Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/34352e37302e3135362e302f32322d3234203d3e20323637363534.roa
File:                     34352e37302e3135362e302f32322d3234203d3e20323637363534.roa (raw, json)
Hash identifier:          0LVpePq6Z5F61M6bAucVkH0TvTITSAI9rggoLA2Ch9Q=
Subject key identifier:   7F:E4:E3:91:A6:EB:BB:FB:A8:74:58:FE:D9:EE:26:23:EB:01:FB:9C
Certificate issuer:       /CN=1BE004C88CDEB73610FC82758B90B130EB9F7D38
Certificate serial:       04741B62BAFA1E4332AB80F66DAE61727864D8FF
Authority key identifier: 1B:E0:04:C8:8C:DE:B7:36:10:FC:82:75:8B:90:B1:30:EB:9F:7D:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE004C88CDEB73610FC82758B90B130EB9F7D38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/34352e37302e3135362e302f32322d3234203d3e20323637363534.roa
Signing time:             Sat 28 Feb 2026 04:38:23 +0000
ROA not before:           Sat 28 Feb 2026 04:33:23 +0000
ROA not after:            Sat 27 Feb 2027 04:38:23 +0000
asID:                     267654
IP address blocks:        45.70.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/1BE004C88CDEB73610FC82758B90B130EB9F7D38.crl
                          rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/1BE004C88CDEB73610FC82758B90B130EB9F7D38.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE004C88CDEB73610FC82758B90B130EB9F7D38.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 10:50:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:74:1b:62:ba:fa:1e:43:32:ab:80:f6:6d:ae:61:72:78:64:d8:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE004C88CDEB73610FC82758B90B130EB9F7D38
        Validity
            Not Before: Feb 28 04:33:23 2026 GMT
            Not After : Feb 27 04:38:23 2027 GMT
        Subject: CN=7FE4E391A6EBBBFBA87458FED9EE2623EB01FB9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f2:d4:77:81:53:45:9a:ba:e3:b6:db:51:37:
                    6d:30:d0:67:1f:b1:2b:3a:a1:d2:68:f1:ec:4a:95:
                    f0:97:6f:d4:ac:a3:a0:20:15:55:c8:7e:f5:a5:01:
                    f1:01:24:de:f8:33:65:d1:61:fb:77:4a:65:7e:94:
                    5e:0a:31:73:c3:72:5c:b9:81:97:27:e4:5d:48:72:
                    3b:7e:0f:29:a7:60:ff:e7:59:7e:1b:2c:78:bf:ed:
                    3b:ee:46:3f:ff:3e:2a:d0:94:a7:24:84:da:43:51:
                    c8:76:ff:40:f1:6b:e7:9d:5b:a2:32:02:3a:24:22:
                    50:ee:48:41:03:ed:5f:0a:cf:69:39:9b:ed:bf:af:
                    10:7e:b3:96:cd:bf:47:66:56:6d:9d:ea:ef:6b:53:
                    32:da:54:07:e1:e5:bb:3c:6c:87:3b:c7:1f:6c:74:
                    99:06:0d:4b:12:b2:61:b9:67:90:86:73:e6:3e:e2:
                    a9:b7:be:36:a3:02:de:db:85:4b:89:31:aa:c3:55:
                    ca:b4:bb:65:f4:0b:3e:ca:3a:7e:a0:35:19:7e:a6:
                    d3:00:7f:37:df:cd:70:50:13:59:df:c3:f4:48:bf:
                    4a:93:64:76:a2:a6:32:de:1b:26:32:01:db:b1:e7:
                    ed:64:10:b3:64:f7:95:8c:14:5f:27:e0:b3:cb:26:
                    51:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E4:E3:91:A6:EB:BB:FB:A8:74:58:FE:D9:EE:26:23:EB:01:FB:9C
            X509v3 Authority Key Identifier:
                keyid:1B:E0:04:C8:8C:DE:B7:36:10:FC:82:75:8B:90:B1:30:EB:9F:7D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/1BE004C88CDEB73610FC82758B90B130EB9F7D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE004C88CDEB73610FC82758B90B130EB9F7D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/34352e37302e3135362e302f32322d3234203d3e20323637363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:37:4c:af:ea:10:5c:41:70:cc:b5:fc:ca:bb:62:03:cf:c1:
         a7:91:aa:cd:04:c0:04:f7:0e:77:01:db:29:f7:e5:22:74:15:
         1d:f1:89:2e:51:a8:bc:00:3b:00:3c:bb:df:61:f4:61:dc:82:
         12:06:24:8f:8a:0c:b7:7f:5c:4d:37:77:5a:2d:49:17:2b:7e:
         e0:b8:d7:e2:d5:e2:88:59:00:6b:8f:41:ee:f0:d6:1a:1a:a8:
         f9:02:f9:8b:7a:46:ae:a7:ac:25:f5:bf:0e:f0:6c:d1:94:b4:
         d9:36:9d:03:fb:3e:00:20:1c:d5:f1:0c:b6:9e:86:25:05:43:
         42:61:de:52:67:46:10:fd:4f:2a:b3:a4:6d:66:2a:ca:6d:fc:
         e5:95:89:40:5f:cc:d2:bf:bc:8f:ee:9c:9b:24:71:d9:60:5c:
         30:5f:f7:a9:4a:87:98:6c:86:62:34:d3:b9:93:bf:c5:57:4d:
         c4:cc:81:41:a2:b8:f0:e6:46:ab:9f:36:fd:a6:d4:33:a6:0e:
         ef:d0:8c:1b:2e:7f:cd:08:52:76:f0:c3:dc:30:a8:7a:78:c4:
         61:b6:dc:15:54:bb:55:61:bd:26:4f:98:eb:2a:0e:8f:b2:8b:
         8d:32:ea:1c:d2:f9:22:fa:a2:61:ca:b2:2e:9a:4f:49:72:2e:
         e5:c6:69:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:46:11 2026 by rpki-client