Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e322e302f32332d3233203d3e20323632323936.roa
File:                     3137302e38312e322e302f32332d3233203d3e20323632323936.roa (raw, json)
Hash identifier:          ny6mVvuayq75tFGSm1nW22OR4h9BDHnQyz11i8gFwk4=
Subject key identifier:   BC:56:7C:BA:E7:D9:5E:8F:FE:11:93:A8:BC:CC:DD:BF:44:67:37:16
Certificate issuer:       /CN=45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8
Certificate serial:       469AD885F04CBE0DB2DCA6C73B6C4D0385AE0D1E
Authority key identifier: 45:EA:42:90:9E:CD:9A:80:74:9A:F8:9F:D7:AC:8F:53:15:E5:FF:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e322e302f32332d3233203d3e20323632323936.roa
Signing time:             Mon 13 Apr 2026 15:44:41 +0000
ROA not before:           Mon 13 Apr 2026 15:39:41 +0000
ROA not after:            Mon 12 Apr 2027 15:44:41 +0000
asID:                     262296
IP address blocks:        170.81.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.crl
                          rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 09:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:9a:d8:85:f0:4c:be:0d:b2:dc:a6:c7:3b:6c:4d:03:85:ae:0d:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8
        Validity
            Not Before: Apr 13 15:39:41 2026 GMT
            Not After : Apr 12 15:44:41 2027 GMT
        Subject: CN=BC567CBAE7D95E8FFE1193A8BCCCDDBF44673716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a0:a8:4c:2b:25:00:e3:a9:23:b3:d6:aa:7f:
                    41:cd:2e:84:57:73:57:c5:f2:5a:07:c2:62:94:4e:
                    03:1b:34:81:4d:11:ee:b1:93:53:9e:3d:9f:1f:2e:
                    dc:50:d4:bc:bb:67:f9:14:4d:b3:d3:fa:5e:e3:22:
                    5b:77:6e:12:f7:15:ea:07:e5:05:c3:1b:9a:c8:cd:
                    46:73:e5:ac:52:9b:3d:87:43:45:71:07:e8:94:81:
                    6d:a6:76:1a:9e:f2:6c:ff:6b:8e:5d:de:72:ca:7d:
                    5d:4b:d7:be:53:82:32:f4:3c:e1:51:92:6e:9b:ee:
                    f0:32:38:9d:0a:86:05:84:a5:3d:35:86:34:24:0a:
                    ce:8b:ca:64:e7:49:84:8a:8b:85:69:9b:7a:c0:0a:
                    5d:68:9c:2e:16:db:a8:ad:80:69:c7:35:0b:10:42:
                    bf:64:f8:54:df:b6:8d:b6:4d:27:58:b9:e7:f0:27:
                    de:e1:67:ba:4c:ed:dd:52:3b:0f:e7:ef:8c:80:03:
                    82:cb:f9:31:4b:b9:5e:7b:fd:d9:42:a1:65:2d:b1:
                    ce:51:f5:07:11:53:fe:dc:f1:55:63:82:74:84:72:
                    49:5f:a4:f6:91:32:3c:be:10:fc:09:ce:5b:5b:18:
                    c5:e1:ea:b1:d5:b0:8d:ec:17:83:8d:1d:29:56:a2:
                    68:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:56:7C:BA:E7:D9:5E:8F:FE:11:93:A8:BC:CC:DD:BF:44:67:37:16
            X509v3 Authority Key Identifier:
                keyid:45:EA:42:90:9E:CD:9A:80:74:9A:F8:9F:D7:AC:8F:53:15:E5:FF:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e322e302f32332d3233203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:03:84:59:11:d7:94:c0:9a:52:d9:db:b4:2a:44:55:9f:48:
         1b:27:22:37:6e:3b:c6:18:6d:ea:8c:99:d7:92:fc:66:1c:64:
         11:24:5e:d8:cb:fe:de:e5:58:fd:51:ef:06:3d:33:fd:49:4f:
         79:a0:9f:ee:bb:8d:5e:f3:4d:2e:df:68:b6:0d:c0:24:91:da:
         1c:00:1d:98:d4:f4:57:53:47:9f:63:23:dc:76:ee:55:ca:15:
         43:78:c8:1c:a7:b7:f0:70:b3:d3:e3:20:cf:ce:3f:e2:9c:14:
         4a:62:32:36:54:7c:ae:96:d8:42:00:32:ea:77:33:a3:8e:e0:
         a3:f4:c5:7b:54:40:b3:c7:94:63:8b:1f:79:2d:db:e2:3f:94:
         b4:ab:0a:e2:4f:45:08:e2:8d:d3:a0:c4:4e:15:1f:03:d4:2b:
         ef:5a:39:ef:5d:dd:82:bf:c9:59:4d:51:7b:f8:9b:4a:1b:b4:
         29:69:a8:56:4e:c4:14:ab:f3:fc:b7:04:81:ff:37:aa:7f:b1:
         33:81:b0:df:ac:2c:48:ff:73:51:92:1c:89:9b:93:4b:dc:18:
         6f:63:e7:c3:0c:77:85:86:f8:a3:ff:05:11:c1:84:f9:0a:c3:
         f6:cb:e7:f2:a6:94:cc:90:36:c0:36:52:1b:a3:a9:dd:46:68:
         e8:c3:96:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:19:03 2026 by rpki-client