Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArZhjjD2CzfDTzPv7hhtgYMToRBZocWFuMP7tF83knPD/1/34352e3136342e3138322e302f32342d3234203d3e20323638363336.roa
File:                     34352e3136342e3138322e302f32342d3234203d3e20323638363336.roa (raw, json)
Hash identifier:          Ypd8yZpzbfPM/rF6BzCFNUX/SRZQKUbmLOAv1QvtCys=
Subject key identifier:   26:EC:0D:D5:4E:00:A4:3E:0C:F3:42:FC:E6:E7:5D:8E:43:B6:20:EA
Certificate issuer:       /CN=BB90587BB24E47FC1B4E0BAFAA1C24D2EC55109E
Certificate serial:       35EDAD0CF832DC4C9A31F546F9B5834FE9779DA2
Authority key identifier: BB:90:58:7B:B2:4E:47:FC:1B:4E:0B:AF:AA:1C:24:D2:EC:55:10:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB90587BB24E47FC1B4E0BAFAA1C24D2EC55109E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArZhjjD2CzfDTzPv7hhtgYMToRBZocWFuMP7tF83knPD/1/34352e3136342e3138322e302f32342d3234203d3e20323638363336.roa
Signing time:             Tue 28 Apr 2026 13:14:16 +0000
ROA not before:           Tue 28 Apr 2026 13:09:16 +0000
ROA not after:            Tue 27 Apr 2027 13:14:16 +0000
asID:                     268636
IP address blocks:        45.164.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ArZhjjD2CzfDTzPv7hhtgYMToRBZocWFuMP7tF83knPD/1/BB90587BB24E47FC1B4E0BAFAA1C24D2EC55109E.crl
                          rsync://rpki-repo.registro.br/repo/ArZhjjD2CzfDTzPv7hhtgYMToRBZocWFuMP7tF83knPD/1/BB90587BB24E47FC1B4E0BAFAA1C24D2EC55109E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB90587BB24E47FC1B4E0BAFAA1C24D2EC55109E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 17:48:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ed:ad:0c:f8:32:dc:4c:9a:31:f5:46:f9:b5:83:4f:e9:77:9d:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB90587BB24E47FC1B4E0BAFAA1C24D2EC55109E
        Validity
            Not Before: Apr 28 13:09:16 2026 GMT
            Not After : Apr 27 13:14:16 2027 GMT
        Subject: CN=26EC0DD54E00A43E0CF342FCE6E75D8E43B620EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d8:c7:88:81:cf:1b:c9:32:c4:f8:db:78:0d:
                    09:d1:1e:08:6c:32:46:2a:08:ea:3a:7a:4b:76:ab:
                    ac:27:76:6a:b0:bf:ef:15:cc:20:8b:64:e0:52:b4:
                    5e:1a:c6:d6:3c:41:8c:7a:1b:d2:8c:7d:37:d2:01:
                    ea:71:02:5c:2d:4d:f7:65:93:61:c7:cd:92:22:62:
                    e0:0f:0b:b4:d8:57:d2:eb:8f:b8:d0:a1:92:08:43:
                    33:ca:fb:12:8d:90:8d:71:88:cb:53:09:18:ab:ff:
                    81:8e:c0:5f:7e:ce:a8:33:52:30:fd:45:81:2b:d2:
                    e8:2e:e4:52:e4:ec:4c:01:73:6a:74:a0:ce:6b:1e:
                    8b:66:5b:4b:bf:c9:88:b4:13:1f:6a:8d:56:4d:30:
                    c1:08:31:e7:fe:69:4d:d2:6d:73:c8:7e:a3:48:49:
                    81:4f:3e:0b:4f:37:33:5b:53:0f:b9:22:93:9b:7e:
                    bd:4c:0f:0a:e3:ca:d1:1e:27:c4:7a:a6:6a:9c:92:
                    b4:94:b8:b5:42:d1:bf:5e:e8:63:c9:58:2f:67:0f:
                    3d:48:2b:c0:dd:8a:60:c0:94:41:35:56:ba:b5:e9:
                    dc:f4:67:3d:0f:36:d1:09:a6:76:c0:ff:64:92:1b:
                    88:da:7d:59:cb:4d:9a:6b:19:2e:10:70:4e:23:b0:
                    34:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:EC:0D:D5:4E:00:A4:3E:0C:F3:42:FC:E6:E7:5D:8E:43:B6:20:EA
            X509v3 Authority Key Identifier:
                keyid:BB:90:58:7B:B2:4E:47:FC:1B:4E:0B:AF:AA:1C:24:D2:EC:55:10:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArZhjjD2CzfDTzPv7hhtgYMToRBZocWFuMP7tF83knPD/1/BB90587BB24E47FC1B4E0BAFAA1C24D2EC55109E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB90587BB24E47FC1B4E0BAFAA1C24D2EC55109E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArZhjjD2CzfDTzPv7hhtgYMToRBZocWFuMP7tF83knPD/1/34352e3136342e3138322e302f32342d3234203d3e20323638363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:c2:76:b0:73:42:f2:c3:12:92:c4:c1:53:1c:33:f8:8a:ea:
         b5:1f:ab:1e:c4:87:94:be:8b:40:61:1e:5a:a2:1c:b3:58:3d:
         ee:0a:a4:60:20:dd:e5:c6:e5:b2:fe:5a:c2:d0:8a:45:8b:2f:
         d3:ca:2a:61:a2:c1:9c:1f:00:64:60:f6:12:a6:c5:49:65:92:
         2d:11:e1:61:22:07:09:cd:27:e6:d3:c0:6d:81:e6:d5:6a:40:
         a5:42:7c:06:bf:86:b2:04:3d:34:62:6c:28:9e:8a:b0:28:50:
         33:d0:0d:9e:67:41:87:9e:07:f0:fb:a6:94:d5:a8:6f:63:a0:
         84:1a:66:9b:43:4d:e6:5e:7d:a5:3c:ea:e5:55:7c:5f:37:00:
         3d:7f:ff:a2:1e:72:07:da:fb:98:1f:10:4b:b2:45:3e:30:38:
         b0:c1:ea:8a:05:a1:8e:f0:df:dc:01:91:17:9f:13:70:3a:5a:
         48:26:76:73:12:35:d3:d7:5e:5a:1a:46:64:70:7d:59:d0:64:
         52:45:a6:47:f7:3c:6e:ea:98:57:70:4e:0b:b4:90:00:09:d3:
         6a:f2:4d:92:a7:56:0d:45:5d:52:85:eb:7c:fc:fe:d7:fc:96:
         d7:c8:4b:e5:35:7b:dd:0f:2f:1b:3f:d8:df:8b:dc:43:ef:0b:
         2b:16:ea:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:11:41 2026 by rpki-client