Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/34352e3137382e3134342e302f32332d3233203d3e20323639303232.roa
File:                     34352e3137382e3134342e302f32332d3233203d3e20323639303232.roa (raw, json)
Hash identifier:          P4aUTkEX1UhljqWSBBm4BMwWyuQUYrwO19k7SJQhfvA=
Subject key identifier:   10:04:F1:4E:AF:E6:D9:C3:BE:B7:7E:39:54:6C:B0:8D:5D:2F:C5:25
Certificate issuer:       /CN=CDCD83F4405AFD2B52943F9838374A340858512F
Certificate serial:       781FC22894AC46878118E57B1030B24E3F40D876
Authority key identifier: CD:CD:83:F4:40:5A:FD:2B:52:94:3F:98:38:37:4A:34:08:58:51:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCD83F4405AFD2B52943F9838374A340858512F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/34352e3137382e3134342e302f32332d3233203d3e20323639303232.roa
Signing time:             Mon 02 Mar 2026 15:50:08 +0000
ROA not before:           Mon 02 Mar 2026 15:45:08 +0000
ROA not after:            Mon 01 Mar 2027 15:50:08 +0000
asID:                     269022
IP address blocks:        45.178.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.crl
                          rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCD83F4405AFD2B52943F9838374A340858512F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 16:51:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:1f:c2:28:94:ac:46:87:81:18:e5:7b:10:30:b2:4e:3f:40:d8:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDCD83F4405AFD2B52943F9838374A340858512F
        Validity
            Not Before: Mar  2 15:45:08 2026 GMT
            Not After : Mar  1 15:50:08 2027 GMT
        Subject: CN=1004F14EAFE6D9C3BEB77E39546CB08D5D2FC525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:eb:28:f6:3b:f6:07:74:71:8f:29:1d:52:e3:
                    a1:19:a6:e4:24:a0:16:f9:fe:0e:35:a3:2e:3e:53:
                    00:e0:9d:a4:9e:2d:4d:35:d2:d7:66:f4:ea:ac:e1:
                    17:17:bb:fe:e1:48:e7:ad:62:1d:91:8f:50:cf:24:
                    06:4f:52:8c:1e:76:bb:2c:82:50:a0:5d:96:7e:fb:
                    56:7e:12:f6:3f:36:3a:97:6e:e8:d4:c5:e8:80:18:
                    eb:cf:5f:b2:32:0e:34:a5:4c:db:a1:ea:3c:92:83:
                    80:1c:5c:bd:6a:d9:72:b7:e9:99:db:15:e3:6d:bd:
                    92:64:cf:43:83:46:9b:13:05:0c:84:27:19:c3:80:
                    4f:d8:26:c8:d8:f6:c5:44:60:e8:e3:e7:97:bc:bb:
                    28:9b:f4:aa:60:d5:22:81:64:4f:ea:de:6d:3c:38:
                    38:94:e9:d7:09:db:d1:44:38:4c:76:47:92:2c:7b:
                    ac:d8:08:74:48:9a:0d:91:67:b9:c4:38:18:e7:e1:
                    18:9c:a8:25:65:cf:2e:b2:c7:8a:de:a6:61:70:68:
                    59:39:98:23:b5:76:68:7c:e1:d0:a4:95:63:2f:e2:
                    e7:6e:ad:01:20:0a:c9:03:f1:ba:47:bc:af:37:6b:
                    21:20:86:fb:47:7b:66:6b:6f:bd:e7:62:dd:3c:39:
                    33:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:04:F1:4E:AF:E6:D9:C3:BE:B7:7E:39:54:6C:B0:8D:5D:2F:C5:25
            X509v3 Authority Key Identifier:
                keyid:CD:CD:83:F4:40:5A:FD:2B:52:94:3F:98:38:37:4A:34:08:58:51:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCD83F4405AFD2B52943F9838374A340858512F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/34352e3137382e3134342e302f32332d3233203d3e20323639303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:9a:61:a8:f4:cb:2f:70:49:e9:4b:64:0b:8a:89:22:56:1e:
         97:5e:17:07:20:ca:ba:e9:a3:0c:e3:d4:8e:69:8d:ca:b2:b4:
         6c:e9:48:9b:58:74:37:3b:22:6d:a4:6e:22:dc:f2:1f:eb:84:
         53:ec:d2:e9:b2:2c:ae:3a:90:bb:06:9f:93:ff:c4:d7:36:7a:
         17:c6:69:9c:db:49:e6:2f:05:8f:eb:c4:34:9e:8a:a1:eb:14:
         94:c4:55:3f:1e:f8:db:cc:4d:71:7c:de:d0:a1:80:95:ec:c5:
         c6:51:b1:77:ee:69:b7:70:4e:92:76:ce:70:cd:db:15:a9:24:
         61:6e:08:cc:e2:03:85:3d:f1:7f:4b:74:48:c3:3a:58:50:d5:
         e5:d1:42:c5:24:2b:25:b7:36:a6:53:e7:6d:02:a6:6c:a9:c3:
         1d:ff:4d:c7:e0:8b:5c:91:05:21:b8:9b:bb:92:18:91:8c:88:
         20:5a:de:f8:9d:54:88:f3:4d:2d:d1:b7:3a:f3:c8:9b:97:6b:
         3b:b3:b8:9c:8b:53:a0:f0:d1:b8:f8:5d:96:7a:0e:cc:7b:a6:
         1a:52:e4:2a:cc:62:df:7a:b9:f7:22:ad:11:04:a4:00:25:86:
         09:e8:c8:d4:7e:38:3e:d6:0b:77:44:6f:51:cb:df:ae:bf:f7:
         be:6c:7e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:12:12 2026 by rpki-client