Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/34352e3233362e3235342e302f32332d3233203d3e20323638323532.roa
File:                     34352e3233362e3235342e302f32332d3233203d3e20323638323532.roa (raw, json)
Hash identifier:          +NjPpPOTUWcaPd46eun4rmunjuHjWIoErAzcgbBFM0Q=
Subject key identifier:   C4:78:48:9F:91:57:CF:51:8A:FD:3B:53:F3:D1:CF:7E:CA:81:99:7A
Certificate issuer:       /CN=54395A545D0008C7F4CB034DD9D90CDC41D95AE4
Certificate serial:       167E4F6D1D77B68EACF85575E45F7E3E0A3CF528
Authority key identifier: 54:39:5A:54:5D:00:08:C7:F4:CB:03:4D:D9:D9:0C:DC:41:D9:5A:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/34352e3233362e3235342e302f32332d3233203d3e20323638323532.roa
Signing time:             Mon 04 May 2026 18:45:13 +0000
ROA not before:           Mon 04 May 2026 18:40:13 +0000
ROA not after:            Mon 03 May 2027 18:45:13 +0000
asID:                     268252
IP address blocks:        45.236.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.crl
                          rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 15:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:7e:4f:6d:1d:77:b6:8e:ac:f8:55:75:e4:5f:7e:3e:0a:3c:f5:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54395A545D0008C7F4CB034DD9D90CDC41D95AE4
        Validity
            Not Before: May  4 18:40:13 2026 GMT
            Not After : May  3 18:45:13 2027 GMT
        Subject: CN=C478489F9157CF518AFD3B53F3D1CF7ECA81997A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0e:bc:ed:71:3b:54:18:70:89:da:80:11:a0:
                    38:eb:70:7c:d5:c4:bf:11:8b:6f:27:84:e7:80:e2:
                    96:57:71:02:33:0b:b1:62:f7:c8:93:31:86:ee:e4:
                    6e:91:cb:fe:f5:9c:ff:62:ec:6c:5d:8d:e3:28:50:
                    08:73:29:7b:bf:5c:f2:d2:51:c4:40:93:8b:aa:3f:
                    a5:e2:b2:bb:23:18:59:05:78:5a:3d:9b:67:97:b3:
                    c7:20:5f:a8:ea:c5:5d:cb:1b:f9:41:15:aa:4d:42:
                    f4:e8:3e:3e:0c:8f:40:ef:09:18:1a:c1:d7:23:ae:
                    a1:f3:5d:18:53:e5:dc:f9:ee:5b:81:80:97:bc:f9:
                    0c:52:ff:e1:f1:f5:04:95:ee:3a:73:c2:3d:a2:8c:
                    e7:2d:34:1d:a7:00:16:4c:a8:c2:e9:1e:fc:17:c2:
                    29:fd:99:08:96:a1:89:3a:2e:61:96:57:d0:1e:ad:
                    a7:d0:30:da:1e:b9:54:a7:36:6b:a1:45:2c:7b:e6:
                    89:06:f4:2e:e8:d0:f4:6e:fe:c0:2d:92:41:6b:fb:
                    b0:06:6b:ef:2a:19:ff:4d:55:49:6c:5d:65:90:91:
                    ff:da:56:a2:e1:1b:4a:36:00:ca:f6:b6:63:6d:73:
                    06:be:65:ac:35:f9:ae:30:36:2c:3c:70:81:9d:f4:
                    f6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:78:48:9F:91:57:CF:51:8A:FD:3B:53:F3:D1:CF:7E:CA:81:99:7A
            X509v3 Authority Key Identifier:
                keyid:54:39:5A:54:5D:00:08:C7:F4:CB:03:4D:D9:D9:0C:DC:41:D9:5A:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/34352e3233362e3235342e302f32332d3233203d3e20323638323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:89:1a:0a:f3:86:02:b7:40:b1:57:58:13:2d:1b:36:f6:45:
         3c:bd:28:07:4b:ed:7f:20:33:02:03:92:c5:bd:fa:db:71:85:
         c4:0b:df:bc:03:87:83:27:b6:bd:3f:6e:b9:22:8f:86:73:fb:
         68:91:33:f4:f5:20:6b:c1:d9:e9:e8:e8:89:42:a9:17:c7:b5:
         c0:89:3b:e7:ee:17:13:ba:13:e2:a5:e2:54:21:f3:2b:f1:49:
         a3:3c:37:67:4f:0a:f1:b8:d9:08:e7:8f:ef:fd:44:9a:db:1d:
         f4:1d:25:8b:ab:84:7f:80:17:68:c3:17:98:31:37:88:9f:b8:
         99:5f:e1:87:3c:0d:5e:5b:5f:16:a0:71:4a:19:64:4a:67:56:
         7b:92:b7:32:26:7d:1d:e0:0d:ff:74:11:58:26:b0:36:33:cd:
         ed:20:9a:d4:c7:a5:37:9b:47:e1:d0:6e:51:4b:9b:eb:9a:09:
         43:45:ae:c6:04:f5:92:2a:81:b3:e2:b3:20:c0:a9:af:c1:8e:
         e7:98:15:12:5a:c0:04:7c:e8:94:77:86:ec:d7:70:71:d6:99:
         b1:3d:68:85:91:5e:69:f2:24:59:2d:d1:71:9a:9e:c4:cc:e5:
         26:36:de:73:24:0a:03:3d:fb:7d:a0:55:c1:85:f1:b2:b5:a6:
         7f:75:75:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:09:10 2026 by rpki-client