Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/34352e3233392e3136362e302f32332d3332203d3e20323633393830.roa
File:                     34352e3233392e3136362e302f32332d3332203d3e20323633393830.roa (raw, json)
Hash identifier:          lXAcOwD2jlq8+wcL4tv9fV/+eugZ9Oivv6/3vLTYmfM=
Subject key identifier:   54:38:1C:FE:AB:5E:5C:C9:D5:50:92:66:9E:7C:FE:A6:7B:77:EC:68
Certificate issuer:       /CN=2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2
Certificate serial:       7C180383D797BC6546C3C785AD8A5CAC5C46386D
Authority key identifier: 2A:07:55:CD:A1:0D:BE:BB:A6:A8:24:11:2F:67:CD:AE:61:44:A1:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/34352e3233392e3136362e302f32332d3332203d3e20323633393830.roa
Signing time:             Mon 08 Jun 2026 19:12:56 +0000
ROA not before:           Mon 08 Jun 2026 19:07:56 +0000
ROA not after:            Mon 07 Jun 2027 19:12:56 +0000
asID:                     263980
IP address blocks:        45.239.166.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.crl
                          rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 16:23:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:18:03:83:d7:97:bc:65:46:c3:c7:85:ad:8a:5c:ac:5c:46:38:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2
        Validity
            Not Before: Jun  8 19:07:56 2026 GMT
            Not After : Jun  7 19:12:56 2027 GMT
        Subject: CN=54381CFEAB5E5CC9D55092669E7CFEA67B77EC68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:97:d9:08:c3:9d:d6:be:dc:01:3e:f6:6a:29:
                    df:4d:83:69:ac:d5:e5:4c:58:e8:9a:69:69:1d:f5:
                    3d:96:f1:10:a4:cc:72:40:8d:60:c8:42:ec:c1:8a:
                    29:21:e0:93:ef:d1:30:78:7b:5a:d4:d2:e3:84:b1:
                    5c:c2:38:13:80:f7:41:17:ef:e5:f2:5e:a0:26:c6:
                    8a:5b:0d:10:84:ff:d8:db:54:bf:2f:85:bd:66:46:
                    c2:df:42:ca:4f:25:68:04:f7:0c:b9:ad:fc:97:13:
                    3f:4e:d8:f1:72:ad:a5:cc:3f:8c:2c:6a:3d:fb:e8:
                    dd:8d:77:a6:22:72:70:51:88:01:6f:73:2a:d1:e8:
                    9d:44:79:28:e6:b9:11:6f:bc:42:65:49:59:88:52:
                    11:e4:e5:c7:8d:30:4e:7a:0f:e3:61:75:85:23:22:
                    2d:ea:01:dc:84:f7:05:e4:4f:09:37:2f:0b:f5:29:
                    8f:58:86:c8:c2:2e:19:98:5d:b6:12:c5:a1:ae:55:
                    2c:bb:6d:68:9e:d5:90:48:45:d9:19:c7:1a:bd:68:
                    91:dc:aa:e1:7d:06:8c:03:45:18:1c:1e:fb:35:9f:
                    57:ae:51:6e:7d:31:09:80:96:8b:9c:d5:aa:58:10:
                    55:ec:84:d4:81:dd:94:96:55:8e:a0:e7:82:e6:01:
                    80:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:38:1C:FE:AB:5E:5C:C9:D5:50:92:66:9E:7C:FE:A6:7B:77:EC:68
            X509v3 Authority Key Identifier:
                keyid:2A:07:55:CD:A1:0D:BE:BB:A6:A8:24:11:2F:67:CD:AE:61:44:A1:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/34352e3233392e3136362e302f32332d3332203d3e20323633393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:0e:d5:71:6d:3e:da:90:35:76:60:ea:5d:ec:1b:4f:8c:df:
         fe:a0:3b:56:35:ec:cd:a0:7f:79:76:50:81:9d:53:93:f2:74:
         e4:8f:e6:12:05:47:21:18:35:96:b7:09:34:ea:91:63:57:00:
         36:02:b6:6e:13:b2:2f:28:43:a3:10:40:0f:c3:67:a8:a7:12:
         ab:74:2c:25:e2:9d:31:fe:00:55:07:62:23:f1:f8:3e:28:b7:
         bd:34:9b:65:cb:18:34:50:f6:47:92:20:b6:01:cf:1c:be:86:
         68:a0:20:24:1a:54:65:df:b1:76:55:a6:d2:da:d7:bc:5b:6d:
         68:3b:ac:b6:2a:fe:3e:b2:7f:87:3e:b8:4e:88:47:57:ae:9a:
         f4:c4:48:e7:b8:8a:e5:f3:e0:d8:4e:2a:97:36:f4:89:45:a6:
         62:25:92:9e:f2:44:95:50:9a:ed:94:df:28:b6:52:07:53:cb:
         0e:48:66:1c:39:07:bf:f7:46:f5:47:b8:db:3b:59:0c:22:fc:
         6f:43:1c:9d:e7:60:c8:2d:83:ac:f8:a4:c5:3e:9c:cc:80:4c:
         db:ba:37:f8:ac:49:50:6a:72:45:de:0a:a9:3e:54:dd:76:6e:
         9f:e5:e5:2d:50:3a:a3:82:80:70:d7:90:7d:de:cd:5c:75:30:
         eb:40:29:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:08:02 2026 by rpki-client