Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/34352e3136332e3134382e302f32322d3232203d3e20323638353630.roa
File:                     34352e3136332e3134382e302f32322d3232203d3e20323638353630.roa (raw, json)
Hash identifier:          wb2dDtkNeOuYTyxpgpcI+H4r446JcKVAjCrzVOaBqv0=
Subject key identifier:   67:B1:BD:C3:20:50:A4:3E:12:9B:E6:19:4A:61:F5:8A:D8:A3:F1:A9
Certificate issuer:       /CN=5C29F2932419957E47C4D277E53183F70D734498
Certificate serial:       7A3B7DD9CFCA4DFC217FD40502EB8C0BF0FFABA8
Authority key identifier: 5C:29:F2:93:24:19:95:7E:47:C4:D2:77:E5:31:83:F7:0D:73:44:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C29F2932419957E47C4D277E53183F70D734498.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/34352e3136332e3134382e302f32322d3232203d3e20323638353630.roa
Signing time:             Sat 09 May 2026 14:48:49 +0000
ROA not before:           Sat 09 May 2026 14:43:49 +0000
ROA not after:            Sat 08 May 2027 14:48:49 +0000
asID:                     268560
IP address blocks:        45.163.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/5C29F2932419957E47C4D277E53183F70D734498.crl
                          rsync://rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/5C29F2932419957E47C4D277E53183F70D734498.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C29F2932419957E47C4D277E53183F70D734498.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 10:05:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:3b:7d:d9:cf:ca:4d:fc:21:7f:d4:05:02:eb:8c:0b:f0:ff:ab:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C29F2932419957E47C4D277E53183F70D734498
        Validity
            Not Before: May  9 14:43:49 2026 GMT
            Not After : May  8 14:48:49 2027 GMT
        Subject: CN=67B1BDC32050A43E129BE6194A61F58AD8A3F1A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:65:fb:ed:80:3b:23:59:f9:30:87:38:38:61:
                    ac:23:6f:9f:b9:c4:38:ab:1f:33:e7:cf:0b:82:9b:
                    e1:a2:27:c8:04:67:0d:2b:1a:21:e5:4c:88:09:8a:
                    4b:92:dc:3e:a8:cd:82:e3:1d:3e:da:a5:f0:3f:6f:
                    75:16:13:09:de:93:d0:d6:1d:98:3f:4f:a5:11:2a:
                    9b:7c:74:e9:4d:a9:46:c8:f3:12:71:8c:cb:83:d3:
                    8c:4e:e9:ad:63:5f:9d:fe:84:74:ad:8d:0b:59:22:
                    29:10:fb:49:a2:ed:ed:75:3c:11:51:70:8d:cb:ee:
                    e6:95:b3:b6:8a:d4:9f:2f:2e:0b:f4:03:09:53:bd:
                    b8:d8:00:a2:9b:9e:8f:1b:8e:36:f3:43:f1:a9:c4:
                    74:cf:82:77:17:ed:00:35:04:6b:f6:92:f2:4e:62:
                    4c:a6:86:e5:0c:62:1b:7b:12:e1:3e:8e:a4:e2:fb:
                    ca:2c:36:76:27:6d:9c:24:9f:45:51:5c:44:ab:ce:
                    cd:4c:ba:e1:be:80:bb:ff:11:49:87:83:85:dd:2c:
                    0f:e8:5d:7a:3c:d4:7c:da:8e:72:c4:d4:6c:4f:3c:
                    6b:16:1a:e8:08:9f:da:fd:54:50:3e:69:65:2c:f2:
                    69:09:2b:d3:28:9a:18:d9:36:0d:f9:ad:5d:62:0e:
                    dd:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B1:BD:C3:20:50:A4:3E:12:9B:E6:19:4A:61:F5:8A:D8:A3:F1:A9
            X509v3 Authority Key Identifier:
                keyid:5C:29:F2:93:24:19:95:7E:47:C4:D2:77:E5:31:83:F7:0D:73:44:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/5C29F2932419957E47C4D277E53183F70D734498.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C29F2932419957E47C4D277E53183F70D734498.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/34352e3136332e3134382e302f32322d3232203d3e20323638353630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:1a:7f:d9:68:e6:ad:ff:08:e0:8c:b9:1f:61:9f:33:d7:f7:
         1d:93:8a:bc:c3:67:53:bf:ac:28:af:78:c1:fb:c2:96:9e:4f:
         ae:a8:6a:a0:47:f5:3a:f1:6d:aa:79:23:17:58:90:a7:83:b9:
         79:72:6c:54:ea:16:24:ab:93:a5:89:f6:a5:8e:9d:70:7b:6e:
         25:b6:12:8d:8d:45:91:13:55:56:29:a9:c7:d8:24:55:3a:85:
         30:72:9e:e2:9b:bb:26:ac:b9:93:d0:17:54:4b:f3:16:13:c8:
         b4:c3:91:9d:35:63:7e:66:34:e8:29:50:f4:24:ff:af:f4:f7:
         8b:43:14:f1:e2:55:47:db:25:35:80:5b:7c:a4:44:45:bc:fa:
         86:d0:00:69:e5:0a:b2:7c:e5:9e:dc:c4:7b:40:0e:17:75:72:
         a1:83:53:8c:78:63:30:8c:30:5d:95:15:d6:f0:f0:d9:d8:83:
         85:de:3b:7c:0d:c9:e8:4d:db:e7:9a:01:85:55:ac:df:08:ad:
         e1:f9:d0:96:e1:cb:55:7a:74:d3:bc:88:d8:44:90:a1:27:f7:
         f7:2a:bc:d3:74:b3:7d:41:25:3f:c9:3b:69:c6:93:8d:3c:aa:
         88:81:d6:29:eb:fb:c6:71:5b:6e:ff:ad:89:e1:c8:d1:70:3d:
         cb:1e:14:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:01:24 2026 by rpki-client