Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3134382e302f32342d3234203d3e20323638363738.roa
File:                     34352e3136352e3134382e302f32342d3234203d3e20323638363738.roa (raw, json)
Hash identifier:          lWH6WJPAmvmsVNEbkYDsM8arzYo/HmF3Egota3oLw1A=
Subject key identifier:   CB:F4:81:32:EE:B7:40:DF:4F:5D:C5:29:5C:0B:A4:04:82:E7:B7:97
Certificate issuer:       /CN=13BA12AD11702042688DE1889543FA7A0FCFA16E
Certificate serial:       261C3FD0C6DD55717012143D7FF6896236B24150
Authority key identifier: 13:BA:12:AD:11:70:20:42:68:8D:E1:88:95:43:FA:7A:0F:CF:A1:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13BA12AD11702042688DE1889543FA7A0FCFA16E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3134382e302f32342d3234203d3e20323638363738.roa
Signing time:             Tue 05 May 2026 13:56:13 +0000
ROA not before:           Tue 05 May 2026 13:51:13 +0000
ROA not after:            Tue 04 May 2027 13:56:13 +0000
asID:                     268678
IP address blocks:        45.165.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/13BA12AD11702042688DE1889543FA7A0FCFA16E.crl
                          rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/13BA12AD11702042688DE1889543FA7A0FCFA16E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13BA12AD11702042688DE1889543FA7A0FCFA16E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 06:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:1c:3f:d0:c6:dd:55:71:70:12:14:3d:7f:f6:89:62:36:b2:41:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BA12AD11702042688DE1889543FA7A0FCFA16E
        Validity
            Not Before: May  5 13:51:13 2026 GMT
            Not After : May  4 13:56:13 2027 GMT
        Subject: CN=CBF48132EEB740DF4F5DC5295C0BA40482E7B797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:49:4c:5d:f2:9d:6a:92:24:4a:50:25:c4:f4:
                    49:d2:5d:74:64:f0:95:e2:9d:8f:11:fc:83:22:19:
                    0b:6c:de:77:8e:c6:0f:09:3d:b3:58:60:fa:04:d2:
                    15:13:9b:dc:41:b7:a5:03:0e:7d:0b:cd:54:ce:13:
                    df:80:57:3d:65:62:a9:58:97:77:0f:af:05:4d:e2:
                    14:b8:22:71:bb:4f:77:6b:d3:54:c0:f9:b7:88:54:
                    b6:dd:d6:6e:96:18:04:95:d9:23:bf:31:28:6f:7f:
                    11:3f:9e:6f:b6:3a:20:b5:43:e7:4a:74:cb:6b:ed:
                    f9:a3:42:3a:f3:12:05:45:01:15:1e:a1:0e:b2:5b:
                    f4:22:f9:55:fb:e7:f3:d8:81:86:a3:85:8b:09:35:
                    2e:e0:3c:3c:59:c4:ca:cb:5a:a9:40:83:86:86:ca:
                    44:6d:1c:c3:5c:32:14:fe:ac:3f:5b:eb:fa:82:2f:
                    a4:19:1d:09:a2:0b:f5:84:ad:2c:e7:6b:4c:69:38:
                    10:54:33:00:90:d6:5a:04:de:83:37:c0:74:de:33:
                    9e:39:24:79:fb:ed:dc:e4:58:6b:bd:25:0e:0b:fa:
                    54:12:35:2c:8d:3e:8a:a1:41:78:03:72:49:dc:f6:
                    06:b7:a6:e2:b0:40:86:9f:2b:7a:54:77:6f:92:e7:
                    d0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F4:81:32:EE:B7:40:DF:4F:5D:C5:29:5C:0B:A4:04:82:E7:B7:97
            X509v3 Authority Key Identifier:
                keyid:13:BA:12:AD:11:70:20:42:68:8D:E1:88:95:43:FA:7A:0F:CF:A1:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/13BA12AD11702042688DE1889543FA7A0FCFA16E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13BA12AD11702042688DE1889543FA7A0FCFA16E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3134382e302f32342d3234203d3e20323638363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:4f:1f:86:cc:b6:9b:13:a7:77:e5:13:f7:bc:c7:bd:95:77:
         56:75:a5:5d:19:6a:aa:4d:40:b4:ac:83:cd:2e:bc:92:98:3e:
         f3:41:86:b2:0c:de:b5:60:c6:f2:6f:c5:88:67:21:3a:89:ca:
         ac:01:9a:1f:87:67:2d:3f:7b:29:7f:c1:16:09:67:14:01:26:
         6b:46:f7:da:14:de:97:76:46:04:39:05:61:88:f1:e9:73:39:
         71:29:29:08:b5:1e:9d:1a:3a:e8:c0:85:75:f6:aa:05:4b:5d:
         ae:4c:12:54:26:20:ee:2f:02:c0:db:7a:06:4d:de:e7:a4:b0:
         81:8b:03:c7:dd:8e:5d:90:a1:ab:d3:e1:0f:02:82:5d:2a:75:
         09:c7:9c:f3:66:90:30:96:f8:3b:1b:12:a9:99:6f:35:f1:f9:
         d9:f3:ab:d1:01:fd:dd:cf:a0:f9:2e:a5:b8:48:75:28:cf:3f:
         37:38:69:fe:74:28:e9:16:5d:1f:e5:44:f3:c2:85:85:2e:39:
         04:80:60:76:db:9b:ac:b7:0b:c4:a4:e2:52:d3:e6:52:55:83:
         96:18:18:27:66:7b:63:d5:ae:b4:ad:d1:e7:de:b0:32:0e:42:
         9c:04:6f:8c:30:4e:d5:04:10:97:77:af:83:28:3b:16:96:b5:
         fe:ff:fd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:31:05 2026 by rpki-client