Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/34352e3138392e39312e302f32342d3234203d3e20323639353734.roa
File:                     34352e3138392e39312e302f32342d3234203d3e20323639353734.roa (raw, json)
Hash identifier:          l+x1sqYd5yKw6rkFJFyiCAk4RZsy/Qs1tgS0nDiokoY=
Subject key identifier:   A9:1E:0D:AB:17:E9:FE:5C:C7:72:7E:3A:99:B3:84:A3:82:79:8A:E1
Certificate issuer:       /CN=061D03C44232FDCCB0116EF465F68ABDA94D2858
Certificate serial:       22C3CBBC0E2825340E6F33C7BEA0E3AC659C4929
Authority key identifier: 06:1D:03:C4:42:32:FD:CC:B0:11:6E:F4:65:F6:8A:BD:A9:4D:28:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061D03C44232FDCCB0116EF465F68ABDA94D2858.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/34352e3138392e39312e302f32342d3234203d3e20323639353734.roa
Signing time:             Sat 11 Apr 2026 15:34:33 +0000
ROA not before:           Sat 11 Apr 2026 15:29:33 +0000
ROA not after:            Sat 10 Apr 2027 15:34:33 +0000
asID:                     269574
IP address blocks:        45.189.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/061D03C44232FDCCB0116EF465F68ABDA94D2858.crl
                          rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/061D03C44232FDCCB0116EF465F68ABDA94D2858.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061D03C44232FDCCB0116EF465F68ABDA94D2858.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 Apr 2026 11:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:c3:cb:bc:0e:28:25:34:0e:6f:33:c7:be:a0:e3:ac:65:9c:49:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061D03C44232FDCCB0116EF465F68ABDA94D2858
        Validity
            Not Before: Apr 11 15:29:33 2026 GMT
            Not After : Apr 10 15:34:33 2027 GMT
        Subject: CN=A91E0DAB17E9FE5CC7727E3A99B384A382798AE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cf:0d:8e:88:01:47:aa:92:f4:fe:26:fc:82:
                    39:ab:e0:b7:24:2f:08:51:4f:a4:7e:bf:4a:7d:75:
                    a1:44:53:ab:8d:8f:6c:60:8e:2c:d3:9b:a7:46:07:
                    13:db:58:b4:7c:d1:44:e8:4b:29:a9:cd:86:8d:49:
                    08:48:9d:81:fc:f1:81:8d:ef:ce:e6:c6:5d:a2:d1:
                    30:13:49:05:af:52:5f:fe:78:d6:e0:86:19:4e:7c:
                    b7:c7:14:03:6e:d9:16:c9:95:86:fd:34:d8:d0:17:
                    60:d5:e0:4c:c5:52:fd:8d:74:57:7a:eb:af:6a:e2:
                    e2:79:91:53:fe:ec:f7:3b:53:90:04:73:5f:2f:be:
                    fb:db:9a:5a:fd:46:c6:f0:6e:04:db:ee:d5:d4:7f:
                    5e:b9:57:ac:2e:b0:d2:f0:b9:9d:16:9f:cc:fa:3c:
                    ad:c2:3b:cf:67:5b:75:76:c9:37:5a:db:bf:56:c9:
                    bf:76:a7:e3:53:9e:23:f4:19:eb:0d:60:4d:67:5f:
                    ce:68:56:2f:0f:2a:4b:a9:45:41:d8:1c:82:e1:7c:
                    cf:b2:aa:c2:33:a7:6f:60:22:95:2d:c8:b1:5e:0f:
                    8f:bb:2e:45:b2:d9:cf:55:a2:76:57:ec:4c:52:59:
                    a0:26:95:3f:7f:29:1b:09:52:fe:f5:e6:73:b2:dc:
                    20:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1E:0D:AB:17:E9:FE:5C:C7:72:7E:3A:99:B3:84:A3:82:79:8A:E1
            X509v3 Authority Key Identifier:
                keyid:06:1D:03:C4:42:32:FD:CC:B0:11:6E:F4:65:F6:8A:BD:A9:4D:28:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/061D03C44232FDCCB0116EF465F68ABDA94D2858.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061D03C44232FDCCB0116EF465F68ABDA94D2858.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/34352e3138392e39312e302f32342d3234203d3e20323639353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:4c:6e:65:ca:d4:f4:c9:65:f8:95:35:e0:b4:05:82:95:34:
         9c:31:69:4d:4c:f2:f4:c2:a7:b1:3c:90:3f:a9:5d:1d:f2:83:
         f1:e1:a5:2f:50:4c:9d:f3:d0:b7:2d:3f:57:0e:3b:d2:a6:1b:
         9b:c1:1a:9b:12:3b:8c:94:99:cf:3a:23:49:73:76:e9:94:15:
         06:47:08:e7:42:2b:31:4f:7f:06:ad:1d:f5:6a:1c:8d:8e:96:
         44:c9:4a:ec:38:70:e4:e7:c4:dd:a8:07:45:32:c5:b6:fa:b9:
         c6:a9:b5:9c:d3:0c:d6:27:f2:cd:b2:24:b7:24:bf:44:35:73:
         59:34:5b:a3:51:84:95:08:1d:93:6a:c9:40:b6:fb:97:76:ef:
         8e:ae:07:9b:ba:62:fe:cc:8d:b9:4a:3b:0c:87:40:c5:2e:64:
         4e:49:47:8a:7b:5a:84:d5:62:9e:bc:b5:d2:4c:6f:de:bd:fc:
         2a:3c:8d:fa:23:61:87:66:7a:79:5c:c8:ce:7f:5f:70:cc:cb:
         ff:91:f9:60:32:b3:c0:93:13:f1:e5:c2:bb:54:4f:42:4f:b3:
         cd:4c:74:df:21:af:a6:d1:59:49:8a:ef:a2:9e:1b:2d:eb:3a:
         f1:cf:2c:2e:23:5c:3d:b3:09:9a:a5:96:d0:43:01:91:83:7a:
         91:ef:68:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 02:04:54 2026 by rpki-client