Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/34352e3136342e3136352e302f32342d3234203d3e20323638363237.roa
File:                     34352e3136342e3136352e302f32342d3234203d3e20323638363237.roa (raw, json)
Hash identifier:          sxpYz8wynwK3+YgNVeoU991zRAmQuB4Y122WZDGOf9c=
Subject key identifier:   93:1E:0E:04:FE:49:FA:E6:F2:9D:C8:23:35:52:7A:7E:F7:E2:4A:34
Certificate issuer:       /CN=B22E94C68C47105DBC96228B65437C19A68102C7
Certificate serial:       5C8F3BB08A52E3636BB230007AEF1F9EC73901CB
Authority key identifier: B2:2E:94:C6:8C:47:10:5D:BC:96:22:8B:65:43:7C:19:A6:81:02:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B22E94C68C47105DBC96228B65437C19A68102C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/34352e3136342e3136352e302f32342d3234203d3e20323638363237.roa
Signing time:             Wed 06 May 2026 18:00:00 +0000
ROA not before:           Wed 06 May 2026 17:55:00 +0000
ROA not after:            Wed 05 May 2027 18:00:00 +0000
asID:                     268627
IP address blocks:        45.164.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/B22E94C68C47105DBC96228B65437C19A68102C7.crl
                          rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/B22E94C68C47105DBC96228B65437C19A68102C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B22E94C68C47105DBC96228B65437C19A68102C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 12:33:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:8f:3b:b0:8a:52:e3:63:6b:b2:30:00:7a:ef:1f:9e:c7:39:01:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B22E94C68C47105DBC96228B65437C19A68102C7
        Validity
            Not Before: May  6 17:55:00 2026 GMT
            Not After : May  5 18:00:00 2027 GMT
        Subject: CN=931E0E04FE49FAE6F29DC82335527A7EF7E24A34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6a:f7:39:69:95:42:ae:40:75:5b:1d:99:a7:
                    fc:ee:4c:3d:54:c9:fa:b0:23:a3:aa:c8:14:e5:61:
                    b9:0f:50:49:8c:ac:b5:1c:99:e7:cd:b3:51:33:52:
                    a2:b8:63:37:2f:b3:99:af:28:40:bc:29:5e:c1:55:
                    97:c7:bf:f2:eb:1c:7a:27:bb:23:bf:8c:9f:d6:f1:
                    64:33:89:74:a5:a6:a9:ba:44:87:f2:65:8f:40:e2:
                    bc:a2:d2:42:16:17:6a:ab:56:ed:15:a0:bb:11:48:
                    e6:8d:3c:25:c9:c9:a2:e8:2a:a4:ab:80:d2:e5:29:
                    27:ab:44:15:c0:dd:c3:96:f6:c7:5c:f8:92:da:fd:
                    3e:51:b6:d5:9d:d8:26:cd:46:a1:56:2a:dc:90:b1:
                    e3:23:54:81:3f:e4:39:0d:cc:e2:ea:00:db:11:cd:
                    91:e1:35:89:1b:26:dc:3e:52:a4:89:4a:2f:4f:52:
                    dd:06:5c:11:c9:e7:2e:1e:02:9e:f6:bb:d0:a2:5d:
                    e1:42:bc:1f:a6:1a:a8:27:f2:c2:c1:2f:f9:9f:45:
                    47:83:a0:c8:bf:cd:88:5d:b0:02:c6:64:50:4a:58:
                    9c:a1:d1:f7:5e:6a:0e:00:e8:e0:e5:a4:26:a1:89:
                    24:e1:4b:c2:2e:51:f9:ca:07:36:0c:88:74:28:ab:
                    23:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:1E:0E:04:FE:49:FA:E6:F2:9D:C8:23:35:52:7A:7E:F7:E2:4A:34
            X509v3 Authority Key Identifier:
                keyid:B2:2E:94:C6:8C:47:10:5D:BC:96:22:8B:65:43:7C:19:A6:81:02:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/B22E94C68C47105DBC96228B65437C19A68102C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B22E94C68C47105DBC96228B65437C19A68102C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/34352e3136342e3136352e302f32342d3234203d3e20323638363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:ea:bc:f0:c4:ad:1d:e1:32:76:16:b7:a2:29:71:2d:d3:a2:
         2b:d2:19:90:ca:94:3b:34:25:0b:80:38:73:25:82:04:e3:40:
         ef:74:1c:65:97:da:6f:44:51:75:25:22:c6:9d:84:88:62:38:
         06:ff:9c:5b:bc:9f:33:b2:7d:e6:5e:fe:7e:cb:a8:f9:09:3c:
         2c:e0:a2:d6:3e:67:91:84:43:34:24:72:76:02:93:76:95:c6:
         36:a7:52:2a:79:fb:cd:20:6f:d8:f5:24:49:c7:5e:fe:b4:fb:
         f4:07:99:e1:76:97:76:0d:06:52:ef:67:c8:63:c6:d9:08:25:
         8c:2f:bc:49:a2:e4:cf:49:48:ad:9f:5f:fb:e8:ca:42:c2:4c:
         33:37:5e:d0:a7:31:fa:05:cb:eb:ca:34:7e:28:77:cc:3b:15:
         01:1d:c1:84:47:80:4b:56:f8:a1:01:08:62:03:b2:59:6d:69:
         6a:2e:ac:0f:8d:44:02:71:b5:a6:ce:c0:0f:cd:c5:54:63:65:
         2a:e5:fb:37:15:4d:0c:57:49:4e:55:6c:fd:b4:87:23:eb:93:
         38:09:20:0e:db:1d:72:21:4e:7d:78:ee:8d:87:7e:7c:a4:20:
         7f:c2:53:75:6a:42:64:b0:b1:71:a7:ff:11:34:88:f3:37:be:
         28:ae:bd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:56:28 2026 by rpki-client