Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/34352e3136392e32342e302f32332d3233203d3e20323638303931.roa
File:                     34352e3136392e32342e302f32332d3233203d3e20323638303931.roa (raw, json)
Hash identifier:          xVN6d8jLhHEzJJL8GxSiQptrZYAJzSYTHxVKxVRND0g=
Subject key identifier:   51:30:61:B0:CF:9D:58:03:B9:4A:AA:82:45:72:01:2D:7F:08:7C:C3
Certificate issuer:       /CN=89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C
Certificate serial:       47EBB8B13A7F0C2CDC0018BDCA6BF16792A96367
Authority key identifier: 89:48:9A:8E:2C:AF:2E:A1:6C:1D:AA:6E:07:FB:00:46:3F:4F:78:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/34352e3136392e32342e302f32332d3233203d3e20323638303931.roa
Signing time:             Thu 09 Apr 2026 18:53:05 +0000
ROA not before:           Thu 09 Apr 2026 18:48:05 +0000
ROA not after:            Thu 08 Apr 2027 18:53:05 +0000
asID:                     268091
IP address blocks:        45.169.24.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.crl
                          rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 02:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:eb:b8:b1:3a:7f:0c:2c:dc:00:18:bd:ca:6b:f1:67:92:a9:63:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C
        Validity
            Not Before: Apr  9 18:48:05 2026 GMT
            Not After : Apr  8 18:53:05 2027 GMT
        Subject: CN=513061B0CF9D5803B94AAA824572012D7F087CC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:4f:1c:61:c7:b9:9c:54:81:be:c4:0f:da:a6:
                    9e:ff:33:13:f5:76:f6:a4:75:5b:7e:27:e4:21:45:
                    87:30:57:2d:12:ab:6e:41:4d:29:56:68:fc:85:4f:
                    d1:fb:69:e7:04:c1:3b:62:d5:dc:d0:f3:fb:34:5a:
                    de:b2:53:f7:0e:1a:dd:b8:d3:70:1d:fc:a0:a5:84:
                    27:ce:aa:81:bb:c4:32:9e:14:66:6e:6c:ee:1d:ea:
                    fa:88:c2:be:a1:6f:82:26:2e:30:88:ef:52:51:1a:
                    8c:0b:6b:5e:d4:7d:d2:2b:96:f8:f9:b8:a9:c1:0e:
                    a5:31:c7:5b:29:08:5e:da:3a:47:57:8f:3b:c0:18:
                    26:77:f6:5f:75:ff:fa:e9:1b:e2:5b:20:6d:ea:fa:
                    c1:e8:bc:dc:3f:66:d4:f1:b6:c0:81:e5:01:8a:1e:
                    63:e1:a6:2e:2f:4a:de:79:28:cd:63:b6:b4:b2:66:
                    f8:5c:0e:45:4c:ef:e6:d2:8b:d4:51:81:c3:07:21:
                    b7:cc:10:53:89:01:98:29:98:bc:36:34:2c:14:2e:
                    01:7f:9f:46:01:e3:24:65:82:f4:72:9a:e7:69:e3:
                    c3:0c:7e:f2:b8:1d:7b:40:8b:5e:2d:bd:93:0f:a9:
                    cc:a1:be:0d:b6:4a:ae:80:98:76:36:0d:ea:a6:65:
                    c7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:30:61:B0:CF:9D:58:03:B9:4A:AA:82:45:72:01:2D:7F:08:7C:C3
            X509v3 Authority Key Identifier:
                keyid:89:48:9A:8E:2C:AF:2E:A1:6C:1D:AA:6E:07:FB:00:46:3F:4F:78:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/34352e3136392e32342e302f32332d3233203d3e20323638303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:be:06:1a:bc:0f:70:86:eb:e5:1f:cd:85:fc:47:e7:0e:7b:
         0a:8b:03:55:d6:a9:f9:03:bc:29:de:86:9e:87:74:64:ab:d8:
         73:fb:9b:e9:a1:15:18:a5:b3:07:eb:8d:5c:79:8a:d9:72:e3:
         10:f1:93:44:db:8a:17:c6:f5:cb:4a:eb:f5:83:3f:60:33:32:
         a4:f5:8d:2b:57:d0:b5:a8:ad:f1:b0:c4:00:48:8c:f3:44:f7:
         cf:16:0b:67:be:18:83:1c:24:f6:d5:0a:7a:7c:ab:e1:69:e9:
         29:42:b3:f6:87:51:45:d6:7c:95:5b:aa:e8:0e:8b:91:b7:23:
         d7:6d:7c:6f:e2:2a:1f:07:8e:d3:5c:c4:2e:4c:65:e4:d9:7a:
         f8:9f:36:4b:f3:e2:eb:85:06:0e:6c:5a:fd:96:5e:9e:3e:bd:
         cf:0f:f1:59:a8:09:f5:c3:e3:ba:f4:cb:b6:63:05:bc:6f:40:
         9d:5e:74:1f:3b:94:e3:5a:ab:1d:46:dc:3d:4b:22:33:d2:1c:
         12:86:81:e3:06:f0:2b:32:25:8e:ce:32:3c:db:04:d3:a3:85:
         52:c7:88:45:89:45:27:6c:93:f5:d1:fa:18:2f:c4:a2:a3:9e:
         b6:01:7a:d0:d2:b5:df:8f:85:62:14:62:a1:19:84:7f:5b:1e:
         93:60:5c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:28:52 2026 by rpki-client