Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/34352e3136382e3135382e302f32342d3234203d3e20323638313031.roa
File:                     34352e3136382e3135382e302f32342d3234203d3e20323638313031.roa (raw, json)
Hash identifier:          mKU1wu/es1G4FS29NEMlCjfl9j/NdsLdvZffTJtQyGY=
Subject key identifier:   BD:7E:31:D8:61:6F:36:CB:17:E9:7E:78:D0:AA:F9:D5:20:EE:2C:27
Certificate issuer:       /CN=912EC49C89BDC1DCBECB52C922BE4EC94D79882A
Certificate serial:       1EBA5137E42857E44CE97E7AB035C3D8D61515FA
Authority key identifier: 91:2E:C4:9C:89:BD:C1:DC:BE:CB:52:C9:22:BE:4E:C9:4D:79:88:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/34352e3136382e3135382e302f32342d3234203d3e20323638313031.roa
Signing time:             Tue 05 May 2026 22:00:00 +0000
ROA not before:           Tue 05 May 2026 21:55:00 +0000
ROA not after:            Tue 04 May 2027 22:00:00 +0000
asID:                     268101
IP address blocks:        45.168.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.crl
                          rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 14:34:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:ba:51:37:e4:28:57:e4:4c:e9:7e:7a:b0:35:c3:d8:d6:15:15:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=912EC49C89BDC1DCBECB52C922BE4EC94D79882A
        Validity
            Not Before: May  5 21:55:00 2026 GMT
            Not After : May  4 22:00:00 2027 GMT
        Subject: CN=BD7E31D8616F36CB17E97E78D0AAF9D520EE2C27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a7:d1:c6:5e:45:86:e7:5a:d9:a0:53:60:15:
                    fb:24:ad:e1:3f:ea:e3:fe:97:e9:a8:1f:be:dd:ba:
                    ff:16:e9:2c:dd:9d:97:c2:60:80:43:4c:33:cd:c3:
                    b8:10:09:2c:0e:e4:62:10:65:bc:e6:2a:a7:a5:47:
                    e1:7e:72:0a:f6:c3:5f:1a:98:8f:66:64:bc:92:34:
                    d3:fa:78:3f:32:53:47:8c:e1:66:c7:00:00:a0:65:
                    dc:01:a2:a2:9d:8b:d2:c7:a9:00:19:54:11:df:a0:
                    0c:fe:c7:d9:4c:e3:1d:89:cc:56:cd:d5:8d:fa:f0:
                    ed:c9:ac:ea:f7:64:45:0c:4f:8c:04:7c:fe:b9:08:
                    47:95:42:52:f0:ec:2e:1a:57:ba:a5:fa:fe:f0:48:
                    8b:c4:40:9f:24:a7:5b:ad:89:9f:52:45:a4:4c:98:
                    39:00:2c:3e:a7:03:ab:8b:f9:bb:04:73:7a:ac:b6:
                    92:2f:b6:2c:b7:f8:f6:5f:14:67:44:e6:3e:f8:2c:
                    fc:90:4e:57:d7:68:e3:d7:a0:cb:89:c3:e6:cb:a6:
                    aa:cb:dd:09:59:f8:5a:14:9b:fa:ad:c8:11:fc:e2:
                    22:ee:cf:dc:b7:96:f4:c5:66:6a:f5:00:4b:05:18:
                    bc:ab:d1:ec:07:bd:69:5e:fc:df:fc:d1:66:67:06:
                    f4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:7E:31:D8:61:6F:36:CB:17:E9:7E:78:D0:AA:F9:D5:20:EE:2C:27
            X509v3 Authority Key Identifier:
                keyid:91:2E:C4:9C:89:BD:C1:DC:BE:CB:52:C9:22:BE:4E:C9:4D:79:88:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/34352e3136382e3135382e302f32342d3234203d3e20323638313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:c7:c9:02:72:ab:66:e4:d4:2d:f6:7c:08:75:f9:2b:5b:3c:
         70:80:2b:98:f7:8d:0c:a8:d8:a8:cb:98:92:87:4b:06:37:f2:
         19:8c:ae:2f:c0:4b:8c:97:e9:9b:65:48:38:b2:59:61:bc:78:
         c2:37:21:8c:d9:7d:b5:eb:36:c1:29:64:6e:f2:03:fc:33:0a:
         d9:99:09:2a:bb:a5:83:11:a0:7d:d6:e3:d3:53:c2:f9:28:05:
         03:40:c3:1e:b7:e3:71:74:ce:28:9f:9b:6a:8d:30:a3:0d:3e:
         2d:6b:a8:b7:d6:59:2d:d0:d2:29:dd:0f:2d:d4:2f:fb:ff:bc:
         e5:82:aa:94:44:1d:7e:a4:99:00:46:39:70:7c:27:fb:a0:26:
         c2:61:0a:95:4c:b8:04:8e:9e:91:6b:dd:a7:cb:b0:83:34:2d:
         dc:c9:11:71:29:9e:d1:42:bc:bd:9b:b5:15:43:7f:dd:db:db:
         cb:37:6e:b2:23:7e:fb:cd:33:e7:10:90:83:a2:9f:49:d9:80:
         c1:c7:97:c6:d4:17:a9:12:7d:7c:b7:e8:75:f2:5a:b8:aa:22:
         0b:9e:04:26:cb:9c:54:48:ca:6b:0f:35:b8:47:35:51:0e:ca:
         b5:95:7a:3d:ca:b9:41:29:9b:d4:a9:a9:1a:d4:fb:38:59:25:
         28:80:48:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:24:30 2026 by rpki-client