Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3LaNtcJ9pc3vDf7r44kv2YDGj5UUkLgFW3pEpGtzYrej/0/34352e362e3137332e302f32342d3234203d3e20323636313339.roa
File:                     34352e362e3137332e302f32342d3234203d3e20323636313339.roa (raw, json)
Hash identifier:          YSFxmbHIu44Loms3+9dujbnj3OMO1v1iiaRDe13ivKo=
Subject key identifier:   63:16:7A:B5:AC:99:C1:52:71:A5:10:A4:26:3F:3F:91:78:53:51:E8
Certificate issuer:       /CN=01C410F2D199705E3E387AB99600CABA9280F155
Certificate serial:       481B9A6A3EEC602CC41EE7A0575234AEC77AE1A9
Authority key identifier: 01:C4:10:F2:D1:99:70:5E:3E:38:7A:B9:96:00:CA:BA:92:80:F1:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01C410F2D199705E3E387AB99600CABA9280F155.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3LaNtcJ9pc3vDf7r44kv2YDGj5UUkLgFW3pEpGtzYrej/0/34352e362e3137332e302f32342d3234203d3e20323636313339.roa
Signing time:             Mon 02 Mar 2026 14:19:58 +0000
ROA not before:           Mon 02 Mar 2026 14:14:58 +0000
ROA not after:            Mon 01 Mar 2027 14:19:58 +0000
asID:                     266139
IP address blocks:        45.6.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3LaNtcJ9pc3vDf7r44kv2YDGj5UUkLgFW3pEpGtzYrej/0/01C410F2D199705E3E387AB99600CABA9280F155.crl
                          rsync://rpki-repo.registro.br/repo/3LaNtcJ9pc3vDf7r44kv2YDGj5UUkLgFW3pEpGtzYrej/0/01C410F2D199705E3E387AB99600CABA9280F155.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01C410F2D199705E3E387AB99600CABA9280F155.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 15:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:1b:9a:6a:3e:ec:60:2c:c4:1e:e7:a0:57:52:34:ae:c7:7a:e1:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01C410F2D199705E3E387AB99600CABA9280F155
        Validity
            Not Before: Mar  2 14:14:58 2026 GMT
            Not After : Mar  1 14:19:58 2027 GMT
        Subject: CN=63167AB5AC99C15271A510A4263F3F91785351E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:40:b3:41:5a:d0:a5:22:a8:ad:c6:89:17:b8:
                    27:45:72:64:19:b9:c2:99:63:ff:b7:06:38:b1:60:
                    35:d4:ca:97:58:ba:68:38:76:9b:c3:43:47:2a:7d:
                    bb:9e:68:8b:6b:72:d3:21:7a:9d:97:03:49:fd:73:
                    0d:84:29:76:fe:be:38:76:3d:8d:60:52:3c:5a:c5:
                    46:e7:f1:bc:e0:4b:20:fb:53:12:db:fb:a7:62:f5:
                    04:ae:c9:81:70:38:a0:10:9e:64:3e:99:e0:e4:c4:
                    05:68:39:6c:ab:31:c4:46:4c:16:c8:56:53:9a:c5:
                    3f:78:ea:ee:de:27:2c:65:32:ac:c1:87:8d:96:5a:
                    fa:56:38:9f:b5:de:ba:dd:31:9b:ac:5d:f1:d9:0e:
                    5f:5d:55:d1:cd:f3:d0:64:8c:f9:2b:04:cd:c0:d6:
                    10:72:5b:4c:83:d5:38:ea:8f:5d:f0:98:b3:f8:77:
                    cb:86:87:84:fd:e3:67:2c:0a:d7:e7:96:04:a6:0d:
                    a5:a3:d1:fe:6f:be:ba:d7:3d:f5:57:c4:c1:bc:bc:
                    bc:db:e9:98:cb:a0:04:e4:b5:e8:f0:60:b0:81:11:
                    fb:cf:8e:6a:16:33:f6:31:f4:7c:33:14:9d:12:4d:
                    d5:12:fe:e2:74:14:f9:42:64:ab:1f:90:56:fc:5f:
                    a0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:16:7A:B5:AC:99:C1:52:71:A5:10:A4:26:3F:3F:91:78:53:51:E8
            X509v3 Authority Key Identifier:
                keyid:01:C4:10:F2:D1:99:70:5E:3E:38:7A:B9:96:00:CA:BA:92:80:F1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3LaNtcJ9pc3vDf7r44kv2YDGj5UUkLgFW3pEpGtzYrej/0/01C410F2D199705E3E387AB99600CABA9280F155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01C410F2D199705E3E387AB99600CABA9280F155.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3LaNtcJ9pc3vDf7r44kv2YDGj5UUkLgFW3pEpGtzYrej/0/34352e362e3137332e302f32342d3234203d3e20323636313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:59:a6:2a:00:66:28:af:c9:e8:94:90:84:8f:6a:39:75:83:
         a4:78:f0:76:1d:63:97:cc:7d:44:3f:99:9a:c7:22:8d:47:0e:
         7a:5e:50:07:db:e8:19:ed:23:77:21:d2:28:7d:16:af:63:6f:
         d0:a7:83:8c:af:95:9d:08:4b:e2:15:cf:63:f5:25:3b:bc:74:
         f5:29:ef:4a:76:df:cd:70:c3:fa:fc:7a:1f:98:5b:f6:ab:1e:
         6a:ee:2d:98:97:9f:a4:b6:d5:c5:cd:9b:0a:e4:98:56:38:fb:
         e2:cd:e2:6e:66:b9:84:0c:78:84:d6:38:9e:09:7f:a0:7e:90:
         d0:63:0d:32:f0:bb:d4:73:37:cb:4a:26:04:b1:34:b6:39:0a:
         48:96:ce:98:fb:34:22:9f:b7:c8:90:48:2f:48:18:4c:a6:ed:
         10:1a:cb:58:4e:66:2e:ee:1c:33:d6:3b:85:1e:1a:87:7e:4c:
         df:a3:ca:63:0e:e1:e9:2e:ad:b5:6d:8c:5f:69:62:88:b9:8d:
         90:00:52:f5:28:ab:e8:cf:5e:dc:d2:e6:6f:6d:32:5e:90:e8:
         d6:2b:3a:d5:30:f6:1d:f8:b9:57:6d:71:d6:69:aa:0b:b1:c9:
         f0:8c:3a:2c:f1:86:7d:d2:4c:af:ff:12:cd:f0:23:62:00:97:
         a8:98:6a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:53:34 2026 by rpki-client