Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/34352e3138332e35302e302f32332d3233203d3e20323639333139.roa
File:                     34352e3138332e35302e302f32332d3233203d3e20323639333139.roa (raw, json)
Hash identifier:          DXJLM/FbnoxNDrherRcQZvj9YKTEyOOZccfy5gJR8Kk=
Subject key identifier:   45:61:08:82:91:2A:D8:DC:18:42:91:A7:42:93:80:B5:F5:46:EB:45
Certificate issuer:       /CN=63BA71C49B8F75EE0609181073EF8E8CD5E99AD6
Certificate serial:       1AA7937C25807E5EBF32689E7A4CE166ECE8430D
Authority key identifier: 63:BA:71:C4:9B:8F:75:EE:06:09:18:10:73:EF:8E:8C:D5:E9:9A:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/34352e3138332e35302e302f32332d3233203d3e20323639333139.roa
Signing time:             Sat 28 Feb 2026 01:00:00 +0000
ROA not before:           Sat 28 Feb 2026 00:55:00 +0000
ROA not after:            Sat 27 Feb 2027 01:00:00 +0000
asID:                     269319
IP address blocks:        45.183.50.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.crl
                          rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 17:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:a7:93:7c:25:80:7e:5e:bf:32:68:9e:7a:4c:e1:66:ec:e8:43:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63BA71C49B8F75EE0609181073EF8E8CD5E99AD6
        Validity
            Not Before: Feb 28 00:55:00 2026 GMT
            Not After : Feb 27 01:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:30:ce:00:50:21:22:df:03:ac:f9:96:6b:70:
                    ab:bb:77:f8:67:28:74:2d:63:65:07:93:35:30:1b:
                    60:64:03:29:93:98:26:d1:5c:09:e5:e8:20:8d:6c:
                    53:43:93:2f:21:f2:f9:42:19:ab:be:c0:3d:e8:bf:
                    f6:f2:e8:a4:5f:be:a2:20:eb:c3:11:d9:84:82:fd:
                    18:49:32:78:e2:29:b9:2e:59:41:ce:36:6b:9c:32:
                    33:49:1f:9f:a7:01:77:40:cb:22:b4:1e:08:9d:1f:
                    ff:54:d9:ff:f6:b6:45:d0:50:0b:d6:de:49:aa:66:
                    77:47:33:c1:4f:09:d2:81:f3:a1:e6:34:09:50:71:
                    d4:e5:ad:ec:4b:ea:da:bd:fd:77:30:82:61:0b:07:
                    0f:8f:f0:b8:f3:99:60:8b:30:da:82:d2:f7:3d:57:
                    d9:d7:7e:c8:63:94:ac:df:c2:c0:f3:f8:db:29:a2:
                    97:10:19:86:28:4b:2c:ae:90:f7:be:57:41:48:40:
                    d5:f6:e4:a3:b1:3e:8d:03:92:38:85:a5:58:40:f5:
                    bc:15:5f:48:8b:60:b4:df:0b:7c:42:21:96:c3:fe:
                    bd:66:4d:f4:a4:e3:52:7a:6e:bc:c2:96:cd:21:f5:
                    db:1f:77:5d:dd:eb:20:47:97:35:22:85:b0:73:1e:
                    28:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:61:08:82:91:2A:D8:DC:18:42:91:A7:42:93:80:B5:F5:46:EB:45
            X509v3 Authority Key Identifier:
                keyid:63:BA:71:C4:9B:8F:75:EE:06:09:18:10:73:EF:8E:8C:D5:E9:9A:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/34352e3138332e35302e302f32332d3233203d3e20323639333139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:3e:08:ca:fa:8d:9f:0d:08:44:da:22:77:47:46:5a:e6:cc:
         32:e4:ba:3d:89:28:3b:c0:00:49:c0:e0:44:f6:7a:80:8e:eb:
         e6:08:1c:43:b4:cf:05:af:8f:2e:cd:2e:28:89:aa:d3:55:14:
         11:f0:e6:ff:b4:08:91:77:85:8b:20:c7:9d:50:38:19:cf:9d:
         37:4a:7b:3b:f8:1f:fa:8f:9a:4e:dc:42:58:09:8d:5d:c3:db:
         c3:86:5c:b5:d0:b9:91:a2:ca:42:f8:45:f4:a6:a8:f8:0f:b2:
         46:b0:79:2e:89:98:29:cc:1c:23:cf:41:b6:d8:69:4c:4b:84:
         2d:23:71:63:9b:dc:2f:10:be:16:c0:a8:82:78:89:cd:51:77:
         ed:23:42:31:03:46:cf:e5:ed:72:03:d8:ee:e4:6b:b4:db:4d:
         38:6c:77:3a:0d:79:d3:7b:c4:c5:43:31:6e:92:dc:68:80:85:
         d7:48:74:b0:df:7a:49:db:bf:b8:fb:df:4f:f3:ff:a8:39:f3:
         6b:1b:ef:b0:22:be:56:f2:5e:0b:22:ee:21:c7:ec:24:21:8b:
         dc:96:ad:1b:f7:94:c9:5c:b3:e3:76:f0:c3:dd:d3:42:36:a4:
         88:9e:80:95:ba:c1:9d:0b:15:49:f8:fc:b5:cf:44:2a:fe:0e:
         57:2a:d9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 07:10:59 2026 by rpki-client