:85:5e:37:08:17:22:51:7a:a2:d6:5c:07:a1:
         57:9c:96:fc:70:cf:31:97:2b:55:49:5a:6a:f5:cd:40:72:84:
         8e:78:85:b0:64:b6:93:93:0c:b3:6e:e6:b6:0c:92:de:84:d7:
         24:a8:ca:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 08:20:11 2026 by rpki-client