Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233372e302f32342d3234203d3e20323639353935.roa
File:                     34352e3138382e3233372e302f32342d3234203d3e20323639353935.roa (raw, json)
Hash identifier:          khIbExrqAr3zC3LubV8b3D7mPj5nm/buJzKU4z2mzZQ=
Subject key identifier:   43:E6:78:58:A2:2A:A4:E5:74:15:62:49:AA:80:A2:6B:61:E2:28:51
Certificate issuer:       /CN=7D39C9ADF62DFB388A21593379ED3126ED53BFCB
Certificate serial:       3BCDC2DF2592CA4173CAA060ED20CB2532E19596
Authority key identifier: 7D:39:C9:AD:F6:2D:FB:38:8A:21:59:33:79:ED:31:26:ED:53:BF:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D39C9ADF62DFB388A21593379ED3126ED53BFCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233372e302f32342d3234203d3e20323639353935.roa
Signing time:             Fri 17 Apr 2026 18:21:51 +0000
ROA not before:           Fri 17 Apr 2026 18:16:51 +0000
ROA not after:            Fri 16 Apr 2027 18:21:51 +0000
asID:                     269595
IP address blocks:        45.188.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/7D39C9ADF62DFB388A21593379ED3126ED53BFCB.crl
                          rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/7D39C9ADF62DFB388A21593379ED3126ED53BFCB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D39C9ADF62DFB388A21593379ED3126ED53BFCB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 20:35:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:cd:c2:df:25:92:ca:41:73:ca:a0:60:ed:20:cb:25:32:e1:95:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D39C9ADF62DFB388A21593379ED3126ED53BFCB
