Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3136332e3231322e302f32322d3332203d3e203631353837.roa
File:                     34352e3136332e3231322e302f32322d3332203d3e203631353837.roa (raw, json)
Hash identifier:          0CVXdT7iwOJfz71vfb4izUcJrmrsaaUfwWzxMhhR4Ds=
Subject key identifier:   63:00:AB:6E:29:6F:BD:05:D1:AE:01:19:22:9A:29:B0:6A:35:DD:C2
Certificate issuer:       /CN=A8AB91CEEE9A5ADCB812E5C76B66DBE1B735692E
Certificate serial:       06F361FDCD10741C041A93809871D39B82137C13
Authority key identifier: A8:AB:91:CE:EE:9A:5A:DC:B8:12:E5:C7:6B:66:DB:E1:B7:35:69:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8AB91CEEE9A5ADCB812E5C76B66DBE1B735692E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3136332e3231322e302f32322d3332203d3e203631353837.roa
Signing time:             Mon 02 Mar 2026 19:15:01 +0000
ROA not before:           Mon 02 Mar 2026 19:10:01 +0000
ROA not after:            Mon 01 Mar 2027 19:15:01 +0000
asID:                     61587
IP address blocks:        45.163.212.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/A8AB91CEEE9A5ADCB812E5C76B66DBE1B735692E.crl
                          rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/A8AB91CEEE9A5ADCB812E5C76B66DBE1B735692E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8AB91CEEE9A5ADCB812E5C76B66DBE1B735692E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 19:52:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f3:61:fd:cd:10:74:1c:04:1a:93:80:98:71:d3:9b:82:13:7c:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8AB91CEEE9A5ADCB812E5C76B66DBE1B735692E
        Validity
            Not Before: Mar  2 19:10:01 2026 GMT
            Not After : Mar  1 19:15:01 2027 GMT
        Subject: CN=6300AB6E296FBD05D1AE0119229A29B06A35DDC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:59:82:4c:58:0c:d9:22:2b:48:0b:66:1e:40:
                    df:b8:12:b6:e3:07:99:3b:e8:a6:08:a3:3e:4a:ec:
                    b9:69:3e:8a:33:66:2b:41:27:c3:b1:c1:03:e3:f9:
                    81:2c:01:78:30:6b:02:ee:23:8b:63:a9:9f:e4:93:
                    18:d2:ad:16:7e:1f:07:0a:f6:d5:f0:9e:9f:57:55:
                    9f:7f:ec:8a:13:3c:8f:8c:74:c3:93:cc:9a:60:87:
                    67:2c:de:98:2b:35:27:f8:2e:44:b7:35:92:f0:a5:
                    91:d5:a5:21:e4:42:78:a6:42:00:3c:fd:c7:25:9c:
                    db:af:b9:6a:8d:1e:fc:49:7b:53:c5:ec:8b:1d:66:
                    0e:19:98:3b:14:55:38:a8:66:c5:9c:bf:85:9e:fa:
                    01:64:a6:e4:d7:62:30:a3:0e:de:50:5a:da:8b:18:
                    22:74:9b:fc:ce:0e:89:26:c8:d4:c1:f0:f1:ed:ea:
                    4c:54:09:82:63:a5:09:78:86:b7:09:84:a0:02:fe:
                    d1:5e:c0:77:3e:76:85:82:ec:80:ba:4f:06:24:02:
                    d5:67:b2:35:86:d3:c0:ea:57:ed:d1:77:f1:0f:17:
                    a0:d9:56:50:6e:3d:c5:73:d0:7c:be:66:55:06:e4:
                    f6:4d:0b:6e:06:c7:b9:b8:88:6c:8c:6b:f2:1c:9c:
                    63:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:00:AB:6E:29:6F:BD:05:D1:AE:01:19:22:9A:29:B0:6A:35:DD:C2
            X509v3 Authority Key Identifier:
                keyid:A8:AB:91:CE:EE:9A:5A:DC:B8:12:E5:C7:6B:66:DB:E1:B7:35:69:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/A8AB91CEEE9A5ADCB812E5C76B66DBE1B735692E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8AB91CEEE9A5ADCB812E5C76B66DBE1B735692E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3136332e3231322e302f32322d3332203d3e203631353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:3f:cd:20:dc:7f:d7:e7:f2:84:2b:c3:95:d3:89:37:bf:3c:
         67:a1:9a:26:4a:e3:c2:b6:2b:87:8a:70:8c:66:f9:6b:7e:c2:
         03:3c:b1:82:1f:28:19:ba:22:8c:c9:43:b2:90:fd:7b:db:e8:
         01:9e:08:ad:9e:e3:70:81:a3:e7:68:ad:a2:34:dc:1d:b7:5a:
         bc:80:d5:6d:0a:97:71:77:ca:68:b7:39:f9:4c:2c:c2:24:80:
         4f:19:50:31:4b:fd:d7:ac:f8:60:79:dc:70:6c:e7:f8:32:fd:
         9f:47:7b:1d:ed:93:8d:c6:44:8a:82:32:70:2a:c6:f7:2a:d4:
         13:95:2c:bf:70:96:9a:16:f9:38:88:2a:9c:c4:9a:4c:1a:48:
         29:0b:a1:2e:1e:10:94:a3:7f:36:be:bd:bc:58:fd:f3:a8:4f:
         4a:9f:fb:f2:09:46:dc:60:93:7d:f5:25:26:cd:29:f8:fb:84:
         9b:ae:65:ce:a4:85:23:30:68:52:7d:5a:11:46:e5:65:9c:5a:
         1d:8e:c2:47:b8:f5:bf:b6:4d:ae:19:15:62:3c:07:da:c9:ec:
         49:dd:dd:b4:88:90:50:56:7a:00:01:e3:71:17:fd:f2:11:3e:
         88:bc:c9:1f:2d:34:37:74:5d:4e:56:bb:12:35:49:02:c7:fc:
         12:73:98:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:28:22 2026 by rpki-client