Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/34352e3136342e3135322e302f32322d3234203d3e20323731373031.roa
File:                     34352e3136342e3135322e302f32322d3234203d3e20323731373031.roa (raw, json)
Hash identifier:          LrWVMBJq9p/vX5v3K0jQQoR5vawZ/EHMRQMRvRTjR1M=
Subject key identifier:   D1:12:F7:13:DF:9D:71:36:F8:86:10:AD:A8:4A:04:05:F2:BB:06:72
Certificate issuer:       /CN=05563772FA5F7F02E46B10D42952096452B02F7E
Certificate serial:       32C70B6A4ED8894620A11F8E4601654BE46620D2
Authority key identifier: 05:56:37:72:FA:5F:7F:02:E4:6B:10:D4:29:52:09:64:52:B0:2F:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05563772FA5F7F02E46B10D42952096452B02F7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/34352e3136342e3135322e302f32322d3234203d3e20323731373031.roa
Signing time:             Thu 04 Jun 2026 18:00:43 +0000
ROA not before:           Thu 04 Jun 2026 17:55:43 +0000
ROA not after:            Thu 03 Jun 2027 18:00:43 +0000
asID:                     271701
IP address blocks:        45.164.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/05563772FA5F7F02E46B10D42952096452B02F7E.crl
                          rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/05563772FA5F7F02E46B10D42952096452B02F7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05563772FA5F7F02E46B10D42952096452B02F7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 19:15:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:c7:0b:6a:4e:d8:89:46:20:a1:1f:8e:46:01:65:4b:e4:66:20:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05563772FA5F7F02E46B10D42952096452B02F7E
        Validity
            Not Before: Jun  4 17:55:43 2026 GMT
            Not After : Jun  3 18:00:43 2027 GMT
        Subject: CN=D112F713DF9D7136F88610ADA84A0405F2BB0672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e6:55:47:f5:83:45:dc:e5:ef:5a:85:56:c5:
                    be:b9:59:bd:54:4e:5a:63:60:bd:ae:af:89:d6:b5:
                    94:ef:ef:70:c5:31:cc:de:ea:ad:bb:23:df:d0:ed:
                    c8:2b:ba:46:ef:df:e7:f5:92:7e:00:ec:1b:1c:17:
                    a2:24:0f:da:79:6b:d0:50:41:c2:37:23:94:13:71:
                    89:61:be:71:f0:3b:f2:05:96:39:e2:34:0b:0b:a1:
                    46:ac:6b:50:02:bb:57:0c:c7:0f:01:8f:6a:0f:ca:
                    c6:d5:a6:c7:3f:c6:f9:52:c7:30:8f:c2:63:fc:4d:
                    ff:77:f3:2d:35:9c:48:73:f3:fd:39:08:be:4d:c0:
                    1f:7d:a7:ec:d8:15:97:4b:00:fa:ac:9f:06:20:4f:
                    d9:6f:2d:4a:f3:94:ca:85:8f:aa:a5:65:cb:d9:5d:
                    90:21:fd:b9:5b:2c:55:39:49:eb:da:e0:92:40:5c:
                    03:65:21:45:a8:61:b2:6e:eb:6d:8e:7c:4b:33:36:
                    1f:54:1a:9e:77:2b:e0:29:98:e0:2b:cb:0b:fa:d7:
                    af:be:cc:97:d5:4b:9e:5a:7e:37:7a:dd:5b:fd:7e:
                    f1:67:b9:8c:6a:9c:1c:2f:fa:aa:1a:b7:d9:ff:ca:
                    69:9f:84:b6:c9:85:1b:5d:1c:26:3f:e7:54:69:fc:
                    31:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:12:F7:13:DF:9D:71:36:F8:86:10:AD:A8:4A:04:05:F2:BB:06:72
            X509v3 Authority Key Identifier:
                keyid:05:56:37:72:FA:5F:7F:02:E4:6B:10:D4:29:52:09:64:52:B0:2F:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/05563772FA5F7F02E46B10D42952096452B02F7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05563772FA5F7F02E46B10D42952096452B02F7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/34352e3136342e3135322e302f32322d3234203d3e20323731373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:01:39:08:3c:2c:6b:f0:b8:8f:89:e1:7c:58:6f:fa:8f:ce:
         68:3e:a9:f2:db:e6:07:f9:81:46:61:09:b2:19:db:17:81:1f:
         27:96:67:fe:2f:17:52:ec:df:09:7c:34:21:e8:6b:cb:f4:be:
         13:7a:08:18:fa:da:42:96:78:cd:9e:cc:24:82:d5:aa:80:f1:
         8e:eb:6d:d8:03:ac:6e:19:97:f9:fd:16:24:27:3a:98:0a:75:
         21:d2:5d:77:e7:a7:77:c8:79:ec:76:94:16:2b:f0:78:93:0d:
         1c:c2:cd:b5:28:3d:ba:59:4d:09:ab:71:30:33:bd:81:4f:83:
         d6:0b:07:6c:6f:bd:d6:09:cd:bc:1a:3d:84:9e:7e:55:e8:3b:
         ce:22:a3:9a:b6:24:21:21:01:d2:f2:01:7d:51:7c:e3:05:68:
         86:ea:f7:e8:07:e6:c2:a0:c9:b0:3a:6f:10:1c:c5:a9:4e:1d:
         45:08:3a:9b:2a:c1:22:f3:68:ea:7a:d8:62:4e:8d:ca:49:03:
         81:9c:6e:34:38:59:66:28:01:34:9e:ff:e7:4c:fb:c0:a4:ad:
         8d:8e:b1:77:3c:73:59:ea:2a:c1:58:0f:7f:cf:52:c2:63:d8:
         ef:a8:df:5f:9f:d9:6d:66:90:34:84:7e:a9:39:48:14:16:63:
         1a:f9:96:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:56:23 2026 by rpki-client