Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/34352e37312e3133302e302f32332d3233203d3e20323637363038.roa
File:                     34352e37312e3133302e302f32332d3233203d3e20323637363038.roa (raw, json)
Hash identifier:          ZscN/Kh6r0kZWoZGj3N/jfGt4k4LZbI1rE1B3JOFzvI=
Subject key identifier:   53:EE:07:EC:7B:0E:51:5E:BA:70:CC:32:9A:1C:5A:47:8A:6C:73:7D
Certificate issuer:       /CN=371070DB3AF9489AC044A01894F7F3DEA5016C1F
Certificate serial:       5D982C0B44A187BA47EE0B727B70B9971F067458
Authority key identifier: 37:10:70:DB:3A:F9:48:9A:C0:44:A0:18:94:F7:F3:DE:A5:01:6C:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/34352e37312e3133302e302f32332d3233203d3e20323637363038.roa
Signing time:             Sat 02 May 2026 00:03:20 +0000
ROA not before:           Fri 01 May 2026 23:58:20 +0000
ROA not after:            Sat 01 May 2027 00:03:20 +0000
asID:                     267608
IP address blocks:        45.71.130.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.crl
                          rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 11:16:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:98:2c:0b:44:a1:87:ba:47:ee:0b:72:7b:70:b9:97:1f:06:74:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=371070DB3AF9489AC044A01894F7F3DEA5016C1F
        Validity
            Not Before: May  1 23:58:20 2026 GMT
            Not After : May  1 00:03:20 2027 GMT
        Subject: CN=53EE07EC7B0E515EBA70CC329A1C5A478A6C737D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b8:7a:8f:c8:28:28:69:34:4e:38:60:ba:5e:
                    63:93:77:ec:c7:3a:1d:f1:bf:a4:9a:c4:f9:c3:83:
                    3e:5f:39:f2:58:3f:07:d6:2f:61:09:e7:87:43:f6:
                    07:07:e6:10:43:41:d4:29:f3:0f:9c:b0:60:e3:b1:
                    a1:34:52:3a:c3:9a:40:c1:b4:85:da:f6:bd:76:a4:
                    be:b9:ac:de:45:44:af:18:11:9a:19:5b:24:8e:67:
                    6d:c1:1c:1a:d4:c5:d8:da:5b:f7:a1:5f:29:b0:53:
                    0b:8b:9f:42:d8:13:b2:26:ab:9f:53:2f:de:54:cf:
                    72:30:13:9a:10:14:30:50:e1:09:c9:ec:74:08:30:
                    49:84:f9:05:93:ef:31:d7:46:f2:9d:ae:80:19:c2:
                    2b:d8:d6:d1:a0:7e:2c:f0:90:5d:a0:38:24:56:c0:
                    07:32:53:40:0e:13:29:bf:b2:24:59:cd:34:96:03:
                    91:2a:67:1b:f3:35:a9:00:aa:18:dd:46:5e:ec:38:
                    91:73:ca:93:bb:92:52:a5:a7:75:87:ca:cf:2f:0d:
                    65:62:02:73:25:9e:07:7a:db:b9:b1:49:f4:f2:0f:
                    98:04:9d:ad:1b:b5:3d:a9:32:92:82:f7:02:0c:a5:
                    aa:69:7e:04:d8:f3:81:3d:fb:e3:9c:5e:61:39:ea:
                    3d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:EE:07:EC:7B:0E:51:5E:BA:70:CC:32:9A:1C:5A:47:8A:6C:73:7D
            X509v3 Authority Key Identifier:
                keyid:37:10:70:DB:3A:F9:48:9A:C0:44:A0:18:94:F7:F3:DE:A5:01:6C:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/34352e37312e3133302e302f32332d3233203d3e20323637363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:3f:64:6d:09:5f:ce:1b:2b:e5:26:bd:0e:6c:1a:10:3f:98:
         c7:bf:b5:f1:24:ea:de:1d:89:af:0e:af:49:aa:46:17:c5:ee:
         9d:ed:0c:0a:69:38:de:84:ad:d9:f9:1c:e6:07:ea:fe:cf:f0:
         0a:e8:32:fb:16:eb:87:0c:2d:8c:ac:42:ac:d5:e7:79:68:70:
         18:ca:77:bf:a1:64:26:39:82:6e:45:61:d5:5e:9e:bf:5b:b3:
         53:84:b7:0d:02:40:75:bf:01:9b:fb:dd:71:ad:ea:27:5c:83:
         01:f3:86:68:c8:40:f0:1b:8b:5f:20:e5:8e:1f:ea:ef:2b:c2:
         56:f3:27:e6:f8:39:90:ed:b7:08:0f:7f:6a:eb:f4:11:02:31:
         5d:07:6f:36:30:ce:cb:43:a9:17:42:f7:52:24:fb:38:7b:23:
         eb:35:4b:34:27:8f:87:a9:76:dc:e0:33:f0:b4:47:3d:bf:23:
         2c:c2:4a:95:0e:fb:ab:c7:3c:15:3c:cf:c6:a8:a7:60:03:20:
         41:dc:69:25:63:f4:bd:94:8a:e6:f4:e4:2a:42:5f:f9:12:fe:
         c8:37:6f:69:d8:84:ee:4d:fb:2c:2f:ca:24:5e:35:60:be:f2:
         b6:b1:02:3c:26:46:7b:78:96:cc:78:8e:a9:a1:54:14:dc:d9:
         62:a0:41:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:02:52 2026 by rpki-client