Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/34352e3137392e3133322e302f32322d3232203d3e20323639303739.roa
File:                     34352e3137392e3133322e302f32322d3232203d3e20323639303739.roa (raw, json)
Hash identifier:          SVvBNNuSw99d86V3063ZyFY3T5QOVyi1v6AnwHTMuOI=
Subject key identifier:   0F:45:75:FD:F0:B1:B0:1A:7A:DA:BB:9E:A1:0C:BF:33:BF:A5:B3:BE
Certificate issuer:       /CN=433BC56DE61BF5759F79705E437131F09597AF13
Certificate serial:       29431FACE61662F451F79C4511021BA2571570C1
Authority key identifier: 43:3B:C5:6D:E6:1B:F5:75:9F:79:70:5E:43:71:31:F0:95:97:AF:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BC56DE61BF5759F79705E437131F09597AF13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/34352e3137392e3133322e302f32322d3232203d3e20323639303739.roa
Signing time:             Mon 02 Mar 2026 18:15:56 +0000
ROA not before:           Mon 02 Mar 2026 18:10:56 +0000
ROA not after:            Mon 01 Mar 2027 18:15:56 +0000
asID:                     269079
IP address blocks:        45.179.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.crl
                          rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BC56DE61BF5759F79705E437131F09597AF13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 19:30:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:43:1f:ac:e6:16:62:f4:51:f7:9c:45:11:02:1b:a2:57:15:70:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=433BC56DE61BF5759F79705E437131F09597AF13
        Validity
            Not Before: Mar  2 18:10:56 2026 GMT
            Not After : Mar  1 18:15:56 2027 GMT
        Subject: CN=0F4575FDF0B1B01A7ADABB9EA10CBF33BFA5B3BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c1:77:3f:d2:6d:e1:7f:03:58:8f:d9:62:aa:
                    32:c5:db:1d:0f:1a:62:7a:75:da:91:82:38:01:b5:
                    90:c5:26:56:cf:ed:54:ce:05:a3:83:f1:81:2f:ab:
                    c0:86:ae:ef:8e:bb:51:df:1d:15:fc:b1:ca:fe:80:
                    2a:4c:53:9d:c1:39:de:2e:38:26:9e:a2:10:28:3a:
                    05:d5:ef:51:56:47:f4:70:b9:44:c6:bf:3f:c8:cd:
                    a4:68:42:e8:c0:b7:f0:5b:bb:46:3c:d2:e8:6f:06:
                    51:b3:fb:2b:b5:e7:68:f1:d4:26:99:74:21:97:49:
                    d1:60:a0:44:7a:04:6a:b9:d7:dc:b8:2a:77:54:cc:
                    5b:fb:b7:45:68:56:4f:ee:74:a3:c9:44:21:d2:d1:
                    11:e3:c1:39:58:24:0d:06:f2:4e:e4:2f:d0:ec:b7:
                    87:e2:cd:79:7a:83:be:8b:1b:83:be:b1:20:48:72:
                    3d:b8:2b:e2:47:3b:fe:50:86:8c:26:1f:87:2a:07:
                    a5:6d:6d:37:da:40:39:73:3b:18:bb:f3:83:1c:d1:
                    67:6f:82:fd:e8:ce:7a:dc:1f:5d:29:9a:a0:35:c9:
                    24:95:3a:5c:98:62:a3:74:ed:53:a6:be:4c:31:4b:
                    7c:af:6a:21:7e:6a:da:3b:64:1d:a1:2e:aa:15:03:
                    ff:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:45:75:FD:F0:B1:B0:1A:7A:DA:BB:9E:A1:0C:BF:33:BF:A5:B3:BE
            X509v3 Authority Key Identifier:
                keyid:43:3B:C5:6D:E6:1B:F5:75:9F:79:70:5E:43:71:31:F0:95:97:AF:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BC56DE61BF5759F79705E437131F09597AF13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/34352e3137392e3133322e302f32322d3232203d3e20323639303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:dd:7b:5a:20:a3:4e:85:9a:8e:60:fe:c8:85:75:af:41:52:
         04:d2:1d:72:1c:7b:9f:3d:2e:66:db:1b:e9:52:13:48:04:e5:
         26:9a:c1:86:11:59:b7:d8:26:63:f1:5e:de:80:07:24:c2:a3:
         f8:df:59:75:b7:b1:48:79:39:2b:2b:bd:a5:00:e0:c1:85:90:
         b8:72:0e:96:20:e8:16:94:98:82:5f:fe:c4:e7:fe:f0:1f:b1:
         98:2a:49:45:70:91:d0:a1:ed:24:03:46:64:4c:1c:e8:7e:f4:
         a4:75:41:6c:06:c8:9b:d9:d7:b8:a5:5b:72:1a:5e:30:e0:fb:
         68:5a:54:55:2c:2d:4a:55:c6:e7:27:76:ad:26:c0:77:e7:bc:
         79:83:45:c4:67:bc:13:39:17:ef:c1:0e:ef:2e:7c:7c:f4:a7:
         70:e0:23:ed:ca:e0:ac:36:11:d2:95:04:4f:78:a7:8f:0b:7e:
         6f:40:91:2b:1b:63:b5:0b:77:71:12:6c:8e:f7:c8:c7:99:00:
         6b:1c:f1:8c:a2:a9:27:47:30:1f:89:02:87:f1:98:b6:52:87:
         6f:34:f0:f5:8a:77:f2:26:3f:7c:de:07:8c:6e:d1:b4:92:a9:
         23:57:d9:92:a7:86:bb:b8:3d:18:57:86:e9:f3:df:2f:90:d8:
         23:c9:2b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:18:27 2026 by rpki-client