Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/34352e3233352e3230302e302f32332d3233203d3e20323638323239.roa
File:                     34352e3233352e3230302e302f32332d3233203d3e20323638323239.roa (raw, json)
Hash identifier:          iB8UfHqu6Z/RkRW4fIW17xI/UqXewlz+9iI5wOd7NB0=
Subject key identifier:   D9:37:35:15:4C:FF:28:D0:58:6A:32:81:0D:60:AC:F8:FC:31:35:F1
Certificate issuer:       /CN=24A3CCFD6B6E5E8CFEF39922F1A6ED764A9135F4
Certificate serial:       18A0155DF717B5B616B2C498A3E762BA30FB0CFB
Authority key identifier: 24:A3:CC:FD:6B:6E:5E:8C:FE:F3:99:22:F1:A6:ED:76:4A:91:35:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24A3CCFD6B6E5E8CFEF39922F1A6ED764A9135F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/34352e3233352e3230302e302f32332d3233203d3e20323638323239.roa
Signing time:             Fri 27 Feb 2026 15:33:58 +0000
ROA not before:           Fri 27 Feb 2026 15:28:58 +0000
ROA not after:            Fri 26 Feb 2027 15:33:58 +0000
asID:                     268229
IP address blocks:        45.235.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/24A3CCFD6B6E5E8CFEF39922F1A6ED764A9135F4.crl
                          rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/24A3CCFD6B6E5E8CFEF39922F1A6ED764A9135F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24A3CCFD6B6E5E8CFEF39922F1A6ED764A9135F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 19:58:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:a0:15:5d:f7:17:b5:b6:16:b2:c4:98:a3:e7:62:ba:30:fb:0c:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24A3CCFD6B6E5E8CFEF39922F1A6ED764A9135F4
        Validity
            Not Before: Feb 27 15:28:58 2026 GMT
            Not After : Feb 26 15:33:58 2027 GMT
        Subject: CN=D93735154CFF28D0586A32810D60ACF8FC3135F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:02:cc:37:95:be:28:6c:2b:a3:0a:75:0d:37:
                    89:c3:0a:ea:ab:3c:7b:a4:11:6f:14:8e:10:1d:b7:
                    d1:47:d0:f6:e0:eb:07:60:cb:26:88:15:66:48:1a:
                    8f:54:28:22:32:8e:5d:2d:71:fc:2c:ad:08:e3:71:
                    ba:2f:23:73:f1:9d:48:a6:f1:f5:f8:5d:c5:60:68:
                    1a:5c:b6:61:9d:3d:28:94:0f:3c:8f:c4:11:c1:68:
                    72:d2:2e:fc:18:6c:36:69:2a:94:8b:01:c8:98:75:
                    f2:64:f8:f2:11:62:18:7e:23:cb:98:84:c6:b8:31:
                    38:da:68:28:aa:64:de:7a:49:3e:97:f3:72:d6:81:
                    b3:02:14:e4:37:da:c6:db:9b:66:0f:40:5b:4f:f6:
                    a5:37:45:fa:ac:69:cf:37:c3:08:d5:8a:a5:da:07:
                    cb:59:c1:18:b9:3e:2c:c4:08:4d:f2:bd:0d:6d:54:
                    9b:fa:75:a3:f3:8b:87:1a:ea:08:fa:48:82:e2:df:
                    e1:c6:fe:cd:e0:db:a5:80:54:fc:3c:5a:4b:2c:5e:
                    04:57:6f:b2:ab:1a:5e:0b:7d:43:2a:42:eb:7b:f1:
                    14:72:35:27:54:46:7e:27:64:38:d7:65:2e:fc:54:
                    4b:36:d7:f4:f4:e0:b3:a6:9c:66:1b:bb:d8:26:98:
                    2b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:37:35:15:4C:FF:28:D0:58:6A:32:81:0D:60:AC:F8:FC:31:35:F1
            X509v3 Authority Key Identifier:
                keyid:24:A3:CC:FD:6B:6E:5E:8C:FE:F3:99:22:F1:A6:ED:76:4A:91:35:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/24A3CCFD6B6E5E8CFEF39922F1A6ED764A9135F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24A3CCFD6B6E5E8CFEF39922F1A6ED764A9135F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/34352e3233352e3230302e302f32332d3233203d3e20323638323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:12:13:6e:df:11:43:74:09:9d:c3:59:d2:c7:9c:54:23:a2:
         b3:a5:dd:e5:64:b0:f7:e1:a7:73:ff:6a:0a:57:a9:98:0f:bc:
         c4:65:90:b3:8c:9d:be:8a:df:03:e9:a5:ed:cf:08:1f:1b:85:
         6b:8d:ed:9a:e6:fc:2d:63:18:a0:54:52:af:d8:ae:de:21:50:
         89:cf:b4:d6:74:9d:3d:fa:87:5c:4b:92:51:7f:cf:86:29:38:
         e0:c4:d3:27:65:28:90:ee:6f:d5:c0:69:46:3f:4e:c7:01:13:
         86:8f:08:ee:1c:93:cb:28:98:3e:b7:9f:bf:31:e4:80:e5:30:
         60:65:5b:86:07:94:d5:38:9b:29:0f:a1:2e:61:d6:84:92:29:
         08:00:04:df:e1:83:a7:9c:b4:64:7e:31:26:eb:c2:76:77:2c:
         72:de:e8:cc:52:79:aa:af:30:6a:54:46:c8:04:6e:32:b1:40:
         70:2e:5c:32:b4:9d:d8:61:54:75:c6:ea:28:8d:fa:ad:c0:ef:
         2b:6b:bd:90:27:72:2a:89:f6:21:0e:9b:ff:03:4b:5e:4a:98:
         dd:14:41:06:96:38:53:91:6b:03:bd:6b:52:0e:14:65:ba:39:
         48:a9:0c:2a:97:6c:0d:72:33:62:49:47:51:42:82:a6:6f:39:
         14:c5:2a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 03:31:20 2026 by rpki-client