Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/34352e3136332e3134392e302f32342d3234203d3e20323638353630.roa
File:                     34352e3136332e3134392e302f32342d3234203d3e20323638353630.roa (raw, json)
Hash identifier:          hRh6Q8dmDuQYXgpWv+f4EnyLfp0JTgdgyZKNHMHwnlw=
Subject key identifier:   C1:68:56:7C:4E:80:F9:7E:01:54:48:D0:D8:CE:76:0B:8C:E6:D7:90
Certificate issuer:       /CN=5C29F2932419957E47C4D277E53183F70D734498
Certificate serial:       2E809691B228D08862574765FCA1C1304A8017B4
Authority key identifier: 5C:29:F2:93:24:19:95:7E:47:C4:D2:77:E5:31:83:F7:0D:73:44:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C29F2932419957E47C4D277E53183F70D734498.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/34352e3136332e3134392e302f32342d3234203d3e20323638353630.roa
Signing time:             Sat 09 May 2026 14:51:30 +0000
ROA not before:           Sat 09 May 2026 14:46:30 +0000
ROA not after:            Sat 08 May 2027 14:51:30 +0000
asID:                     268560
IP address blocks:        45.163.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/5C29F2932419957E47C4D277E53183F70D734498.crl
                          rsync://rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/5C29F2932419957E47C4D277E53183F70D734498.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C29F2932419957E47C4D277E53183F70D734498.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 10:05:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:80:96:91:b2:28:d0:88:62:57:47:65:fc:a1:c1:30:4a:80:17:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C29F2932419957E47C4D277E53183F70D734498
        Validity
            Not Before: May  9 14:46:30 2026 GMT
            Not After : May  8 14:51:30 2027 GMT
        Subject: CN=C168567C4E80F97E015448D0D8CE760B8CE6D790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:35:f6:94:7e:0e:b3:9a:dc:8a:f5:9c:45:c7:
                    39:f5:f7:57:01:c0:ee:52:92:27:fe:d4:ce:f3:74:
                    4b:6b:e6:4b:59:9c:c4:c8:1c:ed:12:cd:e8:13:6c:
                    3f:9b:54:03:62:69:78:e7:51:34:8a:80:87:c0:1c:
                    fe:c8:f4:0c:31:26:79:a5:33:1b:94:52:c6:ba:0b:
                    e8:55:e2:44:4e:55:56:cb:a8:29:4f:ad:21:00:d9:
                    fb:8b:0a:82:ad:59:cf:4f:69:f1:1f:13:40:f5:76:
                    96:1a:1e:70:44:20:c6:67:98:0b:84:27:5e:3d:9a:
                    87:a5:66:4a:a6:55:ae:4d:03:b8:0d:9c:1d:8c:6e:
                    35:bd:2f:39:86:ba:83:93:26:5f:4e:cb:63:b1:98:
                    a6:ac:d6:71:18:09:60:ff:8e:a2:b6:75:b1:c3:d7:
                    a6:9f:dd:7b:e2:f9:91:ea:ff:7a:40:2f:68:6e:a2:
                    54:72:98:b1:be:fa:cf:d8:66:0d:89:d6:17:81:f9:
                    b3:77:92:e8:15:31:6c:c0:98:2f:eb:df:91:12:79:
                    17:a7:76:b4:84:da:2a:d9:33:6d:ff:f7:b5:76:38:
                    86:2f:cf:2b:a4:0a:25:4b:a3:20:f1:19:e7:3e:ea:
                    5c:09:ee:a5:c7:7f:8d:ad:43:09:77:51:e3:7f:05:
                    df:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:68:56:7C:4E:80:F9:7E:01:54:48:D0:D8:CE:76:0B:8C:E6:D7:90
            X509v3 Authority Key Identifier:
                keyid:5C:29:F2:93:24:19:95:7E:47:C4:D2:77:E5:31:83:F7:0D:73:44:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/5C29F2932419957E47C4D277E53183F70D734498.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C29F2932419957E47C4D277E53183F70D734498.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/34352e3136332e3134392e302f32342d3234203d3e20323638353630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:6c:04:01:7d:d0:0d:60:24:24:1a:90:66:0a:ab:ea:91:ce:
         76:e9:c4:55:38:7f:6a:1f:9e:80:89:8d:68:09:6d:e5:38:19:
         ab:36:b8:68:91:3b:98:c3:ca:77:f7:96:62:8c:e2:d0:73:aa:
         94:fb:a8:e1:ea:32:04:98:74:a1:bd:30:7b:b6:cf:c1:09:1a:
         a7:9d:40:34:79:ec:85:ca:7b:9a:6b:17:7e:94:a2:3e:06:42:
         50:45:8f:51:3c:6b:7e:e3:bf:f3:2a:f3:c1:2c:64:21:4d:41:
         76:8c:e0:65:ef:e6:81:12:5c:74:cc:77:b0:cc:d2:09:c7:12:
         c2:f6:f9:b4:f5:4b:ae:15:ef:eb:54:47:71:4f:ad:bf:69:76:
         31:dc:8e:b8:3d:e8:37:fa:f9:5b:32:d9:66:cf:e2:a0:5b:0e:
         2b:5f:4a:80:9a:12:55:93:29:ff:cd:99:a6:1b:65:d9:d6:ab:
         3f:6d:be:e5:4b:03:47:f0:6f:fb:b2:90:fb:b8:3b:cf:d2:12:
         ce:04:08:95:3c:a0:fb:34:b6:da:3b:5e:d7:24:1f:a1:9e:7d:
         47:ae:86:d7:ab:b7:3e:57:b4:c9:6e:5e:87:2d:fd:22:6c:41:
         98:52:15:26:8b:1a:a3:5e:a5:af:96:2e:4b:59:23:b9:04:b4:
         3f:a1:ed:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:24:43 2026 by rpki-client