Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/34352e3233322e3138342e302f32322d3234203d3e20323637323731.roa
File:                     34352e3233322e3138342e302f32322d3234203d3e20323637323731.roa (raw, json)
Hash identifier:          cbMm2r+/MR2gTzkq5c19XuQj65JseV951nhxSsOAbdU=
Subject key identifier:   69:F9:BA:04:6A:24:FA:1D:31:51:C8:B7:AA:94:4C:94:5E:CD:3B:AE
Certificate issuer:       /CN=9E720821D5EEB7B23A31B33767D53D63A84998DD
Certificate serial:       17820B9D3BBB90046BBED1171B0D7185471F7BAD
Authority key identifier: 9E:72:08:21:D5:EE:B7:B2:3A:31:B3:37:67:D5:3D:63:A8:49:98:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E720821D5EEB7B23A31B33767D53D63A84998DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/34352e3233322e3138342e302f32322d3234203d3e20323637323731.roa
Signing time:             Sun 01 Mar 2026 00:26:30 +0000
ROA not before:           Sun 01 Mar 2026 00:21:30 +0000
ROA not after:            Sun 28 Feb 2027 00:26:30 +0000
asID:                     267271
IP address blocks:        45.232.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/9E720821D5EEB7B23A31B33767D53D63A84998DD.crl
                          rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/9E720821D5EEB7B23A31B33767D53D63A84998DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E720821D5EEB7B23A31B33767D53D63A84998DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 11:42:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:82:0b:9d:3b:bb:90:04:6b:be:d1:17:1b:0d:71:85:47:1f:7b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E720821D5EEB7B23A31B33767D53D63A84998DD
        Validity
            Not Before: Mar  1 00:21:30 2026 GMT
            Not After : Feb 28 00:26:30 2027 GMT
        Subject: CN=69F9BA046A24FA1D3151C8B7AA944C945ECD3BAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:96:f6:47:72:90:ca:9f:cf:6a:ad:14:dc:f1:
                    26:45:ef:84:64:9b:22:2d:64:b8:9d:17:0d:99:83:
                    66:6c:32:f2:3c:32:e3:bf:fa:e2:04:99:47:f0:fb:
                    0c:49:c0:ed:5f:d1:7e:f5:e8:09:36:59:8d:de:63:
                    97:91:70:88:b4:d7:3e:43:b2:ea:b9:ab:67:7e:10:
                    ee:3d:0a:1b:ed:9a:37:cc:23:ea:d6:7b:9f:88:4c:
                    62:c2:fc:71:76:a7:99:bb:73:a5:02:3b:ff:e8:4e:
                    15:c9:6e:33:36:a0:5c:e3:e8:cb:1e:e3:27:d1:57:
                    80:f4:aa:57:e1:4e:00:a0:4b:e5:f7:b6:32:f3:4a:
                    54:15:b7:24:15:92:29:60:1a:be:07:6c:be:1d:7e:
                    06:d8:00:2c:01:5c:9f:3b:4e:8d:9d:f3:23:22:be:
                    47:82:09:44:e4:f9:1d:bb:44:8b:cb:e8:59:c9:0c:
                    32:23:9b:5d:7d:d2:6a:60:0e:3b:e5:d8:d5:88:90:
                    43:2c:de:cc:80:f2:c1:6d:a5:fd:f2:de:fe:87:c9:
                    7c:de:63:88:4d:89:81:03:2b:d7:e6:43:fe:9c:e1:
                    e0:f9:77:d3:3b:e7:2f:d7:73:6d:b8:17:72:bc:c3:
                    52:a0:58:82:ca:6f:65:d4:f3:59:98:0d:eb:7d:f4:
                    0c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F9:BA:04:6A:24:FA:1D:31:51:C8:B7:AA:94:4C:94:5E:CD:3B:AE
            X509v3 Authority Key Identifier:
                keyid:9E:72:08:21:D5:EE:B7:B2:3A:31:B3:37:67:D5:3D:63:A8:49:98:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/9E720821D5EEB7B23A31B33767D53D63A84998DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E720821D5EEB7B23A31B33767D53D63A84998DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/34352e3233322e3138342e302f32322d3234203d3e20323637323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:b3:1d:ec:7b:18:7b:8f:ee:0f:e6:2e:c6:68:f5:ab:91:08:
         b3:ae:d9:fd:44:2a:d6:bc:21:a3:c2:48:75:6f:05:3a:ac:fb:
         cf:ee:e5:c5:34:ce:e6:5d:95:fa:b2:6d:33:55:c0:b6:8f:d5:
         d3:15:37:00:6a:de:2f:7b:8d:cf:30:5a:bb:e2:a8:86:6f:82:
         c7:86:55:fe:54:41:bf:22:83:40:b4:ee:89:cc:af:1e:06:7f:
         f1:35:10:47:b4:f2:ee:eb:0b:a6:d5:aa:ce:d3:25:f0:e6:b5:
         56:c7:b5:ce:ab:8f:26:59:69:72:dd:0e:47:04:59:97:08:56:
         3d:4c:e5:fd:d7:43:e0:5b:50:1d:8c:66:ac:39:59:db:e4:2b:
         ca:7f:35:f5:a4:66:d3:47:14:57:e9:ef:1f:fd:9a:a2:47:65:
         5d:12:56:68:a5:eb:49:0d:f9:f7:e3:d0:ca:dd:a0:3a:57:92:
         38:e7:08:6c:b3:54:3a:34:0b:5b:6e:e1:90:59:01:05:b8:a1:
         10:8c:36:a8:2c:a6:9b:98:13:b2:5e:01:2a:c7:33:21:fe:7b:
         0d:c4:01:21:c9:c0:d1:da:80:38:97:a4:a1:d9:79:e2:67:dc:
         8e:5c:85:d7:7a:81:69:9a:1d:ba:56:0f:02:69:ac:58:5a:1c:
         ee:8f:5b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:45:28 2026 by rpki-client