Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/34352e3138392e38382e302f32332d3233203d3e20323639353734.roa
File:                     34352e3138392e38382e302f32332d3233203d3e20323639353734.roa (raw, json)
Hash identifier:          Izf/s8oRsy31mjYiDHTvD5HKyzrAijzPVpC1RejoCic=
Subject key identifier:   B7:E0:3F:32:78:1F:84:7F:56:F5:CB:3F:E3:2C:E7:77:CC:7C:08:37
Certificate issuer:       /CN=061D03C44232FDCCB0116EF465F68ABDA94D2858
Certificate serial:       5D2BD68CA4F6DF605C353C4D00BFF844B98B9E12
Authority key identifier: 06:1D:03:C4:42:32:FD:CC:B0:11:6E:F4:65:F6:8A:BD:A9:4D:28:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061D03C44232FDCCB0116EF465F68ABDA94D2858.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/34352e3138392e38382e302f32332d3233203d3e20323639353734.roa
Signing time:             Sat 11 Apr 2026 15:34:35 +0000
ROA not before:           Sat 11 Apr 2026 15:29:35 +0000
ROA not after:            Sat 10 Apr 2027 15:34:35 +0000
asID:                     269574
IP address blocks:        45.189.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/061D03C44232FDCCB0116EF465F68ABDA94D2858.crl
                          rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/061D03C44232FDCCB0116EF465F68ABDA94D2858.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061D03C44232FDCCB0116EF465F68ABDA94D2858.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 Apr 2026 11:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:2b:d6:8c:a4:f6:df:60:5c:35:3c:4d:00:bf:f8:44:b9:8b:9e:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061D03C44232FDCCB0116EF465F68ABDA94D2858
        Validity
            Not Before: Apr 11 15:29:35 2026 GMT
            Not After : Apr 10 15:34:35 2027 GMT
        Subject: CN=B7E03F32781F847F56F5CB3FE32CE777CC7C0837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a7:d1:cc:ed:4e:38:e3:8d:a8:7b:51:95:3c:
                    b5:0d:12:dc:2d:7a:19:de:e2:1c:63:09:88:bc:ff:
                    2e:83:76:6e:fa:a8:26:0a:ba:e7:d5:85:62:9c:f9:
                    6f:d2:da:a1:fd:a2:b5:75:49:07:39:ff:5e:5e:8a:
                    df:95:68:fa:d2:17:b7:99:eb:92:a3:8d:37:ad:40:
                    46:3f:fa:8e:00:70:d0:19:94:8c:a7:13:86:57:cb:
                    33:55:54:14:36:1d:07:f0:4b:64:ac:d1:a8:af:6a:
                    a0:24:fd:9e:e0:c5:82:17:c8:cf:a1:e9:2e:aa:6a:
                    38:4f:65:cd:17:2e:87:48:8d:44:d1:49:56:24:72:
                    6c:98:b0:80:04:f0:af:e5:56:74:48:7d:bf:cb:14:
                    0b:d7:d5:70:03:3a:83:de:97:19:cc:86:b1:79:89:
                    1a:92:8f:e4:92:51:73:da:ff:95:2a:fa:3c:f2:99:
                    4f:2f:2b:8e:ee:59:52:91:21:0e:1e:ac:e6:56:ca:
                    e6:d3:7b:b9:0f:5e:a5:7f:c1:f8:fa:f6:46:89:7c:
                    1e:05:69:c7:cb:67:d1:04:f5:7c:de:ce:91:df:ae:
                    ce:3c:12:25:70:82:76:77:f2:b5:0d:98:93:0f:89:
                    28:69:e9:a7:b2:1f:cd:94:ea:7c:59:d9:ab:8a:0d:
                    59:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E0:3F:32:78:1F:84:7F:56:F5:CB:3F:E3:2C:E7:77:CC:7C:08:37
            X509v3 Authority Key Identifier:
                keyid:06:1D:03:C4:42:32:FD:CC:B0:11:6E:F4:65:F6:8A:BD:A9:4D:28:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/061D03C44232FDCCB0116EF465F68ABDA94D2858.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061D03C44232FDCCB0116EF465F68ABDA94D2858.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/34352e3138392e38382e302f32332d3233203d3e20323639353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:2f:27:1c:7a:33:ce:3e:2d:76:78:3d:fc:4f:f2:bc:82:6b:
         d8:12:6c:62:e8:96:d8:d5:02:5d:85:e1:09:d3:18:45:ca:17:
         cc:c0:0f:4d:52:f1:6b:b9:46:ee:9d:a5:cb:c9:08:ee:42:45:
         16:cf:f2:9c:40:67:e8:9a:8f:1a:b0:7b:6f:93:bf:ef:d4:fb:
         de:ea:a7:10:4c:44:d4:ce:37:4e:83:e3:d8:38:62:29:77:66:
         f0:fc:cf:43:fd:9d:4d:6b:ed:dd:c1:f2:2c:f6:53:ff:ab:3e:
         50:a1:62:50:d4:8a:01:29:e9:88:64:04:6d:21:3b:42:55:3a:
         a8:57:0f:d9:1a:f7:5f:80:45:67:cb:61:de:eb:68:e6:dc:14:
         69:62:18:9b:2c:b3:79:da:e9:2b:74:05:56:e2:20:ef:6b:f4:
         b2:57:be:b0:df:30:24:db:33:f2:50:d3:68:c8:77:f6:b5:b2:
         0c:ff:28:86:cb:2b:64:fd:4a:5a:29:2b:ba:1b:cf:6b:f3:4f:
         bb:29:45:95:ff:61:16:c6:54:60:de:bf:f1:a2:f0:f1:d4:19:
         e7:1f:8f:9d:36:0f:77:72:71:23:83:bc:c3:47:93:f2:91:dd:
         21:52:98:b9:20:d8:ed:2f:b6:db:7f:76:d2:7e:d8:ec:6a:30:
         d3:7d:f3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 01:59:02 2026 by rpki-client