Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/34352e3136382e3135372e302f32342d3234203d3e20323638313031.roa
File:                     34352e3136382e3135372e302f32342d3234203d3e20323638313031.roa (raw, json)
Hash identifier:          tiLC1vjLfxkbAWK2GhzEpkgbdKWDslibrSSCm5YTWM8=
Subject key identifier:   CB:48:14:45:61:68:70:78:41:A5:21:88:91:90:72:64:35:F6:B0:76
Certificate issuer:       /CN=912EC49C89BDC1DCBECB52C922BE4EC94D79882A
Certificate serial:       69B69171522EF847312E7FD73DD64C8A9076B979
Authority key identifier: 91:2E:C4:9C:89:BD:C1:DC:BE:CB:52:C9:22:BE:4E:C9:4D:79:88:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/34352e3136382e3135372e302f32342d3234203d3e20323638313031.roa
Signing time:             Tue 05 May 2026 22:00:00 +0000
ROA not before:           Tue 05 May 2026 21:55:00 +0000
ROA not after:            Tue 04 May 2027 22:00:00 +0000
asID:                     268101
IP address blocks:        45.168.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.crl
                          rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 14:34:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:b6:91:71:52:2e:f8:47:31:2e:7f:d7:3d:d6:4c:8a:90:76:b9:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=912EC49C89BDC1DCBECB52C922BE4EC94D79882A
        Validity
            Not Before: May  5 21:55:00 2026 GMT
            Not After : May  4 22:00:00 2027 GMT
        Subject: CN=CB4814456168707841A521889190726435F6B076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:21:a8:b4:7a:ad:8f:c2:1b:56:25:86:51:87:
                    a4:a2:20:30:f2:b8:55:c5:a3:b0:8c:cb:ea:92:97:
                    95:ca:06:f9:50:b8:c6:37:f2:ca:7f:2d:99:be:d7:
                    31:e3:4c:90:95:49:d2:ca:5c:49:bd:37:f0:4e:a2:
                    1a:fb:80:65:f7:4f:45:2e:7e:90:30:8f:3f:8f:b3:
                    11:c5:b1:3e:46:65:08:b4:5f:5a:d7:54:0c:8f:d9:
                    b0:c8:ef:fb:e3:46:73:64:86:8b:56:f1:58:bd:23:
                    a5:91:c9:a6:1f:8b:72:88:cb:84:dd:f1:38:02:02:
                    82:fd:15:09:f3:ab:8a:5d:61:65:c9:d4:d9:b6:df:
                    34:1e:4d:f1:a6:e8:85:dd:fe:b7:56:25:d9:c5:60:
                    de:2f:47:06:03:f0:d2:b4:a9:f4:53:92:c9:dd:ab:
                    db:1a:e2:46:92:5d:2f:53:f7:b8:61:f9:d1:1e:34:
                    99:f9:d0:fb:e4:9d:56:98:b2:c0:97:c4:62:f0:8d:
                    36:51:ab:64:95:9d:65:30:b6:c3:8a:cf:2e:2d:74:
                    44:1d:79:c2:3f:38:a9:d2:a0:40:8b:36:b2:43:6a:
                    43:12:12:6c:86:e9:3d:63:9c:54:5a:40:34:d6:f1:
                    46:8b:33:15:2e:55:99:f0:b6:9b:c0:c9:99:9e:9a:
                    f8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:48:14:45:61:68:70:78:41:A5:21:88:91:90:72:64:35:F6:B0:76
            X509v3 Authority Key Identifier:
                keyid:91:2E:C4:9C:89:BD:C1:DC:BE:CB:52:C9:22:BE:4E:C9:4D:79:88:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/34352e3136382e3135372e302f32342d3234203d3e20323638313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:f7:6d:79:26:f3:af:50:b8:bb:14:1d:2e:97:a3:14:27:b8:
         2d:8b:08:4e:60:7c:44:90:e9:9e:73:23:70:76:65:d0:3a:b0:
         2f:bb:db:32:51:c2:80:85:17:8e:30:da:11:ac:c4:6f:21:42:
         c6:07:f4:30:3f:11:6d:ee:39:73:38:31:9d:d8:d6:2a:42:62:
         1d:dd:92:25:b1:c5:c0:5d:98:5a:52:5a:09:e7:df:72:4e:24:
         bc:0b:37:30:16:86:c8:7a:11:df:05:a0:32:79:aa:3f:52:3c:
         93:50:5e:0d:5c:61:cc:f0:f0:60:da:62:0b:17:55:ca:29:04:
         5a:50:ad:48:3c:32:ef:e8:12:16:ee:04:67:84:d1:65:91:01:
         13:bb:14:52:52:08:41:5e:92:27:2c:7d:c0:c7:4b:49:8f:4c:
         ab:76:9a:2c:37:9b:0e:98:78:e9:cc:5a:47:09:15:41:c5:00:
         57:ce:36:88:05:29:8a:ef:3d:ea:9b:7f:27:99:9a:48:7e:49:
         ff:7f:b7:b9:ba:50:4e:2f:36:3f:d8:36:40:4d:70:6e:90:06:
         52:d1:dd:a6:6c:c7:2d:a7:d0:82:5a:35:1a:61:d3:1d:b8:f9:
         4c:4e:7c:94:bf:09:9f:f9:f5:75:b8:a7:65:f7:5d:d5:20:f3:
         50:7d:99:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:55:30 2026 by rpki-client