Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/34352e372e3132382e302f32322d3234203d3e203533303632.roa
File:                     34352e372e3132382e302f32322d3234203d3e203533303632.roa (raw, json)
Hash identifier:          GE3gGVQeD3YNUf38ceAm6JSPmg08xuOGP4ggTgUw/aY=
Subject key identifier:   D6:C2:D2:B5:AC:D6:34:8C:F1:E6:9A:24:B4:32:D3:0A:77:90:1E:83
Certificate issuer:       /CN=D23A9AB74382168B4B0E0F5772B4F25A461F8B60
Certificate serial:       0E89C39EC73D5845B2BD518C615A19DCEF8140AC
Authority key identifier: D2:3A:9A:B7:43:82:16:8B:4B:0E:0F:57:72:B4:F2:5A:46:1F:8B:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23A9AB74382168B4B0E0F5772B4F25A461F8B60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/34352e372e3132382e302f32322d3234203d3e203533303632.roa
Signing time:             Thu 09 Apr 2026 12:58:10 +0000
ROA not before:           Thu 09 Apr 2026 12:53:10 +0000
ROA not after:            Thu 08 Apr 2027 12:58:10 +0000
asID:                     53062
IP address blocks:        45.7.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/D23A9AB74382168B4B0E0F5772B4F25A461F8B60.crl
                          rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/D23A9AB74382168B4B0E0F5772B4F25A461F8B60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23A9AB74382168B4B0E0F5772B4F25A461F8B60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 Apr 2026 16:56:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:89:c3:9e:c7:3d:58:45:b2:bd:51:8c:61:5a:19:dc:ef:81:40:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D23A9AB74382168B4B0E0F5772B4F25A461F8B60
        Validity
            Not Before: Apr  9 12:53:10 2026 GMT
            Not After : Apr  8 12:58:10 2027 GMT
        Subject: CN=D6C2D2B5ACD6348CF1E69A24B432D30A77901E83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8f:bf:d8:ff:07:f8:c6:41:8a:8c:e2:6d:50:
                    e2:51:20:81:db:66:fc:5b:99:0d:a1:ea:e4:78:0d:
                    b0:ef:60:ac:22:73:43:dc:30:9b:bb:da:5e:69:20:
                    7f:0d:c0:99:14:76:26:e6:59:93:14:7d:7d:c6:23:
                    3a:8d:38:77:3f:6a:9a:eb:21:0c:8d:1d:7d:d7:35:
                    45:68:41:ba:d7:a0:13:72:54:64:58:51:c9:2e:fd:
                    bb:2f:4a:74:44:ab:38:5c:c1:cf:6c:41:3a:11:91:
                    9f:a0:0a:36:4e:f9:c6:71:9f:01:05:bf:d3:b4:a9:
                    ac:00:3c:29:cb:d6:e9:82:dd:77:1b:54:2f:0e:1d:
                    f1:c9:a4:2b:4f:b2:63:1b:59:43:93:a6:c5:c8:35:
                    ad:0c:4f:46:5c:7d:a5:1e:16:ea:07:0b:a6:32:6b:
                    1b:0d:30:c9:41:fb:c8:10:f6:41:c8:7d:6a:1b:42:
                    fc:22:07:9c:d3:ec:17:6c:ba:ea:bc:ea:d9:17:e4:
                    b4:8f:36:82:9f:3f:26:96:b3:fc:69:22:26:e9:1c:
                    3e:1f:f6:41:04:26:e8:26:b4:f2:19:df:66:1e:d5:
                    10:24:3f:46:05:a4:79:f0:cb:24:bc:4b:78:33:c0:
                    17:64:80:53:74:32:31:0a:84:42:6e:e9:c9:de:1e:
                    00:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C2:D2:B5:AC:D6:34:8C:F1:E6:9A:24:B4:32:D3:0A:77:90:1E:83
            X509v3 Authority Key Identifier:
                keyid:D2:3A:9A:B7:43:82:16:8B:4B:0E:0F:57:72:B4:F2:5A:46:1F:8B:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/D23A9AB74382168B4B0E0F5772B4F25A461F8B60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23A9AB74382168B4B0E0F5772B4F25A461F8B60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/34352e372e3132382e302f32322d3234203d3e203533303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:d3:a4:aa:a9:70:5d:5f:4c:99:ff:ca:21:f7:8a:3e:58:a9:
         8d:cd:83:6b:c2:f2:69:c0:8d:36:76:19:b8:4f:b3:37:b9:6f:
         68:60:2c:02:1c:87:c5:b9:76:31:f5:a3:b3:56:91:56:f7:f1:
         98:b4:71:65:3c:81:fd:44:d4:80:68:35:03:4f:8b:08:52:77:
         bc:23:80:a8:25:e1:60:2e:73:69:17:c3:b4:a0:00:4e:a4:e0:
         5a:4f:77:e6:b7:66:dc:b8:df:e1:28:8f:17:94:1c:e3:56:e5:
         32:2a:88:1e:22:79:2d:9d:c2:53:9e:ee:92:e9:e2:22:2f:9d:
         08:26:d3:be:81:32:0a:20:1d:cb:61:5f:e1:fb:6a:a3:20:07:
         35:3b:51:1c:09:91:bc:56:02:2f:5a:6d:6f:01:b7:fe:60:18:
         c8:5c:46:f9:c9:5e:c8:1b:64:c4:3b:53:be:b3:97:45:72:73:
         cf:79:d1:21:9c:af:16:ae:15:bc:cb:53:90:ab:c5:12:b7:58:
         5b:05:7c:e8:a2:31:4d:2e:da:7f:d4:6b:6a:4f:42:65:58:11:
         95:10:cd:21:0f:a0:b1:94:f2:fd:a7:b1:f0:e1:72:a4:67:4f:
         8f:2c:41:ae:c5:c3:4e:56:b4:2b:25:a4:d3:74:5b:55:90:42:
         67:15:73:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 12 23:23:25 2026 by rpki-client