Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ey2dMf6dxTjeYX5EYyteeB7cBmGkqTAqd9kUCAdH3X2E/0/34352e3136372e38332e302f32342d3234203d3e20323638303338.roa
File:                     34352e3136372e38332e302f32342d3234203d3e20323638303338.roa (raw, json)
Hash identifier:          ROBOBWT/QBBRjdghSkF/ITpeSLyaPN50pAKMmMz8UNA=
Subject key identifier:   C6:6D:5D:ED:B5:78:2A:BD:AE:EC:45:91:C5:2E:29:6C:83:4B:E4:DD
Certificate issuer:       /CN=94F076036202743816CEED15AA8E45B46A68C09F
Certificate serial:       5F000D7A6670D970574B39F571C0031113B2E15B
Authority key identifier: 94:F0:76:03:62:02:74:38:16:CE:ED:15:AA:8E:45:B4:6A:68:C0:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94F076036202743816CEED15AA8E45B46A68C09F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ey2dMf6dxTjeYX5EYyteeB7cBmGkqTAqd9kUCAdH3X2E/0/34352e3136372e38332e302f32342d3234203d3e20323638303338.roa
Signing time:             Thu 09 Apr 2026 12:14:39 +0000
ROA not before:           Thu 09 Apr 2026 12:09:39 +0000
ROA not after:            Thu 08 Apr 2027 12:14:39 +0000
asID:                     268038
IP address blocks:        45.167.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ey2dMf6dxTjeYX5EYyteeB7cBmGkqTAqd9kUCAdH3X2E/0/94F076036202743816CEED15AA8E45B46A68C09F.crl
                          rsync://rpki-repo.registro.br/repo/Ey2dMf6dxTjeYX5EYyteeB7cBmGkqTAqd9kUCAdH3X2E/0/94F076036202743816CEED15AA8E45B46A68C09F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94F076036202743816CEED15AA8E45B46A68C09F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 00:59:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:00:0d:7a:66:70:d9:70:57:4b:39:f5:71:c0:03:11:13:b2:e1:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94F076036202743816CEED15AA8E45B46A68C09F
        Validity
            Not Before: Apr  9 12:09:39 2026 GMT
            Not After : Apr  8 12:14:39 2027 GMT
        Subject: CN=C66D5DEDB5782ABDAEEC4591C52E296C834BE4DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cd:f3:a9:14:8f:6b:1c:ab:a4:50:d3:4a:ac:
                    73:5e:3f:cb:05:fe:79:e3:64:1d:08:a2:bd:33:6b:
                    cc:33:12:53:91:da:8a:34:cd:23:33:99:7b:aa:ea:
                    90:15:86:4b:c5:8e:bb:35:80:eb:87:35:98:d9:bf:
                    16:2e:41:5e:d1:c1:b4:05:39:ca:ee:d7:47:3e:bd:
                    e5:d2:87:ff:63:bb:44:d9:61:d8:61:f1:21:f3:de:
                    c6:30:f1:8d:39:13:31:20:d2:db:4b:f6:94:ba:50:
                    65:d7:14:7e:9c:33:c3:a2:ae:b8:d7:f5:e0:39:e3:
                    d4:fb:c5:be:6a:ff:5f:d8:f6:d2:f7:32:45:82:2c:
                    a4:e7:99:ee:97:95:b4:b8:a0:33:02:e0:8f:ca:ec:
                    d1:79:42:be:c7:97:88:c0:ee:da:b3:53:87:44:3c:
                    64:09:1c:74:e8:42:46:08:fc:ef:52:0f:66:79:de:
                    40:66:33:1b:7b:3d:ec:3b:80:e2:59:75:24:30:f5:
                    8d:9b:7a:6e:97:ad:7d:25:dc:57:f4:1e:a1:f8:41:
                    e5:34:40:06:a1:39:c9:c9:96:32:77:f9:33:28:5e:
                    41:a0:65:d0:cf:50:1a:d1:fe:6a:d4:28:a0:61:71:
                    70:a9:af:85:90:29:30:0d:7c:f3:cf:35:cd:32:50:
                    0b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:6D:5D:ED:B5:78:2A:BD:AE:EC:45:91:C5:2E:29:6C:83:4B:E4:DD
            X509v3 Authority Key Identifier:
                keyid:94:F0:76:03:62:02:74:38:16:CE:ED:15:AA:8E:45:B4:6A:68:C0:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ey2dMf6dxTjeYX5EYyteeB7cBmGkqTAqd9kUCAdH3X2E/0/94F076036202743816CEED15AA8E45B46A68C09F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94F076036202743816CEED15AA8E45B46A68C09F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ey2dMf6dxTjeYX5EYyteeB7cBmGkqTAqd9kUCAdH3X2E/0/34352e3136372e38332e302f32342d3234203d3e20323638303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:5a:63:3c:54:d2:5a:d1:7d:ab:3e:f2:c0:7a:e3:04:ae:c7:
         78:b9:0b:8d:07:d5:42:43:22:74:4f:64:50:c6:77:38:3b:62:
         f2:19:6a:a0:18:8f:38:fc:38:80:61:8b:4e:33:d2:24:ca:f9:
         61:a7:fc:71:b0:d3:22:b7:5d:25:e8:8a:85:88:18:d1:0b:a1:
         61:c0:d3:89:fc:96:a3:69:c3:db:ce:cb:9b:7d:8f:68:45:e9:
         ad:d4:bf:f2:63:23:21:1a:f5:bf:04:5e:ee:cb:2a:76:36:e3:
         a1:ea:c6:3c:f5:0f:a3:5c:07:ee:69:29:0b:dd:56:56:1c:c8:
         aa:5b:22:53:5d:89:5b:54:cd:63:d5:e8:32:d5:d5:13:15:81:
         a6:1d:fd:ea:95:b6:3b:52:00:61:76:9f:28:89:f0:ae:f4:ef:
         e3:e3:50:18:88:9a:92:dd:9b:33:f3:43:a5:69:08:f0:12:84:
         fa:27:8d:da:5b:fa:f7:96:dd:7e:1c:17:e7:58:17:d5:ed:25:
         ef:2c:bd:1a:7d:e9:f5:d2:43:20:36:71:b9:72:58:04:4b:d2:
         fb:d9:0f:07:66:8e:27:54:20:65:f2:3d:3f:c1:05:0b:46:80:
         64:d9:83:74:81:58:5a:09:18:3f:68:3c:20:cf:01:29:48:8a:
         22:2e:1f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:31:06 2026 by rpki-client