Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3135302e302f32332d3233203d3e20323638363738.roa
File:                     34352e3136352e3135302e302f32332d3233203d3e20323638363738.roa (raw, json)
Hash identifier:          Iu+EnavkxOFBxOfUrJwLTFSC+DhIjQqXTUgisBqM8Ps=
Subject key identifier:   AE:37:FE:D1:47:D7:AF:69:E5:F3:C3:90:F9:54:5D:A2:97:AC:4A:4E
Certificate issuer:       /CN=13BA12AD11702042688DE1889543FA7A0FCFA16E
Certificate serial:       35F334448C7303324A135CD93A8844ED504014C9
Authority key identifier: 13:BA:12:AD:11:70:20:42:68:8D:E1:88:95:43:FA:7A:0F:CF:A1:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13BA12AD11702042688DE1889543FA7A0FCFA16E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3135302e302f32332d3233203d3e20323638363738.roa
Signing time:             Tue 05 May 2026 13:56:14 +0000
ROA not before:           Tue 05 May 2026 13:51:14 +0000
ROA not after:            Tue 04 May 2027 13:56:14 +0000
asID:                     268678
IP address blocks:        45.165.150.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/13BA12AD11702042688DE1889543FA7A0FCFA16E.crl
                          rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/13BA12AD11702042688DE1889543FA7A0FCFA16E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13BA12AD11702042688DE1889543FA7A0FCFA16E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 06:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:f3:34:44:8c:73:03:32:4a:13:5c:d9:3a:88:44:ed:50:40:14:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BA12AD11702042688DE1889543FA7A0FCFA16E
        Validity
            Not Before: May  5 13:51:14 2026 GMT
            Not After : May  4 13:56:14 2027 GMT
        Subject: CN=AE37FED147D7AF69E5F3C390F9545DA297AC4A4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:43:37:da:f3:86:b1:20:2b:e1:46:23:ea:97:
                    42:53:c0:67:a0:f4:48:a6:ed:48:d2:8c:ee:df:d4:
                    c4:6b:6c:7b:bd:18:b8:57:31:cb:72:e9:e1:e3:71:
                    91:d0:27:df:7a:79:ed:3d:fc:e8:30:f8:a9:81:ff:
                    de:3c:a7:ee:88:7c:1a:a6:d9:5e:11:be:b7:97:03:
                    d2:df:2c:0c:7c:33:5f:2b:10:ba:85:5d:60:ca:45:
                    53:a9:92:a2:fc:6f:e0:e4:63:75:5c:27:cb:be:51:
                    61:96:3d:87:03:9b:22:e4:df:31:1f:32:82:09:4f:
                    99:e5:16:69:b6:b8:74:9c:8b:a9:8f:f6:3d:e7:36:
                    f8:ed:f0:72:e3:53:2f:ea:57:a9:3c:6a:f5:f2:98:
                    f5:43:6f:77:d6:af:68:87:74:57:5b:5d:6e:7d:93:
                    1f:9f:1a:36:2d:70:08:2c:e8:f5:39:67:43:48:fc:
                    36:06:cb:aa:31:bf:5b:06:ed:98:0b:49:25:ce:29:
                    f9:37:89:77:ac:a5:72:ce:3e:1b:af:3c:f9:ad:b6:
                    7f:45:e5:e9:46:92:99:8d:28:5d:6c:9f:c3:67:0b:
                    40:7f:b4:fa:be:21:1c:55:42:4a:e9:48:a2:44:70:
                    fd:ed:36:ff:a2:7a:2f:56:df:05:43:b8:d7:c5:13:
                    9c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:37:FE:D1:47:D7:AF:69:E5:F3:C3:90:F9:54:5D:A2:97:AC:4A:4E
            X509v3 Authority Key Identifier:
                keyid:13:BA:12:AD:11:70:20:42:68:8D:E1:88:95:43:FA:7A:0F:CF:A1:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/13BA12AD11702042688DE1889543FA7A0FCFA16E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13BA12AD11702042688DE1889543FA7A0FCFA16E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3135302e302f32332d3233203d3e20323638363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:89:3f:fe:57:08:f1:61:3c:ca:d8:b9:ff:3e:bd:b5:a4:d9:
         54:18:22:68:09:c3:a9:24:22:3e:0c:de:3e:5b:ee:16:8f:58:
         e5:e1:67:94:d0:ed:52:27:b5:f9:dd:d8:b2:85:07:5e:14:58:
         66:d9:86:da:f6:82:02:53:f2:c5:6e:b1:65:81:14:0c:99:59:
         f1:10:d4:c7:0c:31:bd:1a:fd:16:f1:79:7b:72:e0:e8:99:96:
         92:02:60:82:b8:f3:ec:82:ad:12:c6:8f:7b:f2:dd:13:db:2b:
         70:0c:03:33:10:d9:4d:35:6e:68:e7:ca:64:c3:50:62:2b:bc:
         44:68:e8:02:43:4b:bf:df:f7:9d:49:65:cd:0e:c6:cf:65:1a:
         f8:b6:77:14:86:f9:d2:8f:3a:f6:ef:aa:33:8c:35:9c:aa:87:
         06:9b:f9:50:45:22:8a:f0:0d:a8:15:ce:5a:59:07:48:60:a6:
         bc:7c:d0:a5:d9:46:c8:a5:a5:e7:e5:6e:5b:a7:ce:e9:54:bd:
         d2:f8:ea:38:01:64:6a:a1:49:fc:38:a8:16:e0:aa:f1:4f:b8:
         94:da:0f:7c:26:83:3f:63:e6:72:59:47:1f:ae:9a:73:1d:6e:
         fa:23:75:08:7e:f9:f4:fc:58:99:cf:d6:1a:9a:e1:61:c2:51:
         a6:1a:cb:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:56:34 2026 by rpki-client