Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6hfmpQfV8bvgkcGxpCTqzBYTUMxV8TSmZpjnVyJGvJvh/0/34352e3233352e33322e302f32322d3234203d3e20323637333939.roa
File:                     34352e3233352e33322e302f32322d3234203d3e20323637333939.roa (raw, json)
Hash identifier:          vYyTJZKiXmfXIDZ7k+xR5fXgMKkOh2kTBdZVCML/8AA=
Subject key identifier:   64:F7:EE:3B:7B:0C:9F:9D:62:BC:F2:76:73:17:BA:D2:5A:69:45:04
Certificate issuer:       /CN=9807BDF883A9B2ECAEFC43A3A02CFC892CABAF0F
Certificate serial:       6BA9605CDC0B7863100FE3B2B638BEC29D70E788
Authority key identifier: 98:07:BD:F8:83:A9:B2:EC:AE:FC:43:A3:A0:2C:FC:89:2C:AB:AF:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9807BDF883A9B2ECAEFC43A3A02CFC892CABAF0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6hfmpQfV8bvgkcGxpCTqzBYTUMxV8TSmZpjnVyJGvJvh/0/34352e3233352e33322e302f32322d3234203d3e20323637333939.roa
Signing time:             Thu 26 Feb 2026 12:28:23 +0000
ROA not before:           Thu 26 Feb 2026 12:23:23 +0000
ROA not after:            Thu 25 Feb 2027 12:28:23 +0000
asID:                     267399
IP address blocks:        45.235.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6hfmpQfV8bvgkcGxpCTqzBYTUMxV8TSmZpjnVyJGvJvh/0/9807BDF883A9B2ECAEFC43A3A02CFC892CABAF0F.crl
                          rsync://rpki-repo.registro.br/repo/6hfmpQfV8bvgkcGxpCTqzBYTUMxV8TSmZpjnVyJGvJvh/0/9807BDF883A9B2ECAEFC43A3A02CFC892CABAF0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9807BDF883A9B2ECAEFC43A3A02CFC892CABAF0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 12:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:a9:60:5c:dc:0b:78:63:10:0f:e3:b2:b6:38:be:c2:9d:70:e7:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9807BDF883A9B2ECAEFC43A3A02CFC892CABAF0F
        Validity
            Not Before: Feb 26 12:23:23 2026 GMT
            Not After : Feb 25 12:28:23 2027 GMT
        Subject: CN=64F7EE3B7B0C9F9D62BCF2767317BAD25A694504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:69:8f:a4:61:06:f6:59:2c:8b:94:20:75:48:
                    09:90:56:d2:a4:10:74:38:af:87:ba:ca:c4:cd:63:
                    73:01:3f:b0:1b:fc:3b:aa:2f:5d:86:16:f1:27:56:
                    88:62:a1:ea:d9:86:07:73:51:9e:9e:b5:a4:1b:51:
                    a9:aa:4b:dd:db:ad:72:ee:d9:82:ba:72:90:60:b5:
                    57:df:83:17:ae:1d:03:f0:9a:66:60:3b:6c:96:e4:
                    27:c3:2f:33:f4:04:3c:a5:c5:d5:c9:b3:71:36:d2:
                    80:48:2f:78:54:d7:8c:e4:9c:50:fe:50:5d:33:9a:
                    7e:40:d9:08:0e:de:4a:d6:93:5d:2c:e8:24:9b:c4:
                    0e:ba:e2:91:a5:89:07:e2:2d:12:68:0e:29:c9:95:
                    9e:01:8f:41:64:ee:f8:8b:15:60:35:32:c4:06:a5:
                    d7:ca:81:1c:e1:ef:88:25:cf:01:12:32:b7:dd:47:
                    bc:9e:90:a7:da:24:42:83:63:7d:52:e2:8c:41:57:
                    cc:33:be:65:6a:00:07:22:c7:1f:0e:f0:d8:61:08:
                    28:07:4c:8a:d3:15:d5:f4:f3:d5:38:c7:73:5c:68:
                    8d:c0:37:3e:e3:2d:7c:9a:93:3c:11:73:34:d1:59:
                    7e:04:cf:21:8e:d4:0f:a5:4e:b8:62:c0:30:c0:0b:
                    1a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F7:EE:3B:7B:0C:9F:9D:62:BC:F2:76:73:17:BA:D2:5A:69:45:04
            X509v3 Authority Key Identifier:
                keyid:98:07:BD:F8:83:A9:B2:EC:AE:FC:43:A3:A0:2C:FC:89:2C:AB:AF:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6hfmpQfV8bvgkcGxpCTqzBYTUMxV8TSmZpjnVyJGvJvh/0/9807BDF883A9B2ECAEFC43A3A02CFC892CABAF0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9807BDF883A9B2ECAEFC43A3A02CFC892CABAF0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6hfmpQfV8bvgkcGxpCTqzBYTUMxV8TSmZpjnVyJGvJvh/0/34352e3233352e33322e302f32322d3234203d3e20323637333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:5c:6d:9c:42:8c:7c:ba:f9:80:06:ca:85:5f:a0:77:ca:c8:
         ff:b0:4b:a5:91:8f:f4:6e:89:a9:9d:9d:47:48:82:6f:4f:b6:
         40:98:33:4a:34:ea:14:ae:c9:a1:8a:b4:be:d2:42:22:f3:c4:
         ae:79:19:e2:96:05:5f:8b:a8:19:c8:6f:d1:eb:90:ed:b9:64:
         b7:c5:b3:0a:c8:c3:66:55:a2:f5:d5:38:5e:6c:fc:c3:9f:4e:
         b6:4f:a6:22:1f:62:8b:6b:e7:8a:cd:db:f6:05:7c:42:cb:91:
         c9:da:71:3d:aa:04:5f:20:86:31:54:da:4a:89:85:46:1a:9e:
         19:1a:4d:3c:f5:51:61:99:71:c1:87:fa:ca:bc:22:e2:e3:ba:
         e7:f1:d2:b4:51:c7:62:c8:fc:9e:9b:58:49:d7:7c:58:20:ea:
         c5:a2:2d:dd:a0:8f:4a:9a:1c:ec:cf:bb:34:39:f6:32:cd:97:
         79:db:71:fe:13:93:3f:5b:e9:3f:8b:90:b7:77:20:a3:ba:88:
         86:e1:0a:9e:f3:bb:56:c8:f8:ea:8b:80:a2:89:df:8c:6a:55:
         d8:b0:f7:18:e0:55:86:d2:12:3c:1b:ec:6e:ca:3b:0b:3d:0a:
         7c:3e:5c:74:07:8d:5c:bc:49:fd:53:df:30:33:1f:3b:6d:12:
         32:7c:42:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:42:38 2026 by rpki-client