Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233382e302f32332d3233203d3e20323639353935.roa
File:                     34352e3138382e3233382e302f32332d3233203d3e20323639353935.roa (raw, json)
Hash identifier:          +G4tMGMNy/QFXbM9e/iw7yicC31GZ2j2t8dTmSCLdo0=
Subject key identifier:   7A:95:1F:50:82:61:40:64:28:55:32:8E:94:D5:42:7E:4D:46:EF:B2
Certificate issuer:       /CN=AD81180ED014F2365CDAF7461678A5A8D2038CFA
Certificate serial:       6FF22AC692B413A06A6F282CE11A0E117300BDAB
Authority key identifier: AD:81:18:0E:D0:14:F2:36:5C:DA:F7:46:16:78:A5:A8:D2:03:8C:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD81180ED014F2365CDAF7461678A5A8D2038CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233382e302f32332d3233203d3e20323639353935.roa
Signing time:             Wed 22 Apr 2026 20:42:54 +0000
ROA not before:           Wed 22 Apr 2026 20:37:54 +0000
ROA not after:            Wed 21 Apr 2027 20:42:54 +0000
asID:                     269595
IP address blocks:        45.188.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/AD81180ED014F2365CDAF7461678A5A8D2038CFA.crl
                          rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/AD81180ED014F2365CDAF7461678A5A8D2038CFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD81180ED014F2365CDAF7461678A5A8D2038CFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 01:54:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:f2:2a:c6:92:b4:13:a0:6a:6f:28:2c:e1:1a:0e:11:73:00:bd:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD81180ED014F2365CDAF7461678A5A8D2038CFA
        Validity
            Not Before: Apr 22 20:37:54 2026 GMT
            Not After : Apr 21 20:42:54 2027 GMT
        Subject: CN=7A951F50826140642855328E94D5427E4D46EFB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e5:75:6c:30:8c:b3:df:10:97:c7:ab:f5:2e:
                    14:ea:bb:09:3a:bb:47:3b:9a:ec:35:ef:66:f8:e4:
                    89:b8:1f:dd:10:20:6f:01:04:8f:c3:ce:26:8c:1f:
                    be:c9:7b:fb:32:ef:b4:99:f1:3e:c0:df:e7:68:e8:
                    87:e4:47:1e:47:08:b8:6b:d8:f5:30:cd:16:28:2b:
                    78:2e:82:4c:59:6d:80:9e:e5:b6:4f:1d:81:ad:d5:
                    a1:f2:56:67:80:a4:6d:aa:d0:6a:19:d5:38:95:98:
                    58:7b:70:a2:d2:9c:84:7e:b6:99:22:a5:ac:2f:91:
                    4a:c1:15:62:a9:86:ba:7e:3d:11:0f:15:50:72:54:
                    d9:1d:d3:09:e1:3a:90:67:7b:7f:3b:2d:85:54:84:
                    f7:ee:4e:04:8d:36:10:5b:02:48:a9:10:ec:69:ac:
                    a3:82:96:fd:10:ac:8f:63:09:2d:e0:0d:ed:dc:04:
                    5b:15:99:7b:c6:cd:a3:7d:ff:e2:24:f0:12:76:e9:
                    fb:e0:97:ac:f9:2c:66:0b:58:61:42:34:24:c2:74:
                    dc:d8:c8:05:fb:55:b7:c2:ac:58:b3:04:1e:4b:bc:
                    04:1c:e5:38:32:da:2b:d5:5e:cc:ac:0c:b3:c0:b1:
                    24:cc:f2:6e:37:c8:f2:95:d6:64:94:0f:28:de:58:
                    67:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:95:1F:50:82:61:40:64:28:55:32:8E:94:D5:42:7E:4D:46:EF:B2
            X509v3 Authority Key Identifier:
                keyid:AD:81:18:0E:D0:14:F2:36:5C:DA:F7:46:16:78:A5:A8:D2:03:8C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/AD81180ED014F2365CDAF7461678A5A8D2038CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD81180ED014F2365CDAF7461678A5A8D2038CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233382e302f32332d3233203d3e20323639353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:d0:19:52:7e:15:9d:0b:e3:be:68:c7:76:1f:99:16:d4:87:
         12:75:9c:5d:fa:db:85:81:cb:e4:d6:1e:ed:71:75:82:42:ec:
         44:92:87:47:65:84:dc:19:fe:d3:f6:b3:c0:00:41:b2:f8:47:
         90:f1:14:ed:b3:f8:98:51:eb:40:9d:84:6d:a6:66:55:d8:0d:
         43:da:4b:3e:ac:a7:f2:f4:b8:8f:58:ce:4a:42:ef:ec:23:a3:
         70:a6:23:a9:c4:6c:6d:2c:0a:88:0c:c6:61:5a:e1:39:de:c9:
         1e:eb:5a:c2:b4:4f:ff:77:20:b4:16:98:d5:e0:c2:ea:55:f4:
         53:c5:80:c8:e3:9e:9f:41:00:dc:18:8d:01:c3:ea:4b:87:91:
         f4:c2:89:b1:a6:cd:82:f7:6f:f2:0a:2a:b5:26:ea:86:20:60:
         85:df:5f:38:ab:f8:0a:96:7b:49:9d:10:76:d7:70:60:32:1d:
         91:02:60:37:09:e4:64:17:5f:3c:69:1f:28:53:65:68:1b:b4:
         55:17:fc:a3:07:79:95:f1:81:84:9a:9f:29:6a:53:4e:a9:f3:
         07:5d:64:09:06:c9:7f:3c:3e:63:c0:c5:18:26:4f:c3:26:7a:
         ec:79:27:2d:c4:eb:49:55:8f:ac:60:6f:9c:d3:8e:dc:af:b8:
         83:28:c8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:09:58 2026 by rpki-client