Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/34352e3233362e3235342e302f32342d3234203d3e20323638323532.roa
File:                     34352e3233362e3235342e302f32342d3234203d3e20323638323532.roa (raw, json)
Hash identifier:          ZmacUlpxsj5PMburFdPJmkiGlnelA6RREDAeTP5akUU=
Subject key identifier:   F1:23:B4:BF:07:B2:AF:A2:FE:A2:D3:24:9C:19:46:3D:AB:0D:52:89
Certificate issuer:       /CN=54395A545D0008C7F4CB034DD9D90CDC41D95AE4
Certificate serial:       53A5A696E3C9818F1865E99BD7743F538AEB51E0
Authority key identifier: 54:39:5A:54:5D:00:08:C7:F4:CB:03:4D:D9:D9:0C:DC:41:D9:5A:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/34352e3233362e3235342e302f32342d3234203d3e20323638323532.roa
Signing time:             Mon 04 May 2026 18:45:11 +0000
ROA not before:           Mon 04 May 2026 18:40:11 +0000
ROA not after:            Mon 03 May 2027 18:45:11 +0000
asID:                     268252
IP address blocks:        45.236.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.crl
                          rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 15:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a5:a6:96:e3:c9:81:8f:18:65:e9:9b:d7:74:3f:53:8a:eb:51:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54395A545D0008C7F4CB034DD9D90CDC41D95AE4
        Validity
            Not Before: May  4 18:40:11 2026 GMT
            Not After : May  3 18:45:11 2027 GMT
        Subject: CN=F123B4BF07B2AFA2FEA2D3249C19463DAB0D5289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:92:26:f7:74:80:93:a5:ee:da:b1:36:6d:15:
                    37:17:b5:8e:c3:de:e7:ee:54:ae:30:3d:ee:6e:6b:
                    22:d9:bd:83:1b:1c:5f:9a:c3:c7:92:46:a7:f6:81:
                    6c:82:3a:ea:94:3f:91:35:29:f9:d1:b2:4b:bc:ea:
                    47:3d:03:c3:84:dc:14:1b:dc:3b:14:c7:8c:23:30:
                    4c:bc:34:52:42:0d:a9:49:f3:f3:e4:4f:07:4f:c5:
                    9b:ab:fc:78:c1:c5:94:39:0b:b8:50:df:92:e7:e1:
                    9b:95:5b:a2:be:6e:0e:78:75:bd:f7:cd:af:60:7a:
                    ff:35:c6:fe:e9:50:f1:cc:d5:23:89:be:79:96:d1:
                    1c:2a:33:19:5b:3b:ec:66:97:ec:40:2d:17:0d:be:
                    e9:1a:90:d7:82:bf:6b:f0:66:7d:1a:de:61:bf:20:
                    fe:46:21:9b:b8:bb:79:ab:8b:61:7d:59:f5:07:96:
                    81:66:11:53:5f:1a:71:46:16:74:e9:3c:05:e1:5c:
                    3a:a4:7c:24:00:c2:8c:93:57:43:fb:f1:22:7a:ff:
                    4a:49:33:99:82:8a:ba:18:89:e7:b2:dd:fe:72:b1:
                    81:12:b1:40:10:3c:9a:43:63:eb:3a:ac:e6:93:ff:
                    a5:ed:a0:46:8a:59:47:86:6d:e1:cb:fb:70:b4:50:
                    b2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:23:B4:BF:07:B2:AF:A2:FE:A2:D3:24:9C:19:46:3D:AB:0D:52:89
            X509v3 Authority Key Identifier:
