Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/34352e3232342e3132382e302f32322d3234203d3e20323636343030.roa
File:                     34352e3232342e3132382e302f32322d3234203d3e20323636343030.roa (raw, json)
Hash identifier:          JZfHG4TWpEne2/1cim/ruMkXasZKNq75zP9QTA5/QY0=
Subject key identifier:   B7:61:CC:AA:1A:EC:67:C3:2A:A7:AF:16:CF:A5:43:A4:C4:1E:12:72
Certificate issuer:       /CN=A653D5055FC338B089E2C732382682788F082F11
Certificate serial:       4F0D241A41827D15D1002B39977ABCDF6ECB06DD
Authority key identifier: A6:53:D5:05:5F:C3:38:B0:89:E2:C7:32:38:26:82:78:8F:08:2F:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A653D5055FC338B089E2C732382682788F082F11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/34352e3232342e3132382e302f32322d3234203d3e20323636343030.roa
Signing time:             Thu 05 Feb 2026 11:00:31 +0000
ROA not before:           Thu 05 Feb 2026 10:55:31 +0000
ROA not after:            Thu 04 Feb 2027 11:00:31 +0000
asID:                     266400
IP address blocks:        45.224.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.crl
                          rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A653D5055FC338B089E2C732382682788F082F11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 12:44:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:0d:24:1a:41:82:7d:15:d1:00:2b:39:97:7a:bc:df:6e:cb:06:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A653D5055FC338B089E2C732382682788F082F11
        Validity
            Not Before: Feb  5 10:55:31 2026 GMT
            Not After : Feb  4 11:00:31 2027 GMT
        Subject: CN=B761CCAA1AEC67C32AA7AF16CFA543A4C41E1272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:93:50:33:a3:8a:b9:89:4d:56:c7:db:4a:48:
                    34:04:89:c0:ea:3a:b5:81:48:7e:3d:d7:b9:f6:6f:
                    5c:6e:3c:a9:ac:d7:1c:12:a5:8b:da:75:b4:35:c0:
                    87:05:91:6b:a6:e9:17:88:cb:31:13:85:d0:fb:c4:
                    d9:d3:5d:fa:18:13:c4:e4:a1:00:0f:b5:ea:3d:37:
                    3a:e2:17:e6:49:3e:27:ef:36:09:1b:8e:28:42:52:
                    42:f9:41:73:2e:ba:86:f3:82:6b:0e:7f:e2:05:7d:
                    bc:0a:aa:d7:93:bc:85:67:49:d1:3b:e0:63:83:2d:
                    e0:2b:86:52:4d:7b:74:b6:6c:f2:2d:b2:c3:3b:5f:
                    33:19:97:ca:be:bc:14:3a:1b:10:bf:8c:e1:90:a1:
                    32:01:9d:ac:61:5a:01:06:bd:8b:2d:0f:dd:d5:c4:
                    c6:73:cf:9f:a2:78:69:66:52:aa:7e:fa:f6:34:5b:
                    16:fe:6b:58:28:e1:fd:43:0c:54:3d:08:4a:4a:de:
                    fc:b5:59:c4:6d:81:05:b4:24:01:de:53:2b:d3:9f:
                    13:9e:33:c3:00:1e:0d:fb:f3:f0:12:49:3c:59:4a:
                    e7:71:80:1d:dc:fa:15:a4:eb:91:7e:2d:82:d2:a4:
                    ed:e9:bc:6c:b3:f7:65:08:b0:38:7e:6a:2d:67:35:
                    d3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:61:CC:AA:1A:EC:67:C3:2A:A7:AF:16:CF:A5:43:A4:C4:1E:12:72
            X509v3 Authority Key Identifier:
                keyid:A6:53:D5:05:5F:C3:38:B0:89:E2:C7:32:38:26:82:78:8F:08:2F:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A653D5055FC338B089E2C732382682788F082F11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/34352e3232342e3132382e302f32322d3234203d3e20323636343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:bb:b2:e6:7f:4a:95:b8:74:f3:99:a3:68:cf:d7:89:8c:3c:
         3a:68:04:52:0f:27:bf:94:32:64:71:ef:42:76:2c:9e:af:ee:
         bc:97:9a:3b:81:88:4e:01:0e:bb:8b:f6:ba:a7:eb:85:74:05:
         dc:fa:49:e1:15:ea:a4:1b:9f:4e:bb:da:3e:76:27:7c:e6:ab:
         3b:0a:85:3e:48:9f:36:c4:af:bd:ce:01:57:6b:79:58:07:25:
         cc:8b:b4:c5:73:d0:2f:8e:7e:58:63:e7:1a:95:99:76:3d:d7:
         ed:93:32:7d:3b:b8:0a:14:ef:34:cd:13:5f:57:40:00:37:cf:
         4a:78:f8:b6:55:c3:53:bd:cc:1e:25:ce:bf:d2:42:b5:92:58:
         a4:ac:66:00:7c:de:67:72:9b:0a:09:e4:45:b3:23:cf:55:cf:
         21:74:87:b5:3c:cb:2b:f2:96:25:75:56:b8:17:37:e6:9c:6c:
         55:bb:d5:8e:fd:4b:cc:68:8e:83:af:27:dd:e5:d6:da:ca:29:
         63:40:1d:24:e1:ee:7f:38:fc:80:01:db:73:35:78:4a:3c:7c:
         6e:de:ed:96:41:cd:61:41:36:bb:e4:3f:91:ce:0f:0b:96:84:
         91:1d:9f:0e:69:5a:21:53:f4:0f:4c:10:96:37:db:e9:7a:5a:
         5c:b0:5d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:19:16 2026 by rpki-client