Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/34352e3233322e3138382e302f32322d3232203d3e203631353932.roa
File:                     34352e3233322e3138382e302f32322d3232203d3e203631353932.roa (raw, json)
Hash identifier:          fhAwHhsN8F9VDJu4EmQ4tipP6puzOnhkRDdOXpeqezU=
Subject key identifier:   0C:82:DC:49:BE:B8:DB:C7:3C:07:A1:EF:18:3D:92:97:BB:BF:AD:43
Certificate issuer:       /CN=909E9FEA566321BE0782982D2D8BAB3FE3A8D22B
Certificate serial:       45245CCEB5CFA4FB6E04F097438388A97F4C64C9
Authority key identifier: 90:9E:9F:EA:56:63:21:BE:07:82:98:2D:2D:8B:AB:3F:E3:A8:D2:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/34352e3233322e3138382e302f32322d3232203d3e203631353932.roa
Signing time:             Fri 27 Feb 2026 20:29:54 +0000
ROA not before:           Fri 27 Feb 2026 20:24:54 +0000
ROA not after:            Fri 26 Feb 2027 20:29:54 +0000
asID:                     61592
IP address blocks:        45.232.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.crl
                          rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 03:38:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:24:5c:ce:b5:cf:a4:fb:6e:04:f0:97:43:83:88:a9:7f:4c:64:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909E9FEA566321BE0782982D2D8BAB3FE3A8D22B
        Validity
            Not Before: Feb 27 20:24:54 2026 GMT
            Not After : Feb 26 20:29:54 2027 GMT
        Subject: CN=0C82DC49BEB8DBC73C07A1EF183D9297BBBFAD43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d5:3f:44:19:13:ef:74:bb:69:00:99:b1:59:
                    87:14:39:a7:1d:e3:40:e5:e8:bc:97:c2:d4:46:4e:
                    67:60:1f:6a:b7:0d:ae:7e:7d:a9:94:07:e7:ce:8e:
                    46:74:0c:f9:23:a1:39:c0:af:32:e9:6e:ad:62:7b:
                    4f:b6:b8:99:65:f1:6b:1a:9d:7e:de:b2:25:7a:15:
                    74:8b:a0:13:61:9d:30:6c:05:8e:e4:06:c8:31:96:
                    e2:94:9c:1e:6e:04:33:53:db:1e:e0:66:ac:cf:55:
                    01:2a:53:4b:c2:83:4d:65:e3:aa:bb:a0:68:af:b9:
                    63:77:f5:5e:a6:87:e8:ff:84:89:d3:3a:4b:c4:b5:
                    fe:d1:4f:cd:27:b8:84:81:73:68:e5:87:cb:cb:86:
                    11:44:81:2c:a8:6a:55:a2:dc:12:47:a0:65:43:93:
                    cc:31:75:15:e3:eb:db:12:da:03:9a:e7:51:dc:2c:
                    84:a6:48:2a:04:a3:b4:f5:36:27:39:3f:59:68:11:
                    b4:43:b3:c8:80:ff:ad:84:16:f2:b2:e3:57:fc:dd:
                    e0:65:d1:50:ab:99:7f:b9:b2:78:c9:00:c2:88:cb:
                    0f:ef:a7:af:fb:c0:f2:d6:0f:42:ba:c1:05:67:8c:
                    c3:6f:93:2d:4d:b2:ac:c2:ac:2c:51:a3:16:cb:5b:
                    0b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:82:DC:49:BE:B8:DB:C7:3C:07:A1:EF:18:3D:92:97:BB:BF:AD:43
            X509v3 Authority Key Identifier:
                keyid:90:9E:9F:EA:56:63:21:BE:07:82:98:2D:2D:8B:AB:3F:E3:A8:D2:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/34352e3233322e3138382e302f32322d3232203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:ab:b1:1e:5d:50:6d:f0:30:95:a1:a9:27:30:88:60:a7:38:
         ef:5d:5f:ac:78:dc:a5:5a:aa:7c:65:c5:ad:f3:da:36:70:48:
         0d:a8:7d:26:ee:26:bf:04:14:21:3a:7f:86:51:a9:19:dd:bc:
         b7:48:3d:70:83:31:3f:ea:db:62:6c:03:7a:44:da:58:26:ce:
         93:05:4b:cb:66:ea:09:8a:d6:7a:18:a8:7e:d3:4a:3e:ce:5e:
         a3:7c:dd:d0:12:8b:2b:ee:1b:11:48:08:9f:a5:f2:38:e3:88:
         01:11:8d:27:61:de:c3:e2:42:06:4f:0b:6d:c5:ee:07:3d:6d:
         19:bd:e2:a7:c8:a9:47:ae:df:ec:c7:2b:39:31:4e:f8:10:f8:
         90:6b:9f:59:c4:e6:2c:11:2f:e5:1b:82:3e:d6:b1:63:8d:82:
         b5:ac:cb:09:c6:c3:35:d5:96:5e:25:cc:50:0b:80:26:64:64:
         8f:d2:df:c2:bd:c0:a5:25:ae:b8:13:87:43:fb:fa:94:30:a9:
         12:8f:b3:e1:38:d3:f2:e8:d3:4d:8b:48:53:6f:dc:27:15:e5:
         a2:86:86:18:32:ef:b6:6c:e3:f8:78:f5:e3:92:43:b9:70:46:
         be:78:3d:99:5f:81:c3:8d:e1:bc:39:8c:7b:43:2b:df:c1:e2:
         e2:e6:63:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:01:55 2026 by rpki-client