Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/34352e3136342e3230332e302f32342d3234203d3e20323732313734.roa
File:                     34352e3136342e3230332e302f32342d3234203d3e20323732313734.roa (raw, json)
Hash identifier:          Sv/YjjDfTPyrqw0YizD+/eL3lnMTEScxHADrUR4FYaA=
Subject key identifier:   20:CE:51:EF:A0:E0:0A:B4:B6:5A:48:A4:FD:EE:52:24:2E:E2:70:EE
Certificate issuer:       /CN=3757F5C9C1F0D2D4346EC87FDF0C16E89C9E8C66
Certificate serial:       472BE50D82F2BC10EEE95DD67C5CFDC6B60B7419
Authority key identifier: 37:57:F5:C9:C1:F0:D2:D4:34:6E:C8:7F:DF:0C:16:E8:9C:9E:8C:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3757F5C9C1F0D2D4346EC87FDF0C16E89C9E8C66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/34352e3136342e3230332e302f32342d3234203d3e20323732313734.roa
Signing time:             Sat 06 Jun 2026 02:11:25 +0000
ROA not before:           Sat 06 Jun 2026 02:06:25 +0000
ROA not after:            Sat 05 Jun 2027 02:11:25 +0000
asID:                     272174
IP address blocks:        45.164.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/3757F5C9C1F0D2D4346EC87FDF0C16E89C9E8C66.crl
                          rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/3757F5C9C1F0D2D4346EC87FDF0C16E89C9E8C66.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3757F5C9C1F0D2D4346EC87FDF0C16E89C9E8C66.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 14:12:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:2b:e5:0d:82:f2:bc:10:ee:e9:5d:d6:7c:5c:fd:c6:b6:0b:74:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3757F5C9C1F0D2D4346EC87FDF0C16E89C9E8C66
        Validity
            Not Before: Jun  6 02:06:25 2026 GMT
            Not After : Jun  5 02:11:25 2027 GMT
        Subject: CN=20CE51EFA0E00AB4B65A48A4FDEE52242EE270EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5f:cd:1c:a5:86:d9:54:63:3e:62:09:b0:1b:
                    ff:7b:69:8f:6a:57:85:03:df:13:42:56:dd:83:20:
                    d0:bb:8b:c4:02:02:06:13:b5:e5:0a:22:01:92:7f:
                    30:9f:59:6a:32:9d:f5:b6:18:cc:eb:a4:0a:18:f0:
                    c6:d9:40:0a:c8:00:d0:e4:e9:1e:c7:89:c8:cc:e8:
                    14:54:b9:b7:8d:9a:1d:a2:7d:ed:c3:f1:a0:4e:d7:
                    72:a0:5c:92:5d:00:df:65:e9:f7:5e:e9:5c:34:35:
                    fe:d6:89:2f:2d:4f:f1:83:7b:fe:ec:6e:93:09:a5:
                    ad:46:e2:d6:60:d5:85:45:ed:8d:98:b4:06:01:31:
                    2e:0b:a6:c4:d3:11:79:aa:0a:03:8d:6f:d4:78:05:
                    a9:cc:e2:3b:ad:0b:4d:c4:e0:31:6d:87:43:58:78:
                    ed:5f:95:4a:37:f2:ea:d5:29:f8:6d:1a:85:2e:39:
                    ba:57:50:20:5d:ec:4d:e0:d2:90:be:c1:f8:a7:3f:
                    54:90:f4:ac:5e:26:26:04:7d:e0:fb:0e:70:fa:51:
                    25:05:8f:85:02:59:cc:40:18:79:87:35:6e:9f:5f:
                    10:cd:ab:b0:8b:e4:7b:df:59:98:be:fe:50:77:e1:
                    a6:99:9e:c5:92:32:a2:e5:4c:60:3b:3c:04:6f:fa:
                    18:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:CE:51:EF:A0:E0:0A:B4:B6:5A:48:A4:FD:EE:52:24:2E:E2:70:EE
            X509v3 Authority Key Identifier:
                keyid:37:57:F5:C9:C1:F0:D2:D4:34:6E:C8:7F:DF:0C:16:E8:9C:9E:8C:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/3757F5C9C1F0D2D4346EC87FDF0C16E89C9E8C66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3757F5C9C1F0D2D4346EC87FDF0C16E89C9E8C66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/34352e3136342e3230332e302f32342d3234203d3e20323732313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:8c:b4:ed:d6:30:06:6e:40:8e:94:0c:da:c8:88:21:2b:b8:
         4a:c0:5e:6c:3a:5e:80:b6:8b:4d:4a:c5:68:02:bb:88:ce:af:
         49:4c:a3:e1:c8:2f:87:4a:97:89:fe:8d:04:f2:31:a9:6d:cd:
         ee:91:15:a2:33:46:3f:96:8d:87:04:34:cf:86:d3:43:f0:90:
         b8:a4:dd:a0:17:8f:48:8f:df:41:7f:c7:05:0c:78:54:b4:de:
         5c:3e:81:5c:10:8c:f5:ee:e5:17:fb:3c:4c:1d:5d:15:28:90:
         96:90:92:04:fc:ee:a3:63:5e:7d:ed:56:0a:f9:df:1a:cc:d4:
         07:2c:9c:e8:48:b0:62:65:0b:a7:48:c9:cd:7c:af:ad:48:07:
         16:f0:e1:a0:59:88:ad:32:2e:1b:1d:73:14:7f:c6:b6:cd:2a:
         42:18:fe:40:de:ee:1f:ac:e8:77:96:cd:4c:a2:4b:e3:dc:2e:
         6a:0a:c0:ef:0a:04:01:b7:ec:22:22:13:80:de:6b:2c:63:d5:
         ba:cb:2a:3a:79:f0:cd:24:b2:f2:54:57:30:ed:2c:bf:38:b1:
         74:81:1b:63:27:28:62:fd:00:56:28:0a:12:74:38:e4:e3:24:
         ed:25:ef:12:5f:77:eb:09:c0:a6:f6:1d:72:c0:d5:51:d6:a1:
         43:2b:5a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:48:50 2026 by rpki-client