Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/34352e3136342e3230322e302f32342d3234203d3e20323732313734.roa
File:                     34352e3136342e3230322e302f32342d3234203d3e20323732313734.roa (raw, json)
Hash identifier:          6wobSFotnQIZ77UdOKWNIPz+ZX4IBvzvS56XFSbU4AE=
Subject key identifier:   36:CA:84:F7:4F:3C:E0:B9:B5:FE:04:89:C6:9E:9C:B2:F5:EA:BD:9A
Certificate issuer:       /CN=3757F5C9C1F0D2D4346EC87FDF0C16E89C9E8C66
Certificate serial:       4D8F575C86467D0BF1AAA32EEA47A6A9839A0E4A
Authority key identifier: 37:57:F5:C9:C1:F0:D2:D4:34:6E:C8:7F:DF:0C:16:E8:9C:9E:8C:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3757F5C9C1F0D2D4346EC87FDF0C16E89C9E8C66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/34352e3136342e3230322e302f32342d3234203d3e20323732313734.roa
Signing time:             Sat 06 Jun 2026 02:11:09 +0000
ROA not before:           Sat 06 Jun 2026 02:06:09 +0000
ROA not after:            Sat 05 Jun 2027 02:11:09 +0000
asID:                     272174
IP address blocks:        45.164.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/3757F5C9C1F0D2D4346EC87FDF0C16E89C9E8C66.crl
                          rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/3757F5C9C1F0D2D4346EC87FDF0C16E89C9E8C66.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3757F5C9C1F0D2D4346EC87FDF0C16E89C9E8C66.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 14:12:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:8f:57:5c:86:46:7d:0b:f1:aa:a3:2e:ea:47:a6:a9:83:9a:0e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3757F5C9C1F0D2D4346EC87FDF0C16E89C9E8C66
        Validity
            Not Before: Jun  6 02:06:09 2026 GMT
            Not After : Jun  5 02:11:09 2027 GMT
        Subject: CN=36CA84F74F3CE0B9B5FE0489C69E9CB2F5EABD9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:82:26:71:ab:8f:db:70:74:19:1e:67:95:27:
                    02:55:06:f2:3c:00:b2:b8:b4:6d:c9:6e:7a:28:6e:
                    a9:11:92:4b:70:a8:01:93:5b:ac:28:65:57:d3:54:
                    ed:e7:15:eb:88:9f:f1:a7:9a:84:38:d6:9c:a8:fc:
                    6d:03:63:ac:37:16:af:32:01:1c:f1:8f:3d:57:e1:
                    40:98:9b:ef:2f:9e:14:53:6c:54:d2:b8:1b:fb:27:
                    35:ca:44:9b:4e:84:d2:14:5a:84:bb:44:7e:5b:66:
                    65:e1:01:4b:89:a3:62:b1:8c:da:8f:c9:95:1a:5a:
                    34:14:c6:b1:cc:ab:07:a3:c5:dd:b3:67:14:76:83:
                    b3:fa:34:7a:45:9d:67:ca:b7:d5:00:8a:a2:f6:5c:
                    d5:07:04:e2:f7:58:7e:7c:10:39:c7:80:47:b0:75:
                    9b:55:90:96:f9:ea:82:8f:4f:52:78:ad:77:dc:fb:
                    b3:67:b3:90:de:95:bc:e5:02:56:d8:f3:f2:d2:bc:
                    47:87:fe:d6:6e:4f:aa:1e:d5:f2:45:be:60:43:84:
                    e5:ff:58:d7:26:76:73:45:df:50:e1:59:13:f9:a4:
                    51:d0:c0:d5:92:80:63:6c:90:b9:cc:fb:14:6e:32:
                    8f:5a:90:a8:f3:58:47:33:51:c6:d7:dc:47:93:26:
                    1d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CA:84:F7:4F:3C:E0:B9:B5:FE:04:89:C6:9E:9C:B2:F5:EA:BD:9A
            X509v3 Authority Key Identifier:
                keyid:37:57:F5:C9:C1:F0:D2:D4:34:6E:C8:7F:DF:0C:16:E8:9C:9E:8C:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/3757F5C9C1F0D2D4346EC87FDF0C16E89C9E8C66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3757F5C9C1F0D2D4346EC87FDF0C16E89C9E8C66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/34352e3136342e3230322e302f32342d3234203d3e20323732313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:4f:71:1e:59:bd:61:e5:c8:fd:d7:6d:ea:ca:c5:3f:c3:00:
         41:0a:a0:8e:9f:6b:b8:b7:e5:8f:72:c1:99:41:12:67:b9:6f:
         f4:b7:c7:68:48:8f:3c:e2:b7:2a:d8:8d:8f:6a:4e:cb:fc:f3:
         a9:36:c5:74:4a:9c:1a:7f:7a:1e:af:aa:64:c2:0b:20:aa:a1:
         a8:f3:73:85:d1:54:7e:e9:be:61:c9:c3:37:4d:ec:73:51:39:
         94:af:b0:97:ee:8d:24:f2:e7:b3:fb:a5:a9:14:78:03:dd:e5:
         79:55:29:a5:a6:76:55:d8:a7:35:65:51:f0:cd:b1:ac:3b:c0:
         e2:de:8a:67:a0:d8:7a:03:35:74:06:c0:56:1d:a4:e8:26:3d:
         2a:77:51:9b:3c:bd:7d:cb:69:11:c0:ce:96:39:09:57:ce:f9:
         0f:96:d2:15:99:2b:a8:9a:c5:4e:32:24:3b:9f:6a:b1:7f:5b:
         1a:16:4b:9f:82:ed:76:ee:08:ac:75:2b:10:b7:1e:ce:5b:26:
         ad:44:3e:70:c3:a7:63:a6:d2:17:7b:30:18:ee:27:b5:99:e9:
         54:af:98:2e:e6:1a:08:7e:e3:39:66:10:e2:f6:d7:72:3a:a5:
         74:61:ad:96:1f:1d:f5:d6:15:26:b3:00:c9:69:91:2f:a0:7f:
         d4:60:d9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:48:38 2026 by rpki-client