Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/37322e34342e31362e302f32332d3233203d3e20323636313635.roa
File:                     37322e34342e31362e302f32332d3233203d3e20323636313635.roa (raw, json)
Hash identifier:          cM062DMAZ52P3lzCGed3MKwQ/g13hAF1JRXB5FQ27/w=
Subject key identifier:   44:FE:B0:D3:EF:41:6D:69:10:98:66:9B:4A:E3:3D:5E:70:AB:8C:EA
Certificate issuer:       /CN=35820974DAE7FC3F1AE8D279269AB670ABA40E8F
Certificate serial:       405935951A3ECDBB88F57BA7DCB375DDB85AE2B1
Authority key identifier: 35:82:09:74:DA:E7:FC:3F:1A:E8:D2:79:26:9A:B6:70:AB:A4:0E:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35820974DAE7FC3F1AE8D279269AB670ABA40E8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/37322e34342e31362e302f32332d3233203d3e20323636313635.roa
Signing time:             Fri 23 Jan 2026 19:57:57 +0000
ROA not before:           Fri 23 Jan 2026 19:52:57 +0000
ROA not after:            Fri 22 Jan 2027 19:57:57 +0000
asID:                     266165
IP address blocks:        72.44.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/35820974DAE7FC3F1AE8D279269AB670ABA40E8F.crl
                          rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/35820974DAE7FC3F1AE8D279269AB670ABA40E8F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35820974DAE7FC3F1AE8D279269AB670ABA40E8F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 10:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:59:35:95:1a:3e:cd:bb:88:f5:7b:a7:dc:b3:75:dd:b8:5a:e2:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35820974DAE7FC3F1AE8D279269AB670ABA40E8F
        Validity
            Not Before: Jan 23 19:52:57 2026 GMT
            Not After : Jan 22 19:57:57 2027 GMT
        Subject: CN=44FEB0D3EF416D691098669B4AE33D5E70AB8CEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:54:0b:fb:1c:26:92:aa:ec:14:be:02:a1:19:
                    d4:be:3e:c0:9e:8f:5f:bb:10:1a:24:4d:c8:89:a7:
                    4e:96:ba:fd:6e:93:f9:a5:39:73:42:aa:66:69:84:
                    75:83:1f:98:bf:6b:63:e3:32:a8:7b:11:9a:65:b9:
                    b4:8a:dc:cb:67:d5:1d:dc:7c:96:4f:d2:50:bc:5e:
                    76:a8:f6:0e:ca:44:96:b0:9f:70:e1:67:62:29:70:
                    24:e0:e9:5e:76:3f:ec:19:fa:71:69:af:78:a9:56:
                    0f:e6:f5:c7:7c:0b:1d:1e:d1:63:57:d3:17:e1:af:
                    6b:17:21:07:3d:d8:eb:7e:b1:bf:66:3f:f2:25:a9:
                    d4:6e:66:66:a2:b0:8c:d9:f3:5b:31:7d:d5:22:46:
                    0e:05:25:c0:d0:62:8b:42:35:a0:4a:cb:34:30:58:
                    e3:4a:1f:c3:21:df:c0:70:23:b1:d9:29:81:87:86:
                    f1:97:07:99:32:2e:a0:75:fc:6d:b3:69:a2:ac:15:
                    6c:90:8c:6c:4f:00:50:be:59:9c:0b:b4:ee:17:93:
                    d0:e6:5e:dc:5e:39:76:38:57:8e:c4:9f:61:a8:35:
                    55:63:5d:c9:ae:bf:62:b3:f8:6e:33:13:45:9e:8f:
                    15:64:e5:cf:7a:9f:33:a5:86:68:7d:b2:59:86:0d:
                    90:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:FE:B0:D3:EF:41:6D:69:10:98:66:9B:4A:E3:3D:5E:70:AB:8C:EA
            X509v3 Authority Key Identifier:
                keyid:35:82:09:74:DA:E7:FC:3F:1A:E8:D2:79:26:9A:B6:70:AB:A4:0E:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/35820974DAE7FC3F1AE8D279269AB670ABA40E8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35820974DAE7FC3F1AE8D279269AB670ABA40E8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/37322e34342e31362e302f32332d3233203d3e20323636313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.44.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:66:15:25:f6:7b:b1:26:9f:1c:1e:68:14:85:f4:ac:54:be:
         d7:19:50:19:01:73:fe:b7:ec:d6:60:2a:7f:26:37:74:7b:d2:
         77:c1:22:be:41:2f:be:69:59:6b:d8:8f:04:2d:69:2b:aa:fd:
         77:25:cd:6c:a8:73:64:ce:a2:cf:fe:10:11:8b:53:52:26:c4:
         94:a6:69:23:64:36:63:6d:a3:43:18:18:5b:38:e9:77:4e:f2:
         ec:7f:76:83:bb:43:7a:6a:96:ba:77:db:1d:6b:2e:16:d6:74:
         1a:30:3e:7f:bb:0c:eb:b1:5a:ea:01:cd:48:47:c3:92:54:54:
         d6:5b:da:eb:20:74:21:cd:15:4e:82:bf:98:7f:bb:e6:16:37:
         01:03:64:0e:88:a3:ab:63:e3:0c:aa:0e:a4:23:9e:3e:73:c8:
         ae:25:92:72:7e:88:c1:02:3e:cd:ac:68:eb:7c:dc:23:d2:16:
         62:71:f0:b0:b8:5e:c1:27:4e:fa:e9:a6:f2:64:ce:59:a1:e9:
         53:fa:61:27:4f:a5:d3:1e:3f:20:3c:98:08:46:71:55:7d:62:
         75:22:96:76:95:3e:47:f5:c7:f8:65:b0:6d:e0:3e:99:a1:74:
         be:b3:7e:9f:28:1b:2b:55:e1:f7:1f:c0:14:c5:6c:88:c2:cd:
         1b:03:10:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:50:13 2026 by rpki-client