Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/34352e3232372e3233362e302f32322d3234203d3e203532393734.roa
File:                     34352e3232372e3233362e302f32322d3234203d3e203532393734.roa (raw, json)
Hash identifier:          +Kt8PZsvJYzb+4p05Cq9kKH+Yxg9QuafXavij4piL3w=
Subject key identifier:   33:7C:1B:FF:14:17:E7:FB:84:BB:D9:0A:CC:29:32:EB:F9:4E:F4:10
Certificate issuer:       /CN=9DFADCEDBD6F72121FB42196F61E059A1B3D2F45
Certificate serial:       15C0B7EBB50D0BBCFF99F67DED19BE2BF832B8D7
Authority key identifier: 9D:FA:DC:ED:BD:6F:72:12:1F:B4:21:96:F6:1E:05:9A:1B:3D:2F:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/34352e3232372e3233362e302f32322d3234203d3e203532393734.roa
Signing time:             Mon 13 Apr 2026 13:47:19 +0000
ROA not before:           Mon 13 Apr 2026 13:42:19 +0000
ROA not after:            Mon 12 Apr 2027 13:47:19 +0000
asID:                     52974
IP address blocks:        45.227.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.crl
                          rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 15:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:c0:b7:eb:b5:0d:0b:bc:ff:99:f6:7d:ed:19:be:2b:f8:32:b8:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DFADCEDBD6F72121FB42196F61E059A1B3D2F45
        Validity
            Not Before: Apr 13 13:42:19 2026 GMT
            Not After : Apr 12 13:47:19 2027 GMT
        Subject: CN=337C1BFF1417E7FB84BBD90ACC2932EBF94EF410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ec:e6:88:ca:4c:2a:2e:31:30:69:ee:4b:14:
                    19:62:3a:fe:da:c4:8f:4d:2d:76:44:0e:89:13:63:
                    6d:21:74:76:36:99:08:bd:a2:ba:4c:70:e0:41:dc:
                    6c:fb:57:08:8f:4b:fa:55:1b:65:41:b0:3c:12:46:
                    cb:19:64:c1:65:be:4d:c9:8c:16:47:5d:b7:56:16:
                    04:e7:b4:23:c8:9d:6d:6d:79:34:67:7a:cf:a6:27:
                    03:e7:13:a0:3c:c1:06:fb:b3:15:20:0a:ad:1f:5a:
                    e9:38:ae:0a:69:f9:6a:57:4b:8d:e1:1b:c6:a9:20:
                    cc:a5:f7:c5:1e:ef:0a:d6:77:34:d1:9b:d3:2a:7c:
                    ca:3c:2d:e5:75:9b:3b:85:48:91:8d:3a:b7:d7:75:
                    22:63:6b:62:d7:5b:42:f5:24:97:f0:fd:ee:8d:f6:
                    84:54:78:fa:d6:5b:b5:32:94:2d:f9:3c:aa:fd:c1:
                    f6:0d:84:3e:a8:a5:2d:03:40:04:49:55:74:0d:a2:
                    0a:c4:c8:6d:77:e7:39:b2:6c:e4:fd:9d:c1:e5:28:
                    6a:bf:03:fd:3f:ff:d8:75:6c:fb:3e:37:5c:95:b5:
                    c7:27:a9:85:62:5c:8a:2f:c5:8a:ce:34:3f:38:9c:
                    1a:8d:bd:97:44:34:04:3a:41:4e:83:41:b9:cd:aa:
                    03:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:7C:1B:FF:14:17:E7:FB:84:BB:D9:0A:CC:29:32:EB:F9:4E:F4:10
            X509v3 Authority Key Identifier:
                keyid:9D:FA:DC:ED:BD:6F:72:12:1F:B4:21:96:F6:1E:05:9A:1B:3D:2F:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/34352e3232372e3233362e302f32322d3234203d3e203532393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:03:1f:ad:84:14:93:4a:d9:6c:26:49:f4:d1:ca:b7:bc:d8:
         ef:06:c7:21:b7:6b:71:04:aa:09:4b:5e:3f:40:44:eb:20:96:
         a8:87:a0:f6:16:94:aa:88:63:c9:ac:c3:35:80:7a:d2:8b:c4:
         71:b4:0b:ac:57:7c:c8:63:50:65:44:dd:76:30:8c:7b:9f:17:
         e9:be:31:5d:12:bd:ac:a1:9b:6e:ac:4d:85:0b:61:72:70:94:
         e7:94:89:9e:46:ca:16:d8:2c:b6:88:ff:0a:01:55:1e:d7:bc:
         3f:4f:c7:1b:e2:50:0e:bd:07:74:21:a0:33:42:28:b2:76:ce:
         4a:ed:19:b4:85:b6:44:06:db:68:51:49:a7:d1:4f:6f:99:68:
         a5:6f:0f:cc:13:c9:5e:f3:ff:9d:c8:3a:50:85:8a:00:d8:e2:
         03:93:ef:b6:64:85:73:f4:42:6b:ab:7d:0c:79:36:ec:4b:ca:
         91:4d:c5:70:94:a2:10:bb:2d:2a:aa:b2:cb:7c:59:78:45:a7:
         13:22:73:22:ce:0d:68:ed:b9:c0:7b:4b:c3:18:4e:ac:da:56:
         6c:93:1f:66:07:13:71:2f:55:62:7c:de:86:20:dc:d6:7d:ad:
         b8:a3:e6:6d:63:28:86:c5:02:37:13:a8:07:db:6b:e7:2b:a7:
         1b:4b:84:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:03:41 2026 by rpki-client