Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/34352e3136312e34382e302f32332d3233203d3e20323638343437.roa
File:                     34352e3136312e34382e302f32332d3233203d3e20323638343437.roa (raw, json)
Hash identifier:          fpnl3c6PpuXNQXUeECTjz/EsELyE9nhsn8iQuvczNLw=
Subject key identifier:   64:1D:31:9F:FB:57:CF:C8:A6:4B:D6:A5:99:01:65:1F:EB:71:57:93
Certificate issuer:       /CN=C449A3D4CC7C8855D9B4286F93A0C249150CD32A
Certificate serial:       6899F857C0521A3A915318F146641E9FE50FD84A
Authority key identifier: C4:49:A3:D4:CC:7C:88:55:D9:B4:28:6F:93:A0:C2:49:15:0C:D3:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C449A3D4CC7C8855D9B4286F93A0C249150CD32A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/34352e3136312e34382e302f32332d3233203d3e20323638343437.roa
Signing time:             Mon 13 Apr 2026 14:48:28 +0000
ROA not before:           Mon 13 Apr 2026 14:43:28 +0000
ROA not after:            Mon 12 Apr 2027 14:48:28 +0000
asID:                     268447
IP address blocks:        45.161.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/C449A3D4CC7C8855D9B4286F93A0C249150CD32A.crl
                          rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/C449A3D4CC7C8855D9B4286F93A0C249150CD32A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C449A3D4CC7C8855D9B4286F93A0C249150CD32A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 08:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:99:f8:57:c0:52:1a:3a:91:53:18:f1:46:64:1e:9f:e5:0f:d8:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C449A3D4CC7C8855D9B4286F93A0C249150CD32A
        Validity
            Not Before: Apr 13 14:43:28 2026 GMT
            Not After : Apr 12 14:48:28 2027 GMT
        Subject: CN=641D319FFB57CFC8A64BD6A59901651FEB715793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:72:06:a8:d3:1d:e4:1f:15:01:e3:be:a6:05:
                    58:ae:e1:2d:16:7f:21:38:8b:4a:3e:bc:ee:88:fe:
                    72:27:be:3e:01:d8:b7:73:66:75:f0:bc:39:d8:b7:
                    92:27:2b:36:72:22:b7:a1:f7:bf:cb:0e:75:60:17:
                    09:b6:e5:02:b8:5a:33:63:bc:52:cc:55:f4:51:67:
                    fd:18:46:7e:cd:2c:c8:88:8d:a0:19:7d:aa:37:fe:
                    b2:83:88:98:d4:b4:5f:47:4e:e5:b6:3e:49:ce:d6:
                    c8:2e:8f:1c:06:4a:e2:7e:e0:8c:9c:12:28:28:a3:
                    09:54:db:c8:f4:e1:01:5e:0a:b8:01:30:89:53:c6:
                    33:e6:91:ed:1c:73:6e:e1:a1:3e:8f:d6:7e:22:a8:
                    14:d2:38:67:16:7e:ea:f4:e8:5c:90:70:35:51:31:
                    84:0c:30:4a:46:a7:0c:86:19:f6:ae:d4:eb:5a:82:
                    c1:60:46:e0:3b:4c:e1:fd:42:e2:1e:30:7e:ad:9d:
                    6d:de:10:58:ce:7f:11:3e:4d:ca:c3:5f:4a:f5:94:
                    55:5b:e4:1d:a1:a2:b1:27:e6:fd:0b:9b:98:47:a0:
                    93:68:83:91:c9:9c:18:41:2b:8a:a6:05:81:bb:34:
                    53:e4:94:c4:f9:98:de:b1:a8:21:97:c3:9b:14:49:
                    21:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:1D:31:9F:FB:57:CF:C8:A6:4B:D6:A5:99:01:65:1F:EB:71:57:93
            X509v3 Authority Key Identifier:
                keyid:C4:49:A3:D4:CC:7C:88:55:D9:B4:28:6F:93:A0:C2:49:15:0C:D3:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/C449A3D4CC7C8855D9B4286F93A0C249150CD32A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C449A3D4CC7C8855D9B4286F93A0C249150CD32A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/34352e3136312e34382e302f32332d3233203d3e20323638343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:a7:11:2a:34:dc:83:19:b6:33:e5:3b:28:b6:7e:89:81:26:
         4b:18:37:bb:59:b9:21:a2:ee:4b:26:59:00:00:f8:55:b8:6c:
         e5:82:29:8d:48:b6:00:bc:2a:0e:88:4a:31:6e:ee:fd:b2:0f:
         80:d0:85:1c:cb:2a:38:7a:13:27:95:52:1c:57:5a:1f:f5:1f:
         f5:f6:af:d0:19:dc:91:c6:5b:a0:63:54:94:80:61:f9:13:19:
         34:b9:7e:0a:c6:c8:ba:b5:4b:f2:c8:51:4e:ab:6b:50:d4:c1:
         41:03:34:7b:30:6b:bc:c4:9f:cf:27:b6:bf:5b:7a:66:b1:78:
         50:44:20:0d:36:42:84:2b:e4:54:a1:55:c2:fb:ef:57:50:2c:
         5d:a7:23:db:e9:fa:60:a5:74:14:68:87:a1:79:f9:94:c6:e7:
         62:7a:34:f0:61:6f:3a:2b:b8:6d:58:d4:f6:0a:e5:81:d7:10:
         e3:5f:ba:fc:cb:49:eb:aa:7d:64:9f:63:4a:cf:fd:1a:68:bf:
         a7:20:bf:ac:09:7a:a7:b0:1e:4f:14:a3:08:32:ce:41:b0:53:
         b4:9f:d4:55:de:8a:d6:3c:9b:eb:28:30:c3:1f:60:09:7c:0f:
         7b:bc:87:d7:4f:02:ab:4d:3b:0e:61:ee:52:45:c7:56:bc:0e:
         5a:b4:47:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:04:13 2026 by rpki-client