Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/34352e352e33322e302f32322d3332203d3e20323636393331.roa
File:                     34352e352e33322e302f32322d3332203d3e20323636393331.roa (raw, json)
Hash identifier:          OYwCGVHg8utCi1/7zxSvhN4uAehMuIbVflkR1f+Y2YI=
Subject key identifier:   D7:1C:0E:9F:CB:05:AD:3A:17:6F:59:B0:AE:05:C6:10:F7:47:1A:D8
Certificate issuer:       /CN=F69E2B81072ADCB9988EF2646F524ADBE9507AB0
Certificate serial:       0EBEA9E0C860086ABA933ADF7A3729C0BCCD0FC3
Authority key identifier: F6:9E:2B:81:07:2A:DC:B9:98:8E:F2:64:6F:52:4A:DB:E9:50:7A:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F69E2B81072ADCB9988EF2646F524ADBE9507AB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/34352e352e33322e302f32322d3332203d3e20323636393331.roa
Signing time:             Wed 06 May 2026 14:07:10 +0000
ROA not before:           Wed 06 May 2026 14:02:10 +0000
ROA not after:            Wed 05 May 2027 14:07:10 +0000
asID:                     266931
IP address blocks:        45.5.32.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/F69E2B81072ADCB9988EF2646F524ADBE9507AB0.crl
                          rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/F69E2B81072ADCB9988EF2646F524ADBE9507AB0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F69E2B81072ADCB9988EF2646F524ADBE9507AB0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 08:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:be:a9:e0:c8:60:08:6a:ba:93:3a:df:7a:37:29:c0:bc:cd:0f:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F69E2B81072ADCB9988EF2646F524ADBE9507AB0
        Validity
            Not Before: May  6 14:02:10 2026 GMT
            Not After : May  5 14:07:10 2027 GMT
        Subject: CN=D71C0E9FCB05AD3A176F59B0AE05C610F7471AD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9a:eb:9d:b1:e6:6d:cb:54:5c:a0:65:94:f3:
                    f5:ca:b9:b6:40:22:ca:49:0a:51:6d:06:6a:25:50:
                    b4:f3:94:92:b1:c0:9d:bc:5c:4a:ea:b2:5d:db:b5:
                    99:16:d5:0f:79:e6:b6:12:b5:7e:44:98:4c:0d:00:
                    d0:90:b3:53:fe:99:80:16:fd:ab:5b:8e:d0:77:ed:
                    ef:12:f7:53:4c:d9:d7:f0:d2:43:b6:d3:4c:e0:3b:
                    0d:58:e9:52:4c:1d:6b:82:b8:11:56:ec:17:fc:64:
                    45:d1:27:3d:dd:4f:aa:2e:1e:f9:92:e7:d5:48:95:
                    1c:14:e3:2c:b1:4c:f9:4e:18:58:26:fe:97:5f:4b:
                    eb:9e:70:a0:bc:99:e5:a5:8e:b5:b1:12:7f:34:3c:
                    2a:ab:ca:aa:99:c8:a2:bb:84:73:11:e8:52:57:be:
                    96:06:0e:c6:ac:6d:9a:a9:03:c4:31:8f:b7:f3:7f:
                    ce:10:29:14:9a:9e:36:e6:98:b3:d8:14:6f:ed:36:
                    89:03:ac:a5:27:ec:54:79:33:60:3b:ff:ad:a8:82:
                    61:35:6d:00:8c:ef:07:d5:1a:32:bf:1e:e4:08:95:
                    c9:1c:ae:67:a6:89:6d:22:d5:26:77:01:de:82:39:
                    78:8e:48:68:12:37:2f:a7:df:0c:8b:9c:dd:77:b7:
                    d0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:1C:0E:9F:CB:05:AD:3A:17:6F:59:B0:AE:05:C6:10:F7:47:1A:D8
            X509v3 Authority Key Identifier:
                keyid:F6:9E:2B:81:07:2A:DC:B9:98:8E:F2:64:6F:52:4A:DB:E9:50:7A:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/F69E2B81072ADCB9988EF2646F524ADBE9507AB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F69E2B81072ADCB9988EF2646F524ADBE9507AB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/34352e352e33322e302f32322d3332203d3e20323636393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:c1:ca:31:8a:21:e0:7e:97:c3:69:e4:f5:44:fd:1b:06:20:
         07:9e:fc:59:a8:f7:8f:6d:e7:ac:d7:69:be:85:e2:dd:cd:78:
         51:8c:8e:87:89:75:dc:80:57:57:f8:1c:76:8f:d6:3a:e3:6b:
         7d:96:f5:73:17:ac:b3:e4:15:3d:81:a2:3c:53:16:34:7a:a6:
         74:44:d5:38:a5:a2:5d:be:82:6f:b1:4a:eb:2b:7d:1f:02:8c:
         0c:e1:25:32:a7:43:2c:75:0a:ae:81:c4:bf:57:a3:69:a0:3d:
         4e:cc:9f:cd:ef:2e:83:51:4b:20:8e:b6:7b:7b:b5:ed:f7:84:
         01:ee:3b:ea:9b:6f:94:35:83:fe:a4:c0:33:d0:99:5a:65:30:
         29:d4:94:8b:d8:e1:8a:75:7a:07:d3:f5:32:c9:1a:29:59:8a:
         44:59:9e:78:9d:bd:54:22:27:8b:7d:52:36:21:c5:b8:6f:0c:
         e5:00:f9:bb:a5:0f:80:a4:8a:e5:33:7f:bc:78:38:1a:31:94:
         05:86:46:c8:bd:02:7c:6b:4d:1d:b6:c6:98:63:28:71:2c:a5:
         2f:1d:f0:2e:0e:b0:2b:f3:61:9f:b7:25:90:f8:50:1c:a6:4f:
         b8:ca:85:57:5b:c7:f6:51:14:1e:0f:8a:3f:28:f7:d2:de:02:
         4a:69:aa:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:19:54 2026 by rpki-client