                keyid:54:39:5A:54:5D:00:08:C7:F4:CB:03:4D:D9:D9:0C:DC:41:D9:5A:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/34352e3233362e3235342e302f32342d3234203d3e20323638323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:d0:96:6c:39:d4:f4:a6:be:cf:a7:ee:68:94:dd:4c:7e:87:
         8d:98:f0:35:92:f9:6f:02:ff:4c:a0:ec:9f:2d:db:4d:c5:8a:
         13:f3:12:b6:50:8d:ac:a8:3a:49:c8:57:cb:b1:ae:3b:9d:13:
         be:a1:56:da:70:86:4f:72:86:13:76:fd:72:93:5c:b2:a9:75:
         8c:88:81:45:c4:58:d2:46:01:e0:ad:0f:94:14:4c:d8:e0:f0:
         25:7c:12:3d:be:cf:11:ba:91:6d:ae:05:a6:d0:a4:97:04:8f:
         19:58:00:dd:a2:1e:e2:bb:e3:b3:52:86:a7:ea:b5:df:6a:6b:
         0c:87:11:aa:2a:ec:45:04:30:df:1c:88:7e:bb:a8:f6:f0:4d:
         e0:64:22:1d:c6:8d:8a:33:4e:97:0c:9b:89:87:2b:98:1b:73:
         21:c0:76:3c:a9:7c:85:c0:08:00:e6:82:95:61:dc:5a:ee:af:
         30:ac:0c:e4:31:4f:da:29:0c:94:4a:22:7a:55:91:7c:e2:22:
         52:37:93:7f:4b:a1:23:f6:30:25:40:52:14:f8:da:87:80:47:
         3e:90:27:8e:e6:4e:ac:1b:b8:51:2d:5b:e7:b2:85:a8:47:19:
         84:c2:2a:38:80:f0:c6:50:8e:80:76:e8:d3:c8:82:93:27:48:
         6c:a6:bc:c9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUU6WmluPJgY8YZemb13Q/U4rrUeAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQzOTVBNTQ1RDAwMDhDN0Y0Q0IwMzRERDlEOTBDREM0
MUQ5NUFFNDAeFw0yNjA1MDQxODQwMTFaFw0yNzA1MDMxODQ1MTFaMDMxMTAvBgNV
BAMTKEYxMjNCNEJGMDdCMkFGQTJGRUEyRDMyNDlDMTk0NjNEQUIwRDUyODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1kib3dICTpe7asTZtFTcXtY7D
3ufuVK4wPe5uayLZvYMbHF+aw8eSRqf2gWyCOuqUP5E1KfnRsku86kc9A8OE3BQb
3DsUx4wjMEy8NFJCDalJ8/PkTwdPxZur/HjBxZQ5C7hQ35Ln4ZuVW6K+bg54db33
za9gev81xv7pUPHM1SOJvnmW0RwqMxlbO+xml+xALRcNvukakNeCv2vwZn0a3mG/
IP5GIZu4u3mri2F9WfUHloFmEVNfGnFGFnTpPAXhXDqkfCQAwoyTV0P78SJ6/0pJ
M5mCiroYieey3f5ysYESsUAQPJpDY+s6rOaT/6XtoEaKWUeGbeHL+3C0ULI3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU8SO0vweyr6L+otMknBlGPasNUokwHwYDVR0j
BBgwFoAUVDlaVF0ACMf0ywNN2dkM3EHZWuQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1BDVlMzdkVmWHVxRkNSNmEyR0h6WVNwOVVYWllUWUdGSjhVTmJjdkxU
SnYvMC81NDM5NUE1NDVEMDAwOEM3RjRDQjAzNEREOUQ5MENEQzQxRDk1QUU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU0Mzk1QTU0NUQwMDA4QzdG
NENCMDM0REQ5RDkwQ0RDNDFEOTVBRTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dQQ1ZTM3ZFZlh1cUZDUjZhMkdIellTcDlVWFpZVFlHRko4VU5iY3ZMVEp2LzAv
MzQzNTJlMzIzMzM2MmUzMjM1MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMjM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt7P4wDQYJKoZIhvcNAQELBQADggEBAHzQlmw5
1PSmvs+n7miU3Ux+h42Y8DWS+W8C/0yg7J8t203FihPzErZQjayoOknIV8uxrjud
E76hVtpwhk9yhhN2/XKTXLKpdYyIgUXEWNJGAeCtD5QUTNjg8CV8Ej2+zxG6kW2u
BabQpJcEjxlYAN2iHuK747NShqfqtd9qawyHEaoq7EUEMN8ciH67qPbwTeBkIh3G
jYozTpcMm4mHK5gbcyHAdjypfIXACADmgpVh3FrurzCsDOQxT9opDJRKInpVkXzi
IlI3k39LoSP2MCVAUhT42oeARz6QJ47mTqwbuFEtW+eyhahHGYTCKjiA8MZQjoB2
6NPIgpMnSGymvMk=
-----END CERTIFICATE-----
Generated at Wed May 13 15:48:37 2026 by rpki-client