Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/34352e3136332e3134382e302f32332d3233203d3e20323638353630.roa
File:                     34352e3136332e3134382e302f32332d3233203d3e20323638353630.roa (raw, json)
Hash identifier:          VjhanR92xj6FK2CPdOOeBLSYWLVThY/djkqtMS7PmcA=
Subject key identifier:   70:C6:FF:E0:03:56:09:BB:86:39:AD:6F:F0:30:72:03:60:45:7F:41
Certificate issuer:       /CN=5C29F2932419957E47C4D277E53183F70D734498
Certificate serial:       2EBF65419C70374172B48086017CAC66C702F96B
Authority key identifier: 5C:29:F2:93:24:19:95:7E:47:C4:D2:77:E5:31:83:F7:0D:73:44:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C29F2932419957E47C4D277E53183F70D734498.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/34352e3136332e3134382e302f32332d3233203d3e20323638353630.roa
Signing time:             Sat 09 May 2026 14:49:52 +0000
ROA not before:           Sat 09 May 2026 14:44:52 +0000
ROA not after:            Sat 08 May 2027 14:49:52 +0000
asID:                     268560
IP address blocks:        45.163.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/5C29F2932419957E47C4D277E53183F70D734498.crl
                          rsync://rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/5C29F2932419957E47C4D277E53183F70D734498.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C29F2932419957E47C4D277E53183F70D734498.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 10:05:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:bf:65:41:9c:70:37:41:72:b4:80:86:01:7c:ac:66:c7:02:f9:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C29F2932419957E47C4D277E53183F70D734498
        Validity
            Not Before: May  9 14:44:52 2026 GMT
            Not After : May  8 14:49:52 2027 GMT
        Subject: CN=70C6FFE0035609BB8639AD6FF030720360457F41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:19:43:58:3b:db:b2:d8:45:7a:3c:d3:77:1e:
                    ae:ba:28:3b:52:47:b9:15:48:bf:56:e9:72:11:e5:
                    32:ce:2a:52:47:c2:d7:a2:c7:56:c2:0b:70:96:93:
                    46:a0:05:14:03:fc:2a:ca:4e:5b:c3:e7:0f:3f:9a:
                    b5:04:0d:09:29:57:ac:8b:41:37:c1:1e:0c:d2:bb:
                    c2:19:55:b6:09:a9:1b:4c:59:7c:95:c8:ad:2f:b1:
                    69:07:c4:0c:1c:88:3b:63:bb:e1:d7:19:dd:f9:02:
                    d7:38:42:1c:dc:34:c6:f4:f8:0d:50:13:92:9c:14:
                    70:df:30:68:6f:61:08:f0:7e:9d:06:3f:c3:06:a3:
                    97:2b:0a:ce:08:fb:fa:cc:21:dd:5c:2f:26:87:8a:
                    7d:48:6a:d2:b8:ea:02:2f:85:02:15:e7:89:2e:c4:
                    43:9e:f5:27:79:39:1f:b2:f0:14:9d:1c:d5:10:ab:
                    6a:38:c6:ec:5a:48:0b:b8:68:54:47:07:cf:52:fc:
                    46:88:bd:c6:04:c0:3a:e4:c5:55:2c:d8:76:48:ef:
                    94:0a:4d:cf:bd:df:35:13:bb:e2:fa:b7:76:ff:d0:
                    ef:68:0b:02:6b:50:70:04:4f:99:1a:4d:0f:10:0f:
                    e7:dc:f6:15:f6:48:31:07:c3:33:76:0e:b0:8e:ae:
                    ec:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C6:FF:E0:03:56:09:BB:86:39:AD:6F:F0:30:72:03:60:45:7F:41
            X509v3 Authority Key Identifier:
                keyid:5C:29:F2:93:24:19:95:7E:47:C4:D2:77:E5:31:83:F7:0D:73:44:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/5C29F2932419957E47C4D277E53183F70D734498.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C29F2932419957E47C4D277E53183F70D734498.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/34352e3136332e3134382e302f32332d3233203d3e20323638353630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:c4:af:5a:f8:09:14:82:4f:ad:b2:f1:2c:b4:15:c7:04:2f:
         b1:95:f6:cb:86:57:f6:e1:be:a9:c9:72:ec:db:f8:64:1d:b3:
         e1:07:3e:ad:2a:a4:55:8a:8f:59:c3:67:9a:31:04:e8:b4:94:
         c6:b8:15:f1:74:29:28:d6:01:76:b5:f8:5f:9b:dd:62:c6:3a:
         18:ef:85:4e:37:10:e7:a9:63:a0:4d:0b:d1:6d:77:79:1c:d9:
         94:56:14:2f:f0:ac:3a:e8:c6:17:66:37:07:9c:32:24:09:3c:
         d8:d4:ca:3d:47:2b:4f:99:90:88:a0:1b:c8:bf:c0:ad:80:28:
         e1:e7:5c:86:5c:dd:30:db:d6:08:88:04:55:90:21:d2:a8:55:
         ab:27:ab:4e:97:72:a4:0c:a2:7d:c3:92:42:00:10:b4:ba:36:
         95:c3:c6:db:b4:bd:cf:a9:49:a6:c9:1c:07:ed:b5:ce:89:e0:
         ee:82:cf:bd:42:20:26:bd:97:e1:ae:c7:4b:88:42:b7:0e:cf:
         50:90:43:96:cd:f9:61:65:09:fc:94:be:23:c5:05:77:fb:2c:
         73:84:d1:49:24:6d:3b:d8:82:c1:75:c0:be:26:1f:00:0d:06:
         dc:9d:c5:fc:11:4d:4e:ac:49:c0:2c:97:4a:a7:04:3c:b1:c7:
         f8:c0:f0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:30:45 2026 by rpki-client