Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/0/34352e372e39322e302f32322d3234203d3e20323638303835.roa
File:                     34352e372e39322e302f32322d3234203d3e20323638303835.roa (raw, json)
Hash identifier:          N07R/ab5ZNGv2Xnq+t5ws3rnuICdWPzJp8CA/uOr6IE=
Subject key identifier:   95:65:E8:A1:18:26:AE:22:FE:6D:B6:79:BD:5C:FD:90:B2:3D:3F:B1
Certificate issuer:       /CN=47C9D34AC5FB11828EAE43268ECB502451B9BA72
Certificate serial:       6EE90D551D190D5F75582BB513CE5314135DE854
Authority key identifier: 47:C9:D3:4A:C5:FB:11:82:8E:AE:43:26:8E:CB:50:24:51:B9:BA:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47C9D34AC5FB11828EAE43268ECB502451B9BA72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/0/34352e372e39322e302f32322d3234203d3e20323638303835.roa
Signing time:             Mon 13 Apr 2026 19:00:26 +0000
ROA not before:           Mon 13 Apr 2026 18:55:26 +0000
ROA not after:            Mon 12 Apr 2027 19:00:26 +0000
asID:                     268085
IP address blocks:        45.7.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/0/47C9D34AC5FB11828EAE43268ECB502451B9BA72.crl
                          rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/0/47C9D34AC5FB11828EAE43268ECB502451B9BA72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47C9D34AC5FB11828EAE43268ECB502451B9BA72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 15:53:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:e9:0d:55:1d:19:0d:5f:75:58:2b:b5:13:ce:53:14:13:5d:e8:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47C9D34AC5FB11828EAE43268ECB502451B9BA72
        Validity
            Not Before: Apr 13 18:55:26 2026 GMT
            Not After : Apr 12 19:00:26 2027 GMT
        Subject: CN=9565E8A11826AE22FE6DB679BD5CFD90B23D3FB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c5:d0:fd:e7:34:99:d7:9c:ab:cf:cf:50:12:
                    1d:95:77:03:30:ea:b2:2e:3f:4e:46:ed:30:6b:66:
                    c8:f2:cc:b2:38:27:1c:43:63:56:ed:82:93:86:9e:
                    99:50:d3:56:8c:3f:50:91:5c:96:93:78:f6:97:79:
                    8c:aa:f9:b2:d4:03:5e:dc:6a:f7:f5:96:75:75:b4:
                    2b:bb:17:b1:e0:72:8f:39:f5:a3:58:9f:76:b7:3f:
                    fa:c0:cc:54:b7:e3:7a:70:1e:41:7a:c5:bc:c9:ae:
                    ab:6e:df:0b:45:f6:38:af:10:0c:40:a7:7c:41:9d:
                    86:30:48:c5:d1:64:d5:3b:4b:37:f9:af:60:23:c3:
                    9e:5b:82:f8:69:0a:d3:a7:90:fe:3c:9c:d9:46:59:
                    05:96:1c:50:c0:32:4f:d0:21:a5:76:15:8d:d5:e4:
                    1f:f5:56:22:84:39:97:dc:67:9b:ca:eb:ff:83:4a:
                    28:4b:83:69:86:78:c3:f1:54:ab:3f:37:91:58:19:
                    3f:dd:6a:a5:c7:3c:da:7d:3d:92:d5:f8:9e:ea:83:
                    f7:28:b2:85:3c:5c:e9:11:83:45:e8:c0:4b:cf:5c:
                    57:da:8d:76:e0:9f:a6:b8:1b:a1:55:36:c3:00:45:
                    98:7e:b7:62:da:da:a8:79:93:fa:83:2f:b1:41:96:
                    cc:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:65:E8:A1:18:26:AE:22:FE:6D:B6:79:BD:5C:FD:90:B2:3D:3F:B1
            X509v3 Authority Key Identifier:
                keyid:47:C9:D3:4A:C5:FB:11:82:8E:AE:43:26:8E:CB:50:24:51:B9:BA:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/0/47C9D34AC5FB11828EAE43268ECB502451B9BA72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47C9D34AC5FB11828EAE43268ECB502451B9BA72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/0/34352e372e39322e302f32322d3234203d3e20323638303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:cf:e6:26:4e:3e:3d:f0:0f:2a:cc:0f:aa:7e:a8:b1:7f:73:
         9a:2e:d6:ba:e1:1c:80:31:1d:da:c4:72:f0:ca:eb:3a:27:43:
         95:f2:ab:60:61:20:2c:93:20:8d:43:fb:84:32:c1:03:5b:8b:
         b2:6d:63:86:d0:ca:6f:10:24:d5:b3:cc:33:31:fc:d0:d8:76:
         c4:0f:24:32:36:88:a6:4e:8a:7b:fa:dd:61:7e:9a:d1:a7:56:
         55:fc:66:03:8a:18:6f:20:5d:5b:08:8b:1b:81:61:c7:c5:58:
         91:75:61:91:8f:42:05:98:6b:9b:f7:02:c6:58:fc:b6:ca:e3:
         ad:76:19:e0:28:7e:02:af:4e:87:ee:c7:1a:88:c2:2c:ef:c7:
         52:50:47:8f:42:fa:fe:e0:00:84:7d:32:52:1d:ce:15:3e:99:
         a0:ed:11:da:36:d5:f0:6f:e5:c4:62:f4:05:35:da:43:de:1b:
         36:8a:9f:e5:62:41:0a:37:9a:6e:07:dc:cb:80:84:26:9e:fc:
         8f:bd:57:cc:d9:32:60:2a:83:a5:bb:33:bc:ae:17:ce:36:b0:
         36:a2:a4:41:2b:3c:70:17:1c:ec:45:6a:af:e9:b3:4e:79:ef:
         b8:c1:d3:30:b0:13:04:ce:97:c6:61:2d:99:71:5b:27:9f:44:
         e3:c0:3b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:34:58 2026 by rpki-client