Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79KSmiH7dUja9Has2119CsPudkJuEB8GFQGw7MfjMQPg/0/34352e3136342e3132342e302f32322d3234203d3e20323638363234.roa
File:                     34352e3136342e3132342e302f32322d3234203d3e20323638363234.roa (raw, json)
Hash identifier:          QQl4t1CHclHOssAnsR5pa8Iig2Phn07bzaFm15Thu8k=
Subject key identifier:   D8:34:C9:18:93:F8:F7:D3:2F:87:EE:46:E3:4A:F9:5E:06:88:59:E0
Certificate issuer:       /CN=64BE4E7240DE353E8AA99AF76D96CEF4251C7B10
Certificate serial:       02E92DC937B84A4725BAD0B4E8FD3CFB6AAF9B45
Authority key identifier: 64:BE:4E:72:40:DE:35:3E:8A:A9:9A:F7:6D:96:CE:F4:25:1C:7B:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64BE4E7240DE353E8AA99AF76D96CEF4251C7B10.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79KSmiH7dUja9Has2119CsPudkJuEB8GFQGw7MfjMQPg/0/34352e3136342e3132342e302f32322d3234203d3e20323638363234.roa
Signing time:             Thu 07 May 2026 20:03:55 +0000
ROA not before:           Thu 07 May 2026 19:58:55 +0000
ROA not after:            Thu 06 May 2027 20:03:55 +0000
asID:                     268624
IP address blocks:        45.164.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79KSmiH7dUja9Has2119CsPudkJuEB8GFQGw7MfjMQPg/0/64BE4E7240DE353E8AA99AF76D96CEF4251C7B10.crl
                          rsync://rpki-repo.registro.br/repo/79KSmiH7dUja9Has2119CsPudkJuEB8GFQGw7MfjMQPg/0/64BE4E7240DE353E8AA99AF76D96CEF4251C7B10.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64BE4E7240DE353E8AA99AF76D96CEF4251C7B10.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 01:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:e9:2d:c9:37:b8:4a:47:25:ba:d0:b4:e8:fd:3c:fb:6a:af:9b:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64BE4E7240DE353E8AA99AF76D96CEF4251C7B10
        Validity
            Not Before: May  7 19:58:55 2026 GMT
            Not After : May  6 20:03:55 2027 GMT
        Subject: CN=D834C91893F8F7D32F87EE46E34AF95E068859E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3a:6b:07:36:a9:cf:19:09:5f:42:4f:e7:70:
                    96:15:f4:96:79:a3:59:5a:f7:f4:bc:bc:7e:4d:f7:
                    96:c5:85:f4:fc:f0:1a:31:a1:39:66:9a:2a:50:ad:
                    5b:3e:7e:a4:1d:42:a7:cb:30:cc:3d:12:f9:4e:c2:
                    11:4c:7b:2d:1f:db:56:21:df:93:a6:2d:a8:d1:14:
                    37:78:53:3d:2b:fe:6f:e6:f0:8b:4f:89:6a:8b:a9:
                    17:09:54:96:9c:df:9b:a4:1b:31:3d:9e:ca:13:25:
                    1a:99:5c:12:4f:56:29:69:08:d3:2f:6b:d8:8f:b2:
                    da:8f:a2:bd:13:56:ba:54:62:9c:e4:d4:05:e9:e4:
                    37:10:c2:6a:56:a5:0c:f3:77:67:97:63:14:91:d5:
                    7c:78:71:f2:33:09:a0:33:5d:76:8b:95:8d:68:a7:
                    cc:82:0e:10:6f:b4:f6:58:d1:f8:ce:93:71:27:7b:
                    7b:a5:84:03:64:aa:18:60:f6:aa:df:73:f2:af:8b:
                    ed:33:73:cc:9a:81:52:ca:6b:59:fa:e4:95:22:22:
                    9e:61:7f:89:62:3a:a8:5e:7e:ff:51:ae:ca:be:14:
                    39:78:ac:c9:af:29:bf:9a:e1:5c:7d:4b:7b:17:6a:
                    f9:fe:82:d6:4b:c6:6c:15:7f:10:68:da:b7:aa:83:
                    7d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:34:C9:18:93:F8:F7:D3:2F:87:EE:46:E3:4A:F9:5E:06:88:59:E0
            X509v3 Authority Key Identifier:
                keyid:64:BE:4E:72:40:DE:35:3E:8A:A9:9A:F7:6D:96:CE:F4:25:1C:7B:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79KSmiH7dUja9Has2119CsPudkJuEB8GFQGw7MfjMQPg/0/64BE4E7240DE353E8AA99AF76D96CEF4251C7B10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64BE4E7240DE353E8AA99AF76D96CEF4251C7B10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79KSmiH7dUja9Has2119CsPudkJuEB8GFQGw7MfjMQPg/0/34352e3136342e3132342e302f32322d3234203d3e20323638363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:b5:48:87:6c:58:78:3e:1f:29:94:63:4e:4f:ef:bb:2c:16:
         ee:c8:9b:0f:5c:0e:5d:93:f8:ca:aa:51:a9:67:cc:1b:14:4b:
         37:ad:a5:3b:ce:b9:c7:fb:86:57:bb:55:d4:95:c8:c5:bc:46:
         42:98:fd:f8:f0:6d:ac:e9:94:34:9b:34:4c:e5:02:35:be:cd:
         c0:0b:f9:a8:02:f9:b7:b7:67:ed:0c:36:f1:5c:7e:ff:d5:2d:
         97:d3:cf:fd:39:09:d7:cb:99:ed:4f:81:68:7a:d6:ea:76:5f:
         ac:a0:06:60:2f:6f:eb:75:58:f9:67:66:7b:3e:b8:f1:eb:82:
         d8:f1:8f:6d:27:69:e4:bc:7f:fe:b8:f9:d1:1c:81:79:14:2b:
         68:81:f1:a2:82:e6:7c:1e:cd:ae:09:fd:9d:4a:3a:50:e0:63:
         fc:b0:b2:b0:7c:1c:6b:cb:8f:1c:5c:9d:74:a5:e1:18:32:49:
         df:10:0f:30:34:62:d7:c6:e9:46:c0:b1:f8:50:95:53:a4:df:
         cb:45:fd:09:c1:c0:91:0f:18:e3:b2:b8:90:25:12:7a:a7:4b:
         61:e8:58:e9:b2:75:d2:a1:6a:e2:56:e3:24:e8:27:c8:17:02:
         ae:d9:08:fe:61:3c:e5:90:93:72:ce:04:63:8f:ae:a2:c2:e3:
         5c:f0:09:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:11:28 2026 by rpki-client