Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3134382e302f32322d3232203d3e20323638363738.roa
File:                     34352e3136352e3134382e302f32322d3232203d3e20323638363738.roa (raw, json)
Hash identifier:          bYC4tqgePa0HkdWSrwkUuJpfbSyRxzAGIj5tD7raXOg=
Subject key identifier:   7A:62:78:1C:46:8E:49:C3:FF:16:6E:7C:4C:5C:D7:92:90:B4:F7:83
Certificate issuer:       /CN=13BA12AD11702042688DE1889543FA7A0FCFA16E
Certificate serial:       386F0A6B3B2D0210D2CDB9D5113C393BACDB9799
Authority key identifier: 13:BA:12:AD:11:70:20:42:68:8D:E1:88:95:43:FA:7A:0F:CF:A1:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13BA12AD11702042688DE1889543FA7A0FCFA16E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3134382e302f32322d3232203d3e20323638363738.roa
Signing time:             Tue 05 May 2026 13:56:14 +0000
ROA not before:           Tue 05 May 2026 13:51:14 +0000
ROA not after:            Tue 04 May 2027 13:56:14 +0000
asID:                     268678
IP address blocks:        45.165.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/13BA12AD11702042688DE1889543FA7A0FCFA16E.crl
                          rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/13BA12AD11702042688DE1889543FA7A0FCFA16E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13BA12AD11702042688DE1889543FA7A0FCFA16E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 06:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:6f:0a:6b:3b:2d:02:10:d2:cd:b9:d5:11:3c:39:3b:ac:db:97:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BA12AD11702042688DE1889543FA7A0FCFA16E
        Validity
            Not Before: May  5 13:51:14 2026 GMT
            Not After : May  4 13:56:14 2027 GMT
        Subject: CN=7A62781C468E49C3FF166E7C4C5CD79290B4F783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e4:a8:1a:b4:e4:97:ec:ff:6b:2a:9d:be:2e:
                    04:bc:7f:d7:3f:2f:ea:aa:b6:13:48:f6:26:d4:4f:
                    23:95:83:3e:57:78:c8:42:06:a3:86:08:17:5e:fb:
                    cb:dc:f8:27:f9:69:93:07:a1:ce:e2:bb:f3:55:d7:
                    57:73:9d:98:12:4f:dc:ca:d2:7a:ff:10:cb:74:03:
                    34:42:ab:72:9d:98:fa:74:a5:4a:a0:b2:0d:59:a6:
                    fb:dc:f5:00:00:17:c5:8d:c5:14:76:e8:25:fc:89:
                    f5:74:11:28:4d:81:95:43:82:e1:6c:e7:63:ce:cb:
                    5e:32:d4:a6:bc:e6:07:28:3a:24:aa:b3:4a:56:37:
                    07:52:64:c7:a6:af:2d:5a:c9:6d:fc:14:d3:cb:b2:
                    41:2f:79:7e:04:1e:49:e5:46:04:a1:0c:15:55:f1:
                    6e:1e:a9:e3:95:0c:df:dd:05:83:da:98:b4:23:f5:
                    34:f0:cd:7f:1b:e0:12:87:4e:89:20:04:21:e4:2c:
                    7c:e4:91:7a:b7:3d:4d:d0:2d:ac:6e:96:ea:7b:6b:
                    52:48:b7:14:c2:b7:2a:06:5b:ed:12:fa:45:97:61:
                    9a:1c:84:d9:7a:f9:39:1b:3d:f3:dd:8d:ac:03:e7:
                    5e:a8:54:c5:f7:98:b1:ba:e4:b0:2c:10:9e:69:18:
                    14:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:62:78:1C:46:8E:49:C3:FF:16:6E:7C:4C:5C:D7:92:90:B4:F7:83
            X509v3 Authority Key Identifier:
