Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/34352e3233322e3132372e302f32342d3234203d3e20323637323634.roa
File:                     34352e3233322e3132372e302f32342d3234203d3e20323637323634.roa (raw, json)
Hash identifier:          O1EvmPfDcnX0rE6uM291LmBaqnl6/Qxe6SVEMDq0wEw=
Subject key identifier:   2A:D2:C3:DC:80:6D:DD:DF:2F:62:69:CC:5C:7A:D0:9B:E3:82:F5:9C
Certificate issuer:       /CN=E91F3A2A36510E6BB1921A3712B9F990AB1207A6
Certificate serial:       12B6DFF1E61BBEFE0744B6157D40391C33562FC6
Authority key identifier: E9:1F:3A:2A:36:51:0E:6B:B1:92:1A:37:12:B9:F9:90:AB:12:07:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E91F3A2A36510E6BB1921A3712B9F990AB1207A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/34352e3233322e3132372e302f32342d3234203d3e20323637323634.roa
Signing time:             Thu 07 May 2026 13:14:11 +0000
ROA not before:           Thu 07 May 2026 13:09:11 +0000
ROA not after:            Thu 06 May 2027 13:14:11 +0000
asID:                     267264
IP address blocks:        45.232.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/E91F3A2A36510E6BB1921A3712B9F990AB1207A6.crl
                          rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/E91F3A2A36510E6BB1921A3712B9F990AB1207A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E91F3A2A36510E6BB1921A3712B9F990AB1207A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 19:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:b6:df:f1:e6:1b:be:fe:07:44:b6:15:7d:40:39:1c:33:56:2f:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E91F3A2A36510E6BB1921A3712B9F990AB1207A6
        Validity
            Not Before: May  7 13:09:11 2026 GMT
            Not After : May  6 13:14:11 2027 GMT
        Subject: CN=2AD2C3DC806DDDDF2F6269CC5C7AD09BE382F59C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:60:0f:13:62:d7:bb:4c:3b:ed:ed:c1:f9:df:
                    7d:0e:93:7b:eb:ea:9b:48:3f:a1:ed:f1:cb:c9:5b:
                    52:e7:65:4f:ad:90:37:c7:53:7e:c9:8a:85:23:68:
                    00:53:0e:0e:bd:b2:9e:3a:be:4d:50:e6:17:99:c3:
                    25:de:58:53:c1:7e:f5:a2:fe:af:19:ce:dc:39:6e:
                    ae:33:f8:7e:98:da:fb:5e:2a:b9:73:b9:6e:c8:59:
                    b6:eb:7c:0c:31:48:9f:a5:96:90:a5:c1:b4:2a:73:
                    11:b3:6b:fe:7d:f2:38:87:d5:db:0e:d3:50:de:fc:
                    45:c3:7e:b6:61:b8:5b:73:a2:44:b6:f1:80:2f:47:
                    c4:cf:e3:6f:2d:e7:fb:af:aa:23:be:e7:12:b4:38:
                    dd:35:60:5c:2d:82:d9:7b:5d:4b:1c:20:ee:a9:ed:
                    d1:77:5e:28:e3:f4:f6:4f:71:47:0c:55:6b:47:c8:
                    41:9a:45:24:05:7d:08:87:b0:fb:62:b5:76:59:d7:
                    8f:fa:aa:3f:6c:3c:7e:1e:2f:dc:e9:89:e9:3a:68:
                    1d:48:d6:b5:06:44:13:e3:f8:25:4c:96:c0:c5:82:
                    78:51:76:f3:9e:24:fc:fd:06:1e:91:ab:26:d3:a6:
                    9b:f7:23:d4:72:c2:5b:1b:f9:37:2f:f8:75:a3:ca:
                    86:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D2:C3:DC:80:6D:DD:DF:2F:62:69:CC:5C:7A:D0:9B:E3:82:F5:9C
            X509v3 Authority Key Identifier:
                keyid:E9:1F:3A:2A:36:51:0E:6B:B1:92:1A:37:12:B9:F9:90:AB:12:07:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/E91F3A2A36510E6BB1921A3712B9F990AB1207A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E91F3A2A36510E6BB1921A3712B9F990AB1207A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/34352e3233322e3132372e302f32342d3234203d3e20323637323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:d6:18:3e:d8:2d:12:42:6f:87:9d:11:92:a6:87:9e:00:5f:
         1c:f2:f6:e6:22:21:ae:69:95:a1:25:1f:70:69:c7:70:ac:8e:
         1c:3d:ac:d7:ab:77:c4:32:ea:3d:14:7e:df:45:2f:3e:f8:fa:
         ab:9e:9b:6e:6e:dd:6a:08:87:66:fe:86:de:af:c4:4a:ff:81:
         94:59:24:e7:59:d8:05:15:29:73:5e:59:2a:d5:d9:ce:6c:31:
         51:a3:95:76:ac:1a:13:c4:4e:25:75:03:6c:e8:54:9a:83:67:
         88:eb:5b:e2:c9:f8:80:15:4e:93:c8:04:ef:df:8e:0b:e9:8a:
         ed:7f:3e:44:16:a9:d2:c8:06:ea:4e:f1:10:ea:b6:08:90:b3:
         17:0e:97:98:2e:f4:92:0e:1f:ce:10:c8:a4:ef:37:15:1a:bf:
         65:1e:c8:b1:42:38:f7:08:2b:c5:67:dd:91:50:28:80:f2:8e:
         80:aa:ff:eb:f0:0e:53:65:84:1e:76:ee:5c:60:6d:34:c9:d1:
         4e:2b:10:86:87:e1:d9:a3:fb:6b:cd:af:b9:8e:91:ec:c6:47:
         a4:a6:60:7c:b6:7a:7b:c3:ec:e5:bc:fc:3e:f2:86:aa:6a:0f:
         85:25:d5:c5:81:19:7b:37:aa:57:df:72:d4:ab:28:2c:10:1f:
         2b:1f:27:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:39:22 2026 by rpki-client