Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/34352e3137362e3133362e302f32322d3332203d3e20323638393433.roa
File:                     34352e3137362e3133362e302f32322d3332203d3e20323638393433.roa (raw, json)
Hash identifier:          nFxchPBt3stxXJk7urA2qXBmug3dmA6EsY4Mz+OV3EA=
Subject key identifier:   AF:FD:07:1B:40:85:12:F6:5A:EA:7F:8D:9F:F5:1F:3A:44:C4:A0:12
Certificate issuer:       /CN=244210A52780C11301B2190D98A2A7329C57A68B
Certificate serial:       29A55FFC0E77F0509DE53BA047BE6658232B5B12
Authority key identifier: 24:42:10:A5:27:80:C1:13:01:B2:19:0D:98:A2:A7:32:9C:57:A6:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/244210A52780C11301B2190D98A2A7329C57A68B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/34352e3137362e3133362e302f32322d3332203d3e20323638393433.roa
Signing time:             Wed 06 May 2026 14:08:42 +0000
ROA not before:           Wed 06 May 2026 14:03:42 +0000
ROA not after:            Wed 05 May 2027 14:08:42 +0000
asID:                     268943
IP address blocks:        45.176.136.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/244210A52780C11301B2190D98A2A7329C57A68B.crl
                          rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/244210A52780C11301B2190D98A2A7329C57A68B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/244210A52780C11301B2190D98A2A7329C57A68B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 07:15:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:a5:5f:fc:0e:77:f0:50:9d:e5:3b:a0:47:be:66:58:23:2b:5b:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=244210A52780C11301B2190D98A2A7329C57A68B
        Validity
            Not Before: May  6 14:03:42 2026 GMT
            Not After : May  5 14:08:42 2027 GMT
        Subject: CN=AFFD071B408512F65AEA7F8D9FF51F3A44C4A012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b3:de:f4:26:4d:b1:1b:b2:c6:fd:e8:6b:81:
                    f2:9c:14:74:07:50:7d:99:00:7b:d1:aa:ff:41:d3:
                    59:ae:ac:1d:e2:d7:3e:86:bb:4c:d8:48:a9:fd:16:
                    36:42:c6:b8:06:b4:13:a2:8c:9c:88:8a:95:94:a2:
                    fa:9e:08:fb:c1:9c:9e:82:f5:cc:78:e5:64:ec:2f:
                    6d:c2:14:a5:f1:a6:69:1b:37:2d:76:37:da:d6:67:
                    88:0f:b1:08:19:85:f4:b4:c8:d8:5b:b5:bd:ac:23:
                    03:83:9f:30:93:be:19:c2:0d:79:de:1e:8b:bb:79:
                    5d:b0:95:1c:76:a4:2d:2e:54:d9:5a:a9:de:74:f6:
                    2c:4e:66:d6:99:01:d4:a6:87:8b:9d:bb:cf:3a:ef:
                    71:4a:65:92:97:e7:be:03:5a:d3:39:48:7f:8d:9e:
                    9a:ac:7f:4e:d5:18:a8:0d:c4:f7:b2:47:6f:0b:90:
                    ce:a2:dd:d5:11:c5:c4:79:ae:0c:4a:79:0e:9f:0e:
                    b1:47:4b:62:f0:91:15:2b:69:3f:9c:51:9b:90:b3:
                    35:9f:f4:75:10:f0:10:58:60:da:e8:db:69:ee:09:
                    5c:07:6f:68:63:93:c6:18:6d:df:18:c8:90:f6:8a:
                    50:e2:cb:1d:60:36:b5:90:25:9e:cd:e2:4d:b6:e0:
                    d6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:FD:07:1B:40:85:12:F6:5A:EA:7F:8D:9F:F5:1F:3A:44:C4:A0:12
            X509v3 Authority Key Identifier:
                keyid:24:42:10:A5:27:80:C1:13:01:B2:19:0D:98:A2:A7:32:9C:57:A6:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/244210A52780C11301B2190D98A2A7329C57A68B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/244210A52780C11301B2190D98A2A7329C57A68B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/34352e3137362e3133362e302f32322d3332203d3e20323638393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:f8:15:04:94:bd:0d:4e:48:46:70:a0:09:81:f9:72:35:2e:
         b4:40:a3:13:28:f8:cf:e1:e1:0f:1a:13:bd:44:57:26:34:a0:
         ce:f6:44:d1:80:09:38:14:f1:b7:cb:52:ee:c3:fd:a6:57:28:
         45:1e:0b:1a:b0:c0:a2:5c:2d:86:df:61:90:eb:06:d9:a1:61:
         a7:1b:67:60:d2:9a:cd:64:d4:42:fb:36:35:14:ea:12:9b:9b:
         ef:6e:f6:4b:21:b6:00:ff:d6:d4:8c:97:1a:75:b8:e0:19:28:
         0e:30:92:b5:a4:8f:9a:15:bf:d2:16:a6:3f:14:b6:fc:4f:fc:
         0c:7d:73:aa:ea:dc:20:f2:94:71:1a:3c:9f:83:9d:dd:ed:4c:
         0e:14:fd:27:63:83:59:83:3f:ac:c6:2d:60:b8:e1:2c:5a:71:
         b5:39:43:9b:37:f2:39:b7:a0:ed:76:44:c1:19:18:74:23:43:
         d1:bf:54:23:b8:8b:f4:42:e1:49:6c:14:3c:53:94:74:03:b2:
         e2:b8:ed:b9:33:63:fb:39:6a:5a:cc:7d:78:5f:42:b0:1b:bc:
         8c:e5:24:d3:29:10:9b:e3:07:82:89:44:bb:7b:44:33:42:e7:
         39:e7:9b:74:23:10:0e:15:02:06:e8:7b:79:c0:d8:e3:74:fe:
         f0:4e:16:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:41:35 2026 by rpki-client