Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e302e302f32342d3234203d3e20323632323936.roa
File:                     3137302e38312e302e302f32342d3234203d3e20323632323936.roa (raw, json)
Hash identifier:          DfgJNfzYRbouQUMisxk3rVHf2Mqy/g6gYf+pZPChM44=
Subject key identifier:   F6:F4:AE:74:C3:66:FC:C0:8F:FA:DD:60:D1:94:3A:EB:10:3B:E8:5E
Certificate issuer:       /CN=45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8
Certificate serial:       72090F6F24BAEC5A936507885B26F137F7DF5F03
Authority key identifier: 45:EA:42:90:9E:CD:9A:80:74:9A:F8:9F:D7:AC:8F:53:15:E5:FF:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e302e302f32342d3234203d3e20323632323936.roa
Signing time:             Mon 13 Apr 2026 15:44:44 +0000
ROA not before:           Mon 13 Apr 2026 15:39:44 +0000
ROA not after:            Mon 12 Apr 2027 15:44:44 +0000
asID:                     262296
IP address blocks:        170.81.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.crl
                          rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 09:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:09:0f:6f:24:ba:ec:5a:93:65:07:88:5b:26:f1:37:f7:df:5f:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8
        Validity
            Not Before: Apr 13 15:39:44 2026 GMT
            Not After : Apr 12 15:44:44 2027 GMT
        Subject: CN=F6F4AE74C366FCC08FFADD60D1943AEB103BE85E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:57:1a:ea:6f:97:6b:9e:a6:58:9f:09:42:fc:
                    74:a4:39:ee:fd:2c:6e:41:50:14:e7:e2:55:bc:c4:
                    fc:e9:6f:4d:04:5c:3a:e3:94:c8:31:40:60:ad:f2:
                    24:e6:25:3f:ca:a6:cb:78:33:b5:68:62:57:bb:c5:
                    5d:85:94:5e:5e:14:ba:6e:c5:f6:4c:87:03:9d:45:
                    08:f4:4d:9b:ef:ac:1f:d7:9f:6e:10:7b:21:cb:16:
                    b4:61:a8:e4:dd:ba:0d:0a:6c:b8:d2:ec:9c:38:7d:
                    f3:cb:79:fa:09:7c:08:77:85:4e:4c:06:b8:62:15:
                    f0:d5:c3:3c:0b:e6:10:ae:e2:a3:65:57:56:e7:98:
                    f7:60:be:bf:09:36:10:1a:cb:f5:08:56:3a:66:81:
                    39:d5:d9:6e:2b:a9:c0:98:c8:c9:b1:8e:3a:0d:df:
                    d3:86:de:61:88:3c:bb:19:9a:81:0b:85:89:76:ae:
                    6b:fb:a9:96:a7:ff:cb:ec:8b:b4:1d:d0:bf:5f:75:
                    95:77:51:e6:0c:40:2a:7a:51:38:bb:dc:98:d4:9c:
                    43:de:76:f0:7e:53:18:26:7c:a8:ae:12:57:8c:3c:
                    db:c4:71:e8:6f:c1:82:d9:cc:71:7a:8f:1e:73:33:
                    11:fa:83:69:f0:20:8c:fb:96:94:d3:10:11:6c:0c:
                    23:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F4:AE:74:C3:66:FC:C0:8F:FA:DD:60:D1:94:3A:EB:10:3B:E8:5E
            X509v3 Authority Key Identifier:
                keyid:45:EA:42:90:9E:CD:9A:80:74:9A:F8:9F:D7:AC:8F:53:15:E5:FF:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e302e302f32342d3234203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:5e:27:39:92:0f:f4:b4:90:2a:95:18:cd:4e:12:60:c6:a7:
         7b:d6:96:38:1c:10:49:86:94:55:73:27:f4:2f:ad:9c:f7:b4:
         e6:90:6c:d0:64:e8:9b:52:21:e3:fb:9b:f7:ce:69:f8:9b:3f:
         65:33:68:2b:17:09:fb:f9:6d:5c:58:1b:8e:88:52:05:84:4b:
         75:67:27:04:8c:3e:e3:d6:3b:a3:79:fd:f3:c5:b8:f0:91:6f:
         b0:dc:37:88:78:14:1c:dc:51:15:5b:27:a9:4b:ee:0e:89:96:
         09:9c:35:77:54:31:4f:33:89:36:6a:58:2f:1f:f9:d5:bd:cf:
         30:78:81:1f:ee:ca:e5:5f:39:de:2e:56:6e:e4:0a:f4:ee:2c:
         0a:7c:4f:f6:7a:b2:21:cc:be:dd:a1:c9:6b:8a:65:28:7b:94:
         63:e4:fa:f9:10:66:e3:a0:27:87:69:cf:02:55:03:ac:67:76:
         4f:cf:bf:01:bf:48:c4:fd:9e:d9:97:d5:5d:d9:3d:12:32:3e:
         9c:fd:0a:7c:3e:67:47:36:e7:22:32:31:cf:c7:d1:49:0e:54:
         d3:bd:d2:f9:99:d7:73:98:79:04:8c:5b:42:b7:38:3a:43:cf:
         cc:99:ef:43:3e:dc:e6:98:85:d9:bb:49:01:1a:47:4f:15:87:
         27:58:ab:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:19:58 2026 by rpki-client