Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/cq2meCduvsBnDMh9DNLpe6xCHJYRvXKcRByKwPvnJfk/0/34352e342e3137392e302f32342d3234203d3e20323636303937.roa
File:                     34352e342e3137392e302f32342d3234203d3e20323636303937.roa (raw, json)
Hash identifier:          WBrf+7IX/ANvWARXreXJhYYc0DhuMQBbDAGO4L9/zQ8=
Subject key identifier:   68:41:CE:91:4C:0E:FF:B4:1A:B4:00:A5:0B:B3:38:2C:F7:49:03:F4
Certificate issuer:       /CN=310993E202BE193FC5A45A60C2F9B0FA62536061
Certificate serial:       6F35EB8CA8D863B92689412AECA41F7F169C0C54
Authority key identifier: 31:09:93:E2:02:BE:19:3F:C5:A4:5A:60:C2:F9:B0:FA:62:53:60:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/310993E202BE193FC5A45A60C2F9B0FA62536061.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cq2meCduvsBnDMh9DNLpe6xCHJYRvXKcRByKwPvnJfk/0/34352e342e3137392e302f32342d3234203d3e20323636303937.roa
Signing time:             Wed 28 Jan 2026 23:24:45 +0000
ROA not before:           Wed 28 Jan 2026 23:19:45 +0000
ROA not after:            Wed 27 Jan 2027 23:24:45 +0000
asID:                     266097
IP address blocks:        45.4.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/cq2meCduvsBnDMh9DNLpe6xCHJYRvXKcRByKwPvnJfk/0/310993E202BE193FC5A45A60C2F9B0FA62536061.crl
                          rsync://rpki-repo.registro.br/repo/cq2meCduvsBnDMh9DNLpe6xCHJYRvXKcRByKwPvnJfk/0/310993E202BE193FC5A45A60C2F9B0FA62536061.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/310993E202BE193FC5A45A60C2F9B0FA62536061.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 20:20:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:35:eb:8c:a8:d8:63:b9:26:89:41:2a:ec:a4:1f:7f:16:9c:0c:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310993E202BE193FC5A45A60C2F9B0FA62536061
        Validity
            Not Before: Jan 28 23:19:45 2026 GMT
            Not After : Jan 27 23:24:45 2027 GMT
        Subject: CN=6841CE914C0EFFB41AB400A50BB3382CF74903F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f8:53:c9:40:7f:50:89:16:9b:5e:d2:b0:a4:
                    5b:e4:94:30:4f:df:6a:9b:c7:1e:58:ec:c0:4c:92:
                    61:64:b4:2a:29:59:5d:e2:82:1b:5d:ad:24:1d:db:
                    c5:93:61:89:8a:d6:33:0b:4c:44:9c:ff:fd:8c:a9:
                    1c:98:bf:39:47:0c:f1:2a:f2:c1:8c:1c:f1:1a:41:
                    a9:40:f5:9c:5f:06:60:f0:05:f7:8d:9c:03:06:55:
                    0b:6b:bc:14:45:57:c4:b4:6e:80:e6:8d:6d:d4:67:
                    2f:7e:0c:1a:e3:4e:7f:3b:59:0a:0e:70:b8:c1:0e:
                    75:c6:95:9a:e1:10:0d:e2:10:46:c2:52:0a:15:83:
                    e2:30:47:db:ff:c4:94:82:8a:b6:30:94:c2:5d:f5:
                    1b:c0:36:62:75:d8:42:f4:95:18:57:1e:28:c5:de:
                    55:b4:64:ea:46:76:c1:13:8c:da:eb:ac:c9:26:bc:
                    09:33:1d:36:52:c2:22:49:08:ab:43:86:a8:fb:41:
                    6a:70:db:33:61:3c:c0:b3:b0:3e:dc:5b:e6:34:90:
                    8a:48:b1:76:78:70:cf:fa:d8:9c:54:3d:1b:4b:fc:
                    4f:5a:69:f0:13:3c:32:9d:ce:a9:6e:5f:34:8a:f8:
                    6f:13:f0:bf:bf:f9:6f:50:dd:ee:00:aa:13:d7:28:
                    01:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:41:CE:91:4C:0E:FF:B4:1A:B4:00:A5:0B:B3:38:2C:F7:49:03:F4
            X509v3 Authority Key Identifier:
                keyid:31:09:93:E2:02:BE:19:3F:C5:A4:5A:60:C2:F9:B0:FA:62:53:60:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cq2meCduvsBnDMh9DNLpe6xCHJYRvXKcRByKwPvnJfk/0/310993E202BE193FC5A45A60C2F9B0FA62536061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/310993E202BE193FC5A45A60C2F9B0FA62536061.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cq2meCduvsBnDMh9DNLpe6xCHJYRvXKcRByKwPvnJfk/0/34352e342e3137392e302f32342d3234203d3e20323636303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:e4:68:7f:99:02:1a:ba:ed:e9:96:fb:96:37:66:00:c4:be:
         42:2c:a9:30:78:33:4b:7c:14:49:91:57:55:66:93:7b:86:d4:
         82:0b:04:f2:e5:d6:f0:62:e9:d8:e2:06:57:7a:29:1e:06:7c:
         89:52:bf:2c:f9:f4:68:b7:52:a3:a4:4f:fa:4f:2c:76:36:74:
         de:bc:34:c5:58:1b:17:e2:2c:35:ed:51:81:45:48:cb:30:66:
         15:d7:f0:d3:e8:c2:6f:25:cd:bd:c1:95:88:d6:c2:5d:cd:b4:
         9a:77:85:34:fc:b0:27:9c:ba:45:a7:51:b6:24:ca:94:4e:f1:
         ce:63:58:f6:be:76:1d:55:7d:c9:69:2e:98:7e:28:ec:52:55:
         ad:f5:a4:5d:bf:9b:8f:ba:8e:5a:76:d7:4f:18:98:4b:38:b1:
         ae:1b:d3:c6:28:7c:2f:e0:e5:f9:60:57:03:75:c8:af:61:f0:
         e0:59:70:a7:3e:8b:31:90:f2:4b:e4:d9:08:44:4a:d8:f8:43:
         c3:6d:4e:c1:03:4c:ca:4e:ae:22:52:33:94:f1:e4:80:f0:70:
         cb:85:83:92:a7:b2:bd:13:9e:fa:8b:dc:aa:a2:ce:a8:69:65:
         27:17:65:53:15:14:45:88:9b:76:ae:35:b8:ff:c3:69:90:ce:
         df:bf:c7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:18:52 2026 by rpki-client