Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233362e302f32332d3233203d3e20323639353935.roa
File:                     34352e3138382e3233362e302f32332d3233203d3e20323639353935.roa (raw, json)
Hash identifier:          pqBw7iNQaZiMCC7fN8t2hIfA/M2eKoyD+rntidrJNv8=
Subject key identifier:   04:7D:BC:C8:00:D4:85:B9:92:8A:38:3E:02:1A:D6:0E:3D:E2:47:36
Certificate issuer:       /CN=7D39C9ADF62DFB388A21593379ED3126ED53BFCB
Certificate serial:       57C18104315A1DC423B320FDA8378F6284A2F3E9
Authority key identifier: 7D:39:C9:AD:F6:2D:FB:38:8A:21:59:33:79:ED:31:26:ED:53:BF:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D39C9ADF62DFB388A21593379ED3126ED53BFCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233362e302f32332d3233203d3e20323639353935.roa
Signing time:             Fri 17 Apr 2026 18:21:52 +0000
ROA not before:           Fri 17 Apr 2026 18:16:52 +0000
ROA not after:            Fri 16 Apr 2027 18:21:52 +0000
asID:                     269595
IP address blocks:        45.188.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/7D39C9ADF62DFB388A21593379ED3126ED53BFCB.crl
                          rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/7D39C9ADF62DFB388A21593379ED3126ED53BFCB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D39C9ADF62DFB388A21593379ED3126ED53BFCB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 20:35:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:c1:81:04:31:5a:1d:c4:23:b3:20:fd:a8:37:8f:62:84:a2:f3:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D39C9ADF62DFB388A21593379ED3126ED53BFCB
        Validity
            Not Before: Apr 17 18:16:52 2026 GMT
            Not After : Apr 16 18:21:52 2027 GMT
        Subject: CN=047DBCC800D485B9928A383E021AD60E3DE24736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c6:02:3c:4a:e1:49:56:c9:59:ee:52:0b:51:
                    c8:69:81:7d:21:29:2f:ff:70:1e:21:bf:fa:eb:e0:
                    27:9f:ab:ef:59:a0:2b:47:55:cb:bc:3f:92:be:d5:
                    01:16:00:76:b5:23:2f:39:86:93:f8:5b:cc:8f:c0:
                    18:aa:2f:c8:f9:ed:2e:b8:ea:46:61:33:44:32:ad:
                    e9:f1:95:d8:91:5d:74:bc:5c:72:11:eb:7e:f4:8e:
                    f1:51:20:03:ba:e6:3d:97:fc:7e:b0:91:cd:22:00:
                    93:57:f1:84:2a:4e:0b:fd:94:0f:0d:8e:e2:6e:48:
                    bd:56:e0:09:ee:a5:81:bc:20:a3:23:4e:17:7b:84:
                    29:1d:aa:7e:1d:6c:b7:4b:98:72:89:c4:c4:30:ac:
                    3f:b0:13:55:d7:c7:66:07:35:d1:c6:c1:e8:fb:1b:
                    5d:fa:10:bb:74:3c:72:89:39:96:7a:32:26:29:6c:
                    48:81:ae:99:f1:a4:40:50:93:75:89:3e:34:9b:1c:
                    d8:2d:d3:70:90:9e:e5:4a:82:71:fa:eb:ef:1a:75:
                    3f:44:d0:f2:dd:64:32:ac:f8:ed:13:16:9c:33:a9:
                    c2:50:69:0e:60:95:9a:42:a9:3f:0e:8b:a5:34:ed:
                    7a:92:96:e6:c1:f8:a8:91:39:a3:d1:72:16:7b:5b:
                    5a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7D:BC:C8:00:D4:85:B9:92:8A:38:3E:02:1A:D6:0E:3D:E2:47:36
            X509v3 Authority Key Identifier:
                keyid:7D:39:C9:AD:F6:2D:FB:38:8A:21:59:33:79:ED:31:26:ED:53:BF:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/7D39C9ADF62DFB388A21593379ED3126ED53BFCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D39C9ADF62DFB388A21593379ED3126ED53BFCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233362e302f32332d3233203d3e20323639353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:47:e4:fb:5f:d9:1a:0a:9e:00:5e:38:57:7c:3d:42:0d:53:
         86:2c:c0:e0:5b:8e:cf:10:1c:7a:dc:09:a4:04:cd:83:c1:ad:
         20:ae:46:3b:95:a1:00:14:59:92:d8:da:1a:8a:a0:ac:1a:e3:
         c5:9a:b6:87:bc:42:ff:fa:ba:e4:18:e8:68:dc:44:7d:92:b0:
         6a:66:be:a1:6a:58:2a:64:f7:f5:2a:99:93:68:28:75:18:83:
         d7:1c:37:bc:ab:82:96:8d:69:2f:9a:09:b9:43:bf:17:f6:d2:
         3f:4a:e4:21:ff:aa:40:bc:8b:f5:48:39:1a:6e:a1:dc:c5:1a:
         da:a8:d9:89:46:b2:fc:36:56:73:4e:01:20:67:e3:72:8f:27:
         c6:d3:0b:ec:1e:8c:9c:db:a9:f1:76:46:2d:3e:cd:fc:db:e7:
         6f:e3:b8:7c:b8:da:b7:f0:54:7c:9d:a8:83:6c:ef:51:50:d8:
         f8:47:b2:41:c3:ad:8f:e3:0a:b7:b4:e1:7c:66:29:2d:22:72:
         ca:3c:8d:73:82:81:9f:66:db:bd:9c:5f:fe:17:30:de:09:72:
         7a:45:eb:df:63:d2:de:a9:de:29:82:e9:37:a1:fe:97:17:69:
         7e:26:e9:d6:12:32:c2:5b:13:74:c9:2d:57:a0:b7:71:eb:61:
         25:e0:f2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:16:54 2026 by rpki-client