                keyid:13:BA:12:AD:11:70:20:42:68:8D:E1:88:95:43:FA:7A:0F:CF:A1:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/13BA12AD11702042688DE1889543FA7A0FCFA16E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13BA12AD11702042688DE1889543FA7A0FCFA16E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3134382e302f32322d3232203d3e20323638363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:04:8b:92:86:d3:09:2a:24:ce:f7:5c:ba:be:36:6d:10:6b:
         e9:f8:f1:be:02:c2:82:b2:94:55:ae:f7:c3:6a:09:e3:46:fd:
         4c:64:2c:f0:73:ab:98:78:81:5f:85:46:a0:8e:1e:a6:b9:9e:
         36:55:e5:e6:c5:26:fd:89:36:21:48:87:fa:76:58:43:26:22:
         6b:f8:85:c4:ab:7c:0e:8b:32:13:3e:25:8d:54:d6:ec:bd:2a:
         26:85:2b:c2:59:62:d2:e2:97:ce:d6:32:fd:e1:e7:48:2e:08:
         96:0a:be:c3:7c:11:70:ef:a8:0f:32:be:68:a3:62:ac:72:12:
         a9:e4:fb:9c:69:86:06:19:49:29:2a:a1:40:6b:97:d9:88:25:
         8e:fc:5a:9b:7c:fd:b2:38:8f:a0:08:27:22:f4:31:57:d0:8a:
         43:22:43:41:27:c9:c9:f3:5c:27:d3:33:90:a5:83:ef:3d:1e:
         6e:53:04:1b:c8:80:a3:66:6f:01:4e:c7:44:4b:18:ae:97:2c:
         ae:64:53:ef:c0:99:ca:e4:f2:00:49:82:44:c3:1a:e6:17:57:
         75:3b:ec:dd:b0:c5:f5:e5:93:16:02:b9:c8:22:4c:fb:63:cc:
         94:db:c9:b1:e4:70:70:07:af:7d:67:3a:d0:f7:99:dd:34:ba:
         42:d9:f2:ee
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOG8KazstAhDSzbnVETw5O6zbl5kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNCQTEyQUQxMTcwMjA0MjY4OERFMTg4OTU0M0ZBN0Ew
RkNGQTE2RTAeFw0yNjA1MDUxMzUxMTRaFw0yNzA1MDQxMzU2MTRaMDMxMTAvBgNV
BAMTKDdBNjI3ODFDNDY4RTQ5QzNGRjE2NkU3QzRDNUNENzkyOTBCNEY3ODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCL5KgatOSX7P9rKp2+LgS8f9c/
L+qqthNI9ibUTyOVgz5XeMhCBqOGCBde+8vc+Cf5aZMHoc7iu/NV11dznZgST9zK
0nr/EMt0AzRCq3KdmPp0pUqgsg1Zpvvc9QAAF8WNxRR26CX8ifV0EShNgZVDguFs
52POy14y1Ka85gcoOiSqs0pWNwdSZMemry1ayW38FNPLskEveX4EHknlRgShDBVV
8W4eqeOVDN/dBYPamLQj9TTwzX8b4BKHTokgBCHkLHzkkXq3PU3QLaxulup7a1JI
txTCtyoGW+0S+kWXYZochNl6+TkbPfPdjawD516oVMX3mLG65LAsEJ5pGBTjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUemJ4HEaOScP/Fm58TFzXkpC094MwHwYDVR0j
BBgwFoAUE7oSrRFwIEJojeGIlUP6eg/PoW4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUdyZ2pLRFdOSmgyZ25kVjFpeGRSelBVYmZDd0wxdU1YMzZBS2l3U3Yy
VHovMC8xM0JBMTJBRDExNzAyMDQyNjg4REUxODg5NTQzRkE3QTBGQ0ZBMTZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEzQkExMkFEMTE3MDIwNDI2
ODhERTE4ODk1NDNGQTdBMEZDRkExNkUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVHcmdqS0RXTkpoMmduZFYxaXhkUnpQVWJmQ3dMMXVNWDM2QUtpd1N2MlR6LzAv
MzQzNTJlMzEzNjM1MmUzMTM0MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzgzNjM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItpZQwDQYJKoZIhvcNAQELBQADggEBAAQEi5KG
0wkqJM73XLq+Nm0Qa+n48b4CwoKylFWu98NqCeNG/UxkLPBzq5h4gV+FRqCOHqa5
njZV5ebFJv2JNiFIh/p2WEMmImv4hcSrfA6LMhM+JY1U1uy9KiaFK8JZYtLil87W
Mv3h50guCJYKvsN8EXDvqA8yvmijYqxyEqnk+5xphgYZSSkqoUBrl9mIJY78Wpt8
/bI4j6AIJyL0MVfQikMiQ0EnycnzXCfTM5Clg+89Hm5TBBvIgKNmbwFOx0RLGK6X
LK5kU+/Amcrk8gBJgkTDGuYXV3U77N2wxfXlkxYCucgiTPtjzJTbybHkcHAHr31n
OtD3md00ukLZ8u4=
-----END CERTIFICATE-----
Generated at Wed May 13 19:30:52 2026 by rpki-client