Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/34352e3137382e3134352e302f32342d3234203d3e20323639303232.roa
File:                     34352e3137382e3134352e302f32342d3234203d3e20323639303232.roa (raw, json)
Hash identifier:          8ZrnFWV7FSjeurFK6ELOE3Bwa1aZZ2ZpmnFMMrAEwpY=
Subject key identifier:   D3:4D:D1:3B:00:65:6E:DF:D2:7B:AB:68:9F:77:94:B4:0D:B6:5F:BB
Certificate issuer:       /CN=CDCD83F4405AFD2B52943F9838374A340858512F
Certificate serial:       6E2BEF180954214FDC94335C2368BDF836E9FCC3
Authority key identifier: CD:CD:83:F4:40:5A:FD:2B:52:94:3F:98:38:37:4A:34:08:58:51:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCD83F4405AFD2B52943F9838374A340858512F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/34352e3137382e3134352e302f32342d3234203d3e20323639303232.roa
Signing time:             Mon 02 Mar 2026 15:51:12 +0000
ROA not before:           Mon 02 Mar 2026 15:46:12 +0000
ROA not after:            Mon 01 Mar 2027 15:51:12 +0000
asID:                     269022
IP address blocks:        45.178.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.crl
                          rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCD83F4405AFD2B52943F9838374A340858512F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 16:51:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:2b:ef:18:09:54:21:4f:dc:94:33:5c:23:68:bd:f8:36:e9:fc:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDCD83F4405AFD2B52943F9838374A340858512F
        Validity
            Not Before: Mar  2 15:46:12 2026 GMT
            Not After : Mar  1 15:51:12 2027 GMT
        Subject: CN=D34DD13B00656EDFD27BAB689F7794B40DB65FBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2f:1b:08:03:b1:54:81:3d:01:4d:b9:d4:25:
                    db:f2:22:7c:f8:fc:84:56:e6:12:ad:8f:e2:12:05:
                    63:36:2f:39:8d:d1:3d:73:ac:5f:7e:97:aa:76:57:
                    2f:81:a9:f7:fc:6d:66:3e:08:85:31:84:2d:4c:9c:
                    af:bb:92:a6:33:b7:71:81:a9:9f:68:52:05:99:29:
                    1f:01:c1:3a:69:43:60:99:53:04:a8:e8:33:28:16:
                    84:6e:49:2a:0a:26:fd:fc:6b:94:d3:d2:70:18:a2:
                    a9:75:6f:3a:8b:77:05:7d:01:13:3e:02:46:a4:50:
                    4a:33:a1:4d:34:89:45:36:f8:aa:a6:2b:33:0f:1c:
                    c3:85:7c:e5:a3:7f:11:bf:8a:26:98:9d:bf:88:26:
                    2f:1a:1f:fa:98:97:d9:70:97:cc:73:fc:c5:08:35:
                    8a:c8:0b:ff:23:1e:c9:11:a0:b7:06:ef:b6:cd:3f:
                    2e:48:63:09:99:8b:16:df:ce:d3:a3:07:c1:2b:ea:
                    c5:96:89:0e:73:80:b1:ff:bc:95:d6:d6:b2:05:48:
                    54:b4:c7:f1:56:ea:c0:ca:2f:a2:9f:dc:c0:06:88:
                    21:a4:6e:4c:f4:ba:1c:af:1d:02:5d:25:85:db:c8:
                    33:cf:cc:00:95:a8:8f:30:8e:d9:2c:9a:ff:95:e5:
                    a6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:4D:D1:3B:00:65:6E:DF:D2:7B:AB:68:9F:77:94:B4:0D:B6:5F:BB
            X509v3 Authority Key Identifier:
                keyid:CD:CD:83:F4:40:5A:FD:2B:52:94:3F:98:38:37:4A:34:08:58:51:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCD83F4405AFD2B52943F9838374A340858512F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/34352e3137382e3134352e302f32342d3234203d3e20323639303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:f6:4e:9e:cf:ce:64:16:32:a7:fb:32:c3:1c:33:72:b9:81:
         e4:ba:2f:8c:b9:e4:af:c3:96:76:7c:2a:d1:03:7a:d4:7e:c3:
         d0:a2:fb:14:66:6e:a1:3d:83:c6:3e:df:00:7f:98:b2:48:ff:
         28:da:e8:a3:bb:bf:a8:35:dd:6b:5b:da:88:07:83:da:80:72:
         30:56:4e:68:a8:bb:20:0d:23:6a:34:f5:73:01:5b:e1:d8:cc:
         82:e0:9b:48:70:52:e8:08:ea:f3:a9:d9:e9:f1:35:0b:a5:7c:
         4f:ce:77:6e:a9:86:80:ac:34:08:90:50:5b:fa:2c:aa:9c:5f:
         c5:20:27:1a:1b:ec:65:cd:56:12:f1:a5:87:7e:01:f0:88:0a:
         c3:d4:cc:76:b0:d7:bf:94:cf:a1:af:02:4a:fd:4d:ab:81:5b:
         7a:0b:0d:a6:47:9a:67:bf:01:d7:7e:f7:01:f3:08:b0:1b:8b:
         6d:d4:e2:bd:0d:20:12:e9:af:84:e5:72:56:cd:17:c5:d0:58:
         5d:cf:11:82:a7:bd:5b:5b:42:18:00:69:ea:c6:86:b2:0d:e1:
         03:a8:84:a2:69:c2:7f:9a:b4:6c:a5:b6:e2:73:91:af:8a:39:
         ee:95:13:e8:5c:84:57:8d:34:81:29:a1:16:c4:47:d0:a1:d7:
         7c:ec:84:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:12:10 2026 by rpki-client