Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/34352e3136392e38312e302f32342d3234203d3e20323638313033.roa
File:                     34352e3136392e38312e302f32342d3234203d3e20323638313033.roa (raw, json)
Hash identifier:          ZlU5kTOCRz1/trExz69g9/FVGuJrIV5VDH57FAUjIyY=
Subject key identifier:   F5:45:14:9B:EF:9E:CE:86:5A:78:09:AB:3B:A1:F5:C8:E2:40:4E:DF
Certificate issuer:       /CN=39F1F6C3A26D816A2FCB216B7D6FC224391E0DED
Certificate serial:       5355363A84EC3F48627AFDB4218593B18885B765
Authority key identifier: 39:F1:F6:C3:A2:6D:81:6A:2F:CB:21:6B:7D:6F:C2:24:39:1E:0D:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39F1F6C3A26D816A2FCB216B7D6FC224391E0DED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/34352e3136392e38312e302f32342d3234203d3e20323638313033.roa
Signing time:             Wed 22 Jul 2026 04:01:12 +0000
ROA not before:           Wed 22 Jul 2026 03:56:12 +0000
ROA not after:            Wed 21 Jul 2027 04:01:12 +0000
asID:                     268103
IP address blocks:        45.169.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/39F1F6C3A26D816A2FCB216B7D6FC224391E0DED.crl
                          rsync://rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/39F1F6C3A26D816A2FCB216B7D6FC224391E0DED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39F1F6C3A26D816A2FCB216B7D6FC224391E0DED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 11:51:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:55:36:3a:84:ec:3f:48:62:7a:fd:b4:21:85:93:b1:88:85:b7:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39F1F6C3A26D816A2FCB216B7D6FC224391E0DED
        Validity
            Not Before: Jul 22 03:56:12 2026 GMT
            Not After : Jul 21 04:01:12 2027 GMT
        Subject: CN=F545149BEF9ECE865A7809AB3BA1F5C8E2404EDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:33:b2:ce:53:c3:07:79:89:17:77:e7:7f:70:
                    d4:4c:65:8c:a9:35:d7:9c:18:5f:c5:6d:05:eb:9a:
                    bd:1d:21:4b:f5:0f:0e:09:18:6a:3a:07:bc:8c:61:
                    8b:c9:10:48:8c:df:17:68:67:9e:53:e0:09:37:d0:
                    fa:05:b8:04:94:1c:be:47:43:cf:f2:30:c8:3f:1f:
                    c9:3b:2f:de:19:15:6e:28:3b:32:29:50:45:3e:84:
                    d3:c4:e2:0a:56:8f:93:5e:f7:d5:d5:6b:a8:db:2c:
                    4b:39:23:d2:27:3b:a2:fb:c5:40:e6:bb:9f:35:16:
                    fe:3b:68:52:40:5b:6e:35:17:61:17:ca:a1:25:10:
                    20:d3:35:7e:4a:04:19:03:94:cf:68:59:a6:ae:c9:
                    ef:f9:46:9b:87:71:b1:6a:cb:60:c2:a2:5c:c4:32:
                    ee:b1:76:24:51:d5:a3:9f:b9:b2:76:ac:0b:17:b3:
                    2b:99:87:4b:75:5f:5f:6f:8f:87:dc:9e:ee:3a:cb:
                    bc:99:16:54:0a:c5:83:40:8d:e1:3e:5c:f9:0a:5a:
                    f9:3c:e5:91:cc:47:4d:b3:42:65:98:b1:41:60:7a:
                    50:4e:06:88:cc:c2:71:31:7b:18:2e:2f:1c:12:ef:
                    b7:06:ba:e0:ea:16:fd:b1:1d:00:2f:cd:a4:69:d9:
                    7d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:45:14:9B:EF:9E:CE:86:5A:78:09:AB:3B:A1:F5:C8:E2:40:4E:DF
            X509v3 Authority Key Identifier:
                keyid:39:F1:F6:C3:A2:6D:81:6A:2F:CB:21:6B:7D:6F:C2:24:39:1E:0D:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/39F1F6C3A26D816A2FCB216B7D6FC224391E0DED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39F1F6C3A26D816A2FCB216B7D6FC224391E0DED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/34352e3136392e38312e302f32342d3234203d3e20323638313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:62:c7:83:06:2b:05:5b:9e:4e:ff:a6:97:ad:5f:21:87:ee:
         0b:24:93:49:76:ba:b6:5e:73:66:6e:d5:92:f4:ea:04:c7:e3:
         cd:e7:69:6f:3c:3c:96:e8:23:aa:97:6c:70:5f:e8:3f:67:6c:
         3e:49:ab:72:5f:04:a0:dc:d4:19:28:22:77:b3:5b:c0:b3:d7:
         4d:d0:e7:11:fe:dd:98:cf:75:6c:2a:3c:51:d2:65:69:86:1e:
         4d:39:8c:01:2b:33:ff:86:ef:90:44:35:dd:29:a3:66:61:f6:
         9c:cb:b5:5f:68:71:2d:eb:55:d1:8f:5b:f7:09:1c:9b:c4:a2:
         37:fc:17:50:d7:ac:ae:41:6a:41:40:b8:3f:44:4f:64:b3:27:
         28:84:00:d5:79:27:5e:5c:b8:b7:73:b9:8a:cd:b7:cc:b0:d3:
         c7:8d:91:88:97:77:14:21:87:e2:68:3a:cb:15:7e:e0:35:a1:
         1c:fb:55:42:53:90:ef:bd:06:b6:ce:39:24:7f:dc:5c:e5:82:
         0b:a9:24:0f:31:7d:da:78:3d:ba:0f:67:c5:3f:00:e6:df:f1:
         41:14:d9:d0:a0:09:1a:6c:3b:32:81:a3:89:f3:5d:3e:7d:09:
         a1:9d:c2:e8:7f:e9:4c:ee:fb:a3:a1:cc:ac:42:58:db:65:ae:
         fd:31:e3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:53:39 2026 by rpki-client