Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F1zMEY4eCELTX91aar5b9DP12qXet2wPyCrxBZYp8T8U/0/34352e37312e3137302e302f32332d3233203d3e20323734373735.roa
File:                     34352e37312e3137302e302f32332d3233203d3e20323734373735.roa (raw, json)
Hash identifier:          xJmKwMC+NhSYu7nlTOATLrL3hnJMJNdR5W06sXA3tpI=
Subject key identifier:   B0:76:BB:27:0C:86:D5:B1:75:85:B9:F0:F6:F0:4D:C2:46:27:2A:7D
Certificate issuer:       /CN=72498970A4E832211C0DA0ED3526B1CE579C5172
Certificate serial:       1FC4628F4B7837CDA7449F108736935A8E9DC4E3
Authority key identifier: 72:49:89:70:A4:E8:32:21:1C:0D:A0:ED:35:26:B1:CE:57:9C:51:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72498970A4E832211C0DA0ED3526B1CE579C5172.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F1zMEY4eCELTX91aar5b9DP12qXet2wPyCrxBZYp8T8U/0/34352e37312e3137302e302f32332d3233203d3e20323734373735.roa
Signing time:             Thu 11 Jun 2026 14:13:45 +0000
ROA not before:           Thu 11 Jun 2026 14:08:45 +0000
ROA not after:            Thu 10 Jun 2027 14:13:45 +0000
asID:                     274775
IP address blocks:        45.71.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F1zMEY4eCELTX91aar5b9DP12qXet2wPyCrxBZYp8T8U/0/72498970A4E832211C0DA0ED3526B1CE579C5172.crl
                          rsync://rpki-repo.registro.br/repo/F1zMEY4eCELTX91aar5b9DP12qXet2wPyCrxBZYp8T8U/0/72498970A4E832211C0DA0ED3526B1CE579C5172.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72498970A4E832211C0DA0ED3526B1CE579C5172.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 21:04:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:c4:62:8f:4b:78:37:cd:a7:44:9f:10:87:36:93:5a:8e:9d:c4:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72498970A4E832211C0DA0ED3526B1CE579C5172
        Validity
            Not Before: Jun 11 14:08:45 2026 GMT
            Not After : Jun 10 14:13:45 2027 GMT
        Subject: CN=B076BB270C86D5B17585B9F0F6F04DC246272A7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1d:27:9d:d6:d7:8d:ef:2c:9a:90:a8:7d:ff:
                    a5:2e:1e:4a:37:67:e5:69:da:da:09:83:d7:90:65:
                    62:86:8a:14:1a:d9:40:f3:5b:cf:a7:68:28:28:1f:
                    f7:82:a5:0f:05:fb:78:f9:28:bb:db:40:18:58:5a:
                    37:4e:86:0f:e3:09:78:02:cb:70:ef:aa:4c:56:79:
                    80:99:ad:d7:c2:3f:20:78:64:64:37:1b:fb:ef:8c:
                    f9:04:f7:5c:cb:50:a8:ec:b7:66:e0:4a:c4:8c:3e:
                    a9:16:6f:89:58:d0:3f:dd:ee:75:5b:25:0b:52:3f:
                    e2:34:ae:8d:e1:f2:cd:08:39:f2:2a:15:09:ef:19:
                    83:80:bc:88:3e:3b:e8:31:0d:22:4b:6e:ab:cb:02:
                    66:42:c9:6d:8d:6d:d8:54:92:d1:68:b2:1a:4f:27:
                    43:3c:ba:e9:9e:b8:1d:4a:ab:e3:69:6a:92:d3:12:
                    c0:a5:5f:73:6d:ce:04:95:fb:10:48:c7:da:fa:94:
                    06:b6:b4:37:be:59:fc:29:51:72:42:93:9f:b6:4e:
                    80:ad:b0:a2:4a:c4:3a:55:63:dc:9d:81:39:2b:51:
                    ab:2a:68:46:f1:08:eb:66:6c:8e:73:19:8c:fa:6b:
                    f5:e5:6a:17:5b:4d:23:b7:87:02:34:e1:77:02:59:
                    88:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:76:BB:27:0C:86:D5:B1:75:85:B9:F0:F6:F0:4D:C2:46:27:2A:7D
            X509v3 Authority Key Identifier:
                keyid:72:49:89:70:A4:E8:32:21:1C:0D:A0:ED:35:26:B1:CE:57:9C:51:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F1zMEY4eCELTX91aar5b9DP12qXet2wPyCrxBZYp8T8U/0/72498970A4E832211C0DA0ED3526B1CE579C5172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72498970A4E832211C0DA0ED3526B1CE579C5172.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F1zMEY4eCELTX91aar5b9DP12qXet2wPyCrxBZYp8T8U/0/34352e37312e3137302e302f32332d3233203d3e20323734373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:a7:b0:cd:f3:ad:5a:47:45:e0:38:35:86:ce:b7:97:44:14:
         d7:5e:25:5b:0f:fb:c3:a6:02:1f:45:72:85:78:f1:e0:59:5f:
         16:b8:46:f4:89:b0:01:83:68:5d:13:70:87:62:22:e9:63:6a:
         7e:c4:a7:2e:88:0d:5e:6a:1e:7e:79:52:19:4f:3a:d0:8a:7d:
         ee:5b:cb:3a:f9:06:1e:23:41:78:20:9c:33:14:c9:a8:0a:95:
         35:a3:2a:86:72:14:d6:61:30:f7:22:66:de:78:cb:fa:5a:f5:
         d5:96:cd:73:9e:03:31:75:f1:1d:81:a0:56:66:3c:cc:d5:3b:
         54:a6:51:47:4a:92:bb:b3:ee:c1:ae:cd:e2:d1:cc:e0:b0:b1:
         6a:db:f8:31:3f:15:4b:30:f4:a8:48:e2:b0:6b:93:1e:a3:2d:
         f9:cf:f5:c4:b6:ec:82:8f:20:c3:51:a3:d5:dc:aa:11:75:85:
         03:8d:66:fb:a0:01:82:c9:17:b9:f4:1b:fa:fe:dd:1e:e9:4a:
         46:f7:a1:38:23:8a:34:2a:9c:a5:ee:5c:1a:4f:54:38:90:f9:
         ef:7f:f6:56:61:d8:45:81:e0:52:8c:23:35:44:ec:c4:5c:b0:
         8d:32:f7:a9:78:5d:5f:99:61:86:2d:47:4f:5f:3f:3f:ac:48:
         0a:36:41:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:38 2026 by rpki-client