Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6gPDYjMDSV4zgy5cmLTykDRzxbvogLdyo5K6HdrTs7DF/0/34352e3139302e3232302e302f32322d3234203d3e20323632323738.roa
File:                     34352e3139302e3232302e302f32322d3234203d3e20323632323738.roa (raw, json)
Hash identifier:          F3RnQp0LGQund+odvbjm+t6DGFYVOBQPL3Dq8ltcn4A=
Subject key identifier:   56:8B:6C:46:74:85:EA:FB:F6:D7:8E:AF:1E:3B:B5:FF:6A:F9:B2:5D
Certificate issuer:       /CN=0A35962D2BA118EFEA10530BE8D88A22C2C54ADE
Certificate serial:       5628AAD06F41470FF1FF05838E043E30E95E3AA3
Authority key identifier: 0A:35:96:2D:2B:A1:18:EF:EA:10:53:0B:E8:D8:8A:22:C2:C5:4A:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A35962D2BA118EFEA10530BE8D88A22C2C54ADE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6gPDYjMDSV4zgy5cmLTykDRzxbvogLdyo5K6HdrTs7DF/0/34352e3139302e3232302e302f32322d3234203d3e20323632323738.roa
Signing time:             Tue 24 Feb 2026 12:35:23 +0000
ROA not before:           Tue 24 Feb 2026 12:30:23 +0000
ROA not after:            Tue 23 Feb 2027 12:35:23 +0000
asID:                     262278
IP address blocks:        45.190.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6gPDYjMDSV4zgy5cmLTykDRzxbvogLdyo5K6HdrTs7DF/0/0A35962D2BA118EFEA10530BE8D88A22C2C54ADE.crl
                          rsync://rpki-repo.registro.br/repo/6gPDYjMDSV4zgy5cmLTykDRzxbvogLdyo5K6HdrTs7DF/0/0A35962D2BA118EFEA10530BE8D88A22C2C54ADE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A35962D2BA118EFEA10530BE8D88A22C2C54ADE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 16:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:28:aa:d0:6f:41:47:0f:f1:ff:05:83:8e:04:3e:30:e9:5e:3a:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A35962D2BA118EFEA10530BE8D88A22C2C54ADE
        Validity
            Not Before: Feb 24 12:30:23 2026 GMT
            Not After : Feb 23 12:35:23 2027 GMT
        Subject: CN=568B6C467485EAFBF6D78EAF1E3BB5FF6AF9B25D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:66:a7:93:b1:21:52:84:f5:9c:4a:c8:5e:d5:
                    bb:12:81:b9:16:e4:9e:ac:95:fb:67:cb:29:0c:cf:
                    c2:d5:75:d0:16:7f:7b:08:9f:b3:00:d2:4d:db:98:
                    0f:2e:b8:a0:0c:0d:09:26:a6:61:df:41:1b:7e:8b:
                    c8:53:cb:7f:1d:f9:a7:89:b0:b6:a1:3c:cd:4e:d6:
                    cb:d2:4a:55:5d:75:92:8c:25:10:f8:b1:99:dd:60:
                    40:cf:3d:ce:ea:f3:34:9e:4d:eb:af:8f:a3:f6:0a:
                    b1:9f:2b:90:bc:5d:8a:69:03:34:bf:39:af:1e:68:
                    90:3a:f4:a2:80:df:b7:bf:ce:2e:6b:ee:c4:b0:2c:
                    23:07:cc:fa:7a:3d:e3:da:9a:3d:85:31:e7:7a:c6:
                    6f:08:1e:27:ef:5d:35:2b:c8:8b:f9:60:f5:75:e1:
                    8d:79:e2:65:a4:8a:68:98:e8:61:4e:45:a0:0a:39:
                    3a:87:4a:c5:3d:e2:f7:a5:c9:15:9d:61:45:80:b3:
                    1b:a7:df:41:22:05:89:bb:bf:01:6c:e5:1f:a2:85:
                    ce:89:a8:37:65:7d:f5:21:dd:78:df:f3:63:d8:4b:
                    a2:96:18:21:4e:a3:51:e0:30:12:69:a4:f5:45:a3:
                    f0:48:ea:f4:e9:cd:47:0d:d0:34:20:d6:3e:70:9a:
                    56:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:8B:6C:46:74:85:EA:FB:F6:D7:8E:AF:1E:3B:B5:FF:6A:F9:B2:5D
            X509v3 Authority Key Identifier:
                keyid:0A:35:96:2D:2B:A1:18:EF:EA:10:53:0B:E8:D8:8A:22:C2:C5:4A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6gPDYjMDSV4zgy5cmLTykDRzxbvogLdyo5K6HdrTs7DF/0/0A35962D2BA118EFEA10530BE8D88A22C2C54ADE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A35962D2BA118EFEA10530BE8D88A22C2C54ADE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6gPDYjMDSV4zgy5cmLTykDRzxbvogLdyo5K6HdrTs7DF/0/34352e3139302e3232302e302f32322d3234203d3e20323632323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:9b:b9:02:f9:1c:52:14:5d:36:79:7c:82:87:4f:50:61:7c:
         3b:7b:5e:ba:3d:f3:a7:3d:c8:31:81:66:97:63:4d:97:79:50:
         16:92:48:9d:af:4d:61:c0:8b:35:90:fe:82:1a:5c:a5:60:24:
         a7:b8:13:d7:bb:b9:e7:fe:3f:5c:f4:7c:8d:b0:b4:2b:8e:fa:
         6c:ab:69:41:2c:51:2b:84:c0:03:79:53:f6:81:d1:6a:15:a3:
         84:7f:7b:36:7b:b1:ca:7e:0a:95:04:49:ba:68:6f:ba:f3:a3:
         a9:21:7f:ae:af:9d:f4:28:52:09:e1:6b:3e:c9:19:cb:ac:13:
         a2:c7:9f:09:28:14:de:6c:cc:9d:f5:43:23:08:4c:d9:58:2b:
         78:cf:e1:5f:c5:e2:46:d6:99:b9:33:cc:53:7a:e6:68:4c:f4:
         c8:d0:72:e4:29:63:cd:49:3c:b6:b9:6f:bb:74:20:d7:10:94:
         6c:77:43:44:de:11:2a:4b:98:75:fe:f9:15:ac:0e:a5:e5:a7:
         82:06:8f:84:36:02:1e:6c:0c:9e:99:2d:39:a1:26:6a:ce:fc:
         1d:f9:75:bf:48:a6:13:b0:5f:2e:78:fa:33:fd:73:38:cd:da:
         b1:52:3d:48:8f:f7:1a:cf:c8:92:e5:34:0e:ee:8c:c2:a5:a5:
         d1:57:bf:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:27:21 2026 by rpki-client