Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ueyG71jaZjJXTpQavtuPttmLrHJy4it954Jq6n3fvMn/0/34352e3136342e3230382e302f32322d3234203d3e20323638363337.roa
File:                     34352e3136342e3230382e302f32322d3234203d3e20323638363337.roa (raw, json)
Hash identifier:          h2vscovz3zZycM/waE1CgbxA0qvXAE6GHe9ik3HPYIE=
Subject key identifier:   8D:8D:6F:4D:1B:BA:DE:03:AF:61:7B:34:D1:C8:0D:A0:28:76:EB:F6
Certificate issuer:       /CN=2377DF7A371509E2CBD9F6DEC7CE28154D9C4550
Certificate serial:       7C163E64139860BAF9EAAD526136CFF912FC8FC0
Authority key identifier: 23:77:DF:7A:37:15:09:E2:CB:D9:F6:DE:C7:CE:28:15:4D:9C:45:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2377DF7A371509E2CBD9F6DEC7CE28154D9C4550.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ueyG71jaZjJXTpQavtuPttmLrHJy4it954Jq6n3fvMn/0/34352e3136342e3230382e302f32322d3234203d3e20323638363337.roa
Signing time:             Fri 08 May 2026 15:41:13 +0000
ROA not before:           Fri 08 May 2026 15:36:13 +0000
ROA not after:            Fri 07 May 2027 15:41:13 +0000
asID:                     268637
IP address blocks:        45.164.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ueyG71jaZjJXTpQavtuPttmLrHJy4it954Jq6n3fvMn/0/2377DF7A371509E2CBD9F6DEC7CE28154D9C4550.crl
                          rsync://rpki-repo.registro.br/repo/3ueyG71jaZjJXTpQavtuPttmLrHJy4it954Jq6n3fvMn/0/2377DF7A371509E2CBD9F6DEC7CE28154D9C4550.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2377DF7A371509E2CBD9F6DEC7CE28154D9C4550.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 06:46:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:16:3e:64:13:98:60:ba:f9:ea:ad:52:61:36:cf:f9:12:fc:8f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2377DF7A371509E2CBD9F6DEC7CE28154D9C4550
        Validity
            Not Before: May  8 15:36:13 2026 GMT
            Not After : May  7 15:41:13 2027 GMT
        Subject: CN=8D8D6F4D1BBADE03AF617B34D1C80DA02876EBF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c7:52:bc:66:d6:12:79:8c:fd:c0:9b:2b:eb:
                    ee:ec:d1:20:75:15:d4:5b:8e:62:34:39:6d:72:7b:
                    b8:58:0e:82:1e:a1:94:e7:3d:32:55:aa:c8:e4:2f:
                    76:bc:8e:6d:3c:fd:55:b9:d4:3d:4a:dc:4d:c8:cf:
                    d3:46:a0:a7:7e:3b:a4:d6:53:fe:71:a6:b4:d5:93:
                    87:74:63:c5:3e:b8:69:c9:a3:c8:57:72:93:ca:05:
                    51:d1:e7:92:e9:ac:75:4f:38:0d:93:fb:b6:97:18:
                    39:a3:c6:71:f6:cc:5b:78:91:60:11:6a:2d:7f:d7:
                    5f:c1:5d:0f:09:f5:b0:6d:f2:4b:42:e7:54:aa:6a:
                    1e:48:af:ee:b9:b6:58:9f:06:83:52:5c:77:2a:f4:
                    36:c8:1a:c4:86:cc:62:8b:56:6b:0f:e1:92:47:bb:
                    c1:28:72:dd:34:a3:1b:cf:a6:6e:ba:0e:14:ed:02:
                    c6:3d:a3:b4:79:b5:a9:79:4a:9a:ac:59:7d:58:6f:
                    f9:f2:ac:bd:fa:df:88:36:e4:94:53:c2:fb:4f:31:
                    84:0a:3e:5f:f7:54:c0:ab:ca:3a:ef:ba:63:1a:89:
                    68:3c:ef:29:04:52:c8:0f:ca:5d:9d:8e:b6:43:fd:
                    01:bb:04:b3:f9:b8:99:3f:32:74:a7:db:67:4c:70:
                    96:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:8D:6F:4D:1B:BA:DE:03:AF:61:7B:34:D1:C8:0D:A0:28:76:EB:F6
            X509v3 Authority Key Identifier:
                keyid:23:77:DF:7A:37:15:09:E2:CB:D9:F6:DE:C7:CE:28:15:4D:9C:45:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ueyG71jaZjJXTpQavtuPttmLrHJy4it954Jq6n3fvMn/0/2377DF7A371509E2CBD9F6DEC7CE28154D9C4550.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2377DF7A371509E2CBD9F6DEC7CE28154D9C4550.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ueyG71jaZjJXTpQavtuPttmLrHJy4it954Jq6n3fvMn/0/34352e3136342e3230382e302f32322d3234203d3e20323638363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:44:88:d1:5f:e5:e0:f2:89:0d:14:12:ee:ad:41:75:67:b0:
         3d:84:1d:16:54:fc:f5:62:c1:ce:6d:dc:03:6b:05:0f:6f:a1:
         34:42:b3:59:77:55:31:8c:1b:24:56:7a:b3:2e:db:76:4d:39:
         fb:8d:30:8f:53:bc:06:c7:50:d0:e5:6e:40:98:bf:b9:1a:64:
         64:07:0b:cb:0a:37:fd:b4:b7:ce:98:d9:57:01:f4:bf:dc:65:
         8c:81:ba:e5:23:fa:f6:ee:aa:2c:42:1b:4e:7b:b5:78:fc:78:
         b3:cc:e2:e6:84:9e:a0:9f:69:59:f5:c2:a9:58:b5:7b:3e:e6:
         e3:35:ea:fe:61:70:2e:b8:b4:65:cd:44:b2:47:8f:3f:d8:de:
         22:83:c8:9b:45:4e:bb:89:fb:13:47:73:da:34:e7:47:e2:a2:
         d6:7b:d0:9c:63:19:8c:b2:f1:a1:d4:31:4f:9f:23:06:2c:1b:
         53:6f:48:5e:cf:94:b5:98:ea:5c:1e:fb:54:a7:98:8e:d2:4e:
         81:89:26:cb:50:c6:02:6a:4d:d1:0c:39:18:65:21:37:f6:7d:
         09:92:4d:bb:53:01:68:73:2a:7b:95:b9:05:66:c7:6f:24:2f:
         4e:c8:da:d7:3e:2f:54:11:6d:b2:21:21:0d:34:e7:d2:51:aa:
         79:02:88:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:42:47 2026 by rpki-client