Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3134392e302f32342d3234203d3e20323638363738.roa
File:                     34352e3136352e3134392e302f32342d3234203d3e20323638363738.roa (raw, json)
Hash identifier:          6p4j+bwZ4r7gWd5FoSjTodzblXHBhssLAsworMMaUQ8=
Subject key identifier:   72:9F:F6:A3:B3:91:50:E7:6A:A9:58:4A:2D:90:D0:2C:E8:2F:13:10
Certificate issuer:       /CN=13BA12AD11702042688DE1889543FA7A0FCFA16E
Certificate serial:       664BB3DAB7452E9E8BFD369FB09E97F4B154CCC9
Authority key identifier: 13:BA:12:AD:11:70:20:42:68:8D:E1:88:95:43:FA:7A:0F:CF:A1:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13BA12AD11702042688DE1889543FA7A0FCFA16E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3134392e302f32342d3234203d3e20323638363738.roa
Signing time:             Tue 05 May 2026 13:56:14 +0000
ROA not before:           Tue 05 May 2026 13:51:14 +0000
ROA not after:            Tue 04 May 2027 13:56:14 +0000
asID:                     268678
IP address blocks:        45.165.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/13BA12AD11702042688DE1889543FA7A0FCFA16E.crl
                          rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/13BA12AD11702042688DE1889543FA7A0FCFA16E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13BA12AD11702042688DE1889543FA7A0FCFA16E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 06:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:4b:b3:da:b7:45:2e:9e:8b:fd:36:9f:b0:9e:97:f4:b1:54:cc:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BA12AD11702042688DE1889543FA7A0FCFA16E
        Validity
            Not Before: May  5 13:51:14 2026 GMT
            Not After : May  4 13:56:14 2027 GMT
        Subject: CN=729FF6A3B39150E76AA9584A2D90D02CE82F1310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:14:ae:3c:7f:e8:d8:ac:1e:03:91:21:81:b3:
                    2f:fd:e2:e6:ac:c4:9d:4f:43:2d:fd:c8:d0:3f:28:
                    f0:f0:45:c7:a5:f4:de:1b:9d:23:d6:e4:a6:56:ef:
                    22:d1:e8:5f:6f:57:4d:b1:2e:3e:16:6f:80:53:f4:
                    a2:34:3b:35:cf:85:2f:7a:cb:ed:e9:fa:9d:7e:05:
                    06:42:8b:46:60:7b:26:2c:35:3b:17:e7:09:f3:96:
                    29:fa:39:32:52:be:1e:ea:72:ed:64:a5:e0:00:01:
                    fc:77:7f:9f:3a:d4:50:f3:57:b2:35:b1:e9:a7:c4:
                    db:e4:9b:78:63:b1:38:44:26:91:ea:8e:65:0b:9a:
                    d9:ec:2f:97:5b:7b:3e:8c:e5:86:ec:0a:aa:04:2d:
                    32:a2:f8:50:2d:ce:75:35:07:28:25:a1:7b:a4:81:
                    7c:9e:ef:a8:fb:ea:17:70:53:ff:10:fa:65:55:43:
                    b8:61:7f:8c:b8:03:87:89:9e:7f:87:17:0f:f1:c2:
                    c8:d8:50:90:59:61:b8:0c:1c:13:db:2d:55:69:f4:
                    90:6d:1f:bd:04:73:f8:2e:14:2f:8b:cd:51:4d:de:
                    97:c0:58:63:d7:93:9b:e9:18:b4:16:52:fa:c7:9d:
                    a5:11:2b:d2:39:96:74:16:b5:61:82:8f:6d:94:bf:
                    78:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:9F:F6:A3:B3:91:50:E7:6A:A9:58:4A:2D:90:D0:2C:E8:2F:13:10
            X509v3 Authority Key Identifier:
                keyid:13:BA:12:AD:11:70:20:42:68:8D:E1:88:95:43:FA:7A:0F:CF:A1:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/13BA12AD11702042688DE1889543FA7A0FCFA16E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13BA12AD11702042688DE1889543FA7A0FCFA16E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3134392e302f32342d3234203d3e20323638363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:31:70:15:37:15:7e:23:c4:4d:10:0d:4f:bc:bb:04:8a:df:
         69:a9:40:ff:cf:9f:a7:4c:cd:80:f6:d6:5a:41:49:e1:d3:f1:
         ae:56:65:5a:97:bf:52:1a:38:13:3d:97:4b:fc:6d:03:30:60:
         03:e7:ec:4a:4a:57:6a:25:a7:b0:ee:c5:7a:38:ea:ec:c2:40:
         bc:26:d4:a5:1e:30:c4:db:f5:ac:c6:ed:eb:3e:e7:81:7c:4c:
         be:e6:ce:e3:b3:2a:de:57:47:a5:5e:9d:17:14:e0:e0:71:62:
         80:29:0e:75:53:ca:4b:d8:d4:13:81:14:14:7d:13:57:49:58:
         d9:7f:06:63:ea:a7:dc:05:76:97:51:1b:f6:46:17:9f:d3:f8:
         d0:79:2a:53:97:6c:5b:5f:a9:2b:21:7b:7e:bf:1f:77:55:92:
         b6:27:db:6e:f2:b8:0b:24:80:a0:fb:fb:da:79:9d:a7:6f:14:
         ea:82:06:78:13:3f:e9:fc:6a:cf:37:d5:e5:39:88:9d:40:9c:
         51:b9:04:91:3f:f1:f8:a6:ff:cc:e3:6f:29:7f:dc:4c:37:35:
         cc:5e:b1:0e:0e:7f:24:07:14:b9:4e:ff:7e:3a:2e:20:3d:5b:
         f1:f4:bc:91:a3:ed:2d:8a:84:80:57:e3:74:fa:92:02:31:2c:
         81:bd:8e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:31:04 2026 by rpki-client