Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPQYZ4rixwRbnMJ2oGh9PEtZMBXrfGcsJ9nYbr6JCMyo/0/34352e3138382e35342e302f32332d3332203d3e20323639353731.roa
File:                     34352e3138382e35342e302f32332d3332203d3e20323639353731.roa (raw, json)
Hash identifier:          bV/mhWUgt22Akf1GTJiMMNshKeGtnHxGN03zCaCIsLE=
Subject key identifier:   FF:E5:EF:4F:C8:09:F3:C3:F7:56:4F:C7:79:B7:BB:23:AB:76:43:AC
Certificate issuer:       /CN=9F407F1B434DB0D66D6F7D3778029A9723E49B7E
Certificate serial:       5DA4B1ED255C2BC645CA54A630956EB26DDA5D5C
Authority key identifier: 9F:40:7F:1B:43:4D:B0:D6:6D:6F:7D:37:78:02:9A:97:23:E4:9B:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F407F1B434DB0D66D6F7D3778029A9723E49B7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPQYZ4rixwRbnMJ2oGh9PEtZMBXrfGcsJ9nYbr6JCMyo/0/34352e3138382e35342e302f32332d3332203d3e20323639353731.roa
Signing time:             Thu 09 Apr 2026 12:44:20 +0000
ROA not before:           Thu 09 Apr 2026 12:39:20 +0000
ROA not after:            Thu 08 Apr 2027 12:44:20 +0000
asID:                     269571
IP address blocks:        45.188.54.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EPQYZ4rixwRbnMJ2oGh9PEtZMBXrfGcsJ9nYbr6JCMyo/0/9F407F1B434DB0D66D6F7D3778029A9723E49B7E.crl
                          rsync://rpki-repo.registro.br/repo/EPQYZ4rixwRbnMJ2oGh9PEtZMBXrfGcsJ9nYbr6JCMyo/0/9F407F1B434DB0D66D6F7D3778029A9723E49B7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F407F1B434DB0D66D6F7D3778029A9723E49B7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 05:59:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a4:b1:ed:25:5c:2b:c6:45:ca:54:a6:30:95:6e:b2:6d:da:5d:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F407F1B434DB0D66D6F7D3778029A9723E49B7E
        Validity
            Not Before: Apr  9 12:39:20 2026 GMT
            Not After : Apr  8 12:44:20 2027 GMT
        Subject: CN=FFE5EF4FC809F3C3F7564FC779B7BB23AB7643AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5f:19:0b:18:c3:2c:e5:b4:d9:df:ec:25:e5:
                    ca:1b:b3:1e:51:e6:75:4c:19:83:dd:e7:d5:88:2f:
                    08:6f:b5:24:83:1c:11:fb:d7:89:98:8c:ef:c9:f4:
                    d9:c4:6d:d2:46:39:e0:83:0e:fd:be:5e:c9:7f:cb:
                    91:de:c0:c5:73:c8:5b:99:1d:f8:77:a6:88:16:0b:
                    33:21:1a:72:1f:a1:56:cc:6d:40:28:94:de:85:03:
                    e5:4f:88:7f:6a:09:93:69:1a:eb:d6:7c:01:2f:ab:
                    90:7f:d0:58:23:c7:7d:9f:13:3d:3f:d9:45:4f:53:
                    d2:e5:68:40:c8:dc:f8:4c:31:7f:e1:54:08:2b:d7:
                    5d:0b:e7:d8:90:13:9c:51:60:f1:01:5b:ca:3b:b5:
                    51:52:a7:fa:d8:6d:44:f7:a2:b2:6c:b7:b2:ea:cc:
                    2c:d6:70:bd:3b:c2:42:8a:7c:59:e3:4d:40:ca:10:
                    9a:40:15:69:82:02:bb:74:1f:c8:d2:71:20:2c:f5:
                    24:9d:d0:22:82:ec:27:4b:20:ad:86:51:37:0e:85:
                    2b:fe:e5:1f:27:a3:22:d3:07:18:62:3a:42:82:a5:
                    f0:57:d1:13:b5:4c:53:7b:11:5d:ca:19:14:ee:fc:
                    9c:2d:81:c3:6e:bf:45:61:08:a7:ac:71:e3:84:a0:
                    f0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E5:EF:4F:C8:09:F3:C3:F7:56:4F:C7:79:B7:BB:23:AB:76:43:AC
            X509v3 Authority Key Identifier:
                keyid:9F:40:7F:1B:43:4D:B0:D6:6D:6F:7D:37:78:02:9A:97:23:E4:9B:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPQYZ4rixwRbnMJ2oGh9PEtZMBXrfGcsJ9nYbr6JCMyo/0/9F407F1B434DB0D66D6F7D3778029A9723E49B7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F407F1B434DB0D66D6F7D3778029A9723E49B7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPQYZ4rixwRbnMJ2oGh9PEtZMBXrfGcsJ9nYbr6JCMyo/0/34352e3138382e35342e302f32332d3332203d3e20323639353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:47:2a:c2:97:3e:d0:2b:2e:7e:31:74:91:a8:49:5a:fc:21:
         1c:35:5f:b2:70:81:45:8b:26:7b:e2:f4:a2:9e:a4:a5:c5:35:
         57:4d:bc:60:27:1b:a8:5d:99:8b:ff:56:82:ac:75:fd:23:59:
         a7:bd:00:f4:6a:d5:52:2e:fb:15:1d:23:0d:34:b9:18:4c:b7:
         ad:9e:fe:b5:42:7a:cc:e1:8c:22:88:d1:b5:ff:8e:5a:37:11:
         7b:3c:53:bd:7e:da:2e:e5:37:6b:c5:bc:3f:a5:ed:54:1b:5f:
         85:2f:0d:0a:37:cc:ec:f1:2c:0a:80:42:4c:5b:1f:81:87:15:
         3f:35:7e:8f:2b:22:c7:10:59:1b:f7:71:78:9c:48:ee:0b:c2:
         1a:35:36:1c:7e:3e:99:f2:15:7e:7a:8b:48:9d:d6:a2:cb:80:
         66:50:11:9c:79:8f:05:1c:02:80:15:d4:53:17:0b:32:5b:d0:
         43:51:b0:0c:72:88:ed:0c:c0:5c:fe:2b:6e:b6:45:df:f9:da:
         48:50:39:6f:1c:09:3b:77:f1:cf:5b:0c:a3:f5:13:3d:1f:cb:
         99:8e:26:27:d4:a3:58:d0:f1:e1:ab:65:f5:df:c0:8e:16:55:
         d9:9c:fa:1c:81:ca:7c:2d:1f:7d:81:82:f4:0f:34:54:f3:83:
         7e:d8:a8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:58:07 2026 by rpki-client