Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/34352e3136312e3133362e302f32322d3234203d3e20323638353433.roa
File:                     34352e3136312e3133362e302f32322d3234203d3e20323638353433.roa (raw, json)
Hash identifier:          G1q3aDXg2LtQnvumA1dOUF1K4leeKhWExsaU+z9Zmvk=
Subject key identifier:   9B:90:15:D2:60:A2:D6:FC:D8:6A:61:AB:DC:9F:F7:80:74:B9:FD:1D
Certificate issuer:       /CN=C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88
Certificate serial:       4811EB1C85A0B550E4B3B5AE48DD98DAAB794884
Authority key identifier: C2:CB:7C:1A:52:E7:5C:0D:4B:39:4E:09:FC:63:EA:CF:FD:69:2D:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/34352e3136312e3133362e302f32322d3234203d3e20323638353433.roa
Signing time:             Fri 10 Apr 2026 20:52:03 +0000
ROA not before:           Fri 10 Apr 2026 20:47:03 +0000
ROA not after:            Fri 09 Apr 2027 20:52:03 +0000
asID:                     268543
IP address blocks:        45.161.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.crl
                          rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 14:33:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:11:eb:1c:85:a0:b5:50:e4:b3:b5:ae:48:dd:98:da:ab:79:48:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88
        Validity
            Not Before: Apr 10 20:47:03 2026 GMT
            Not After : Apr  9 20:52:03 2027 GMT
        Subject: CN=9B9015D260A2D6FCD86A61ABDC9FF78074B9FD1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:13:8d:9e:0c:ae:ac:98:b4:44:4e:cf:da:d5:
                    37:b6:31:06:7e:07:96:06:e4:8f:19:2a:e8:98:67:
                    2f:58:84:a2:1c:c2:dc:eb:91:a5:33:b4:96:bc:fc:
                    27:f5:31:86:c0:75:f3:79:4c:b3:27:24:82:ca:d5:
                    2f:4f:5d:06:13:4c:42:56:03:80:c4:09:57:09:e8:
                    12:87:e8:5f:19:f1:cc:42:30:24:56:69:b6:1c:11:
                    9c:1c:02:10:de:83:22:18:23:93:97:3c:fa:4c:7e:
                    9a:c4:f7:ca:77:3e:f2:d7:b5:4a:17:38:5f:c4:a9:
                    bc:1c:08:5c:ed:4d:d2:60:4e:ee:c5:24:ad:20:5d:
                    5d:00:f3:71:fb:05:5a:24:49:59:9a:ea:90:06:ef:
                    73:75:74:3f:57:59:79:59:53:0f:ec:52:5f:66:cc:
                    e9:89:3f:c3:19:1b:ab:b5:29:5a:2a:73:63:67:9b:
                    88:3e:d4:0e:47:18:38:17:c8:3d:30:94:88:cb:50:
                    ce:12:ef:10:f3:95:93:5a:2e:af:80:24:97:ae:d3:
                    bc:46:d9:07:95:a4:ce:b2:4b:01:0d:ad:dd:32:0b:
                    d2:3c:1c:e6:23:44:28:29:9b:5c:fa:1a:3b:27:5b:
                    d7:9c:aa:86:a0:50:bd:1b:74:35:cc:ff:c0:10:7f:
                    db:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:90:15:D2:60:A2:D6:FC:D8:6A:61:AB:DC:9F:F7:80:74:B9:FD:1D
            X509v3 Authority Key Identifier:
                keyid:C2:CB:7C:1A:52:E7:5C:0D:4B:39:4E:09:FC:63:EA:CF:FD:69:2D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/34352e3136312e3133362e302f32322d3234203d3e20323638353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:b6:c5:a4:cd:eb:7f:24:b8:a4:95:d4:8b:13:e3:d6:dd:94:
         38:55:25:06:75:83:65:88:c3:15:da:11:b4:79:e9:39:65:6f:
         79:58:11:55:61:87:b5:53:ec:b4:55:5f:28:d3:18:1b:6d:58:
         a1:45:b2:ee:b2:58:8d:5b:74:4f:4d:29:c5:a1:c4:a7:dd:51:
         17:16:8b:82:a5:54:00:68:f0:fe:ba:4e:0c:72:aa:a2:3a:de:
         8e:64:55:1f:50:c1:e9:b9:4c:61:27:a4:1a:16:b0:72:c4:cf:
         e8:22:4c:dd:f6:62:5d:2d:46:bf:01:8a:3c:37:0b:de:47:4b:
         95:b0:73:b2:76:5f:70:4e:f5:48:63:22:72:6c:a5:f2:32:8b:
         b9:c3:fa:38:43:5c:31:bb:12:54:1b:08:f9:37:d8:e6:47:c4:
         4c:12:70:f4:c1:e0:ab:e5:96:73:4b:68:c5:f8:77:cc:97:9d:
         b5:06:3d:79:15:f6:7a:9b:dc:95:61:f3:d5:fc:0a:3d:4b:59:
         6a:b7:a8:98:0e:0a:d3:cb:60:e6:3e:55:60:79:0c:69:96:ef:
         35:f9:2f:49:dc:93:d8:0f:2f:54:67:ba:ff:8f:eb:60:f6:33:
         c2:85:10:f4:da:33:1d:c0:62:0d:c7:b2:04:68:15:17:65:ef:
         12:c3:eb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:09:54 2026 by rpki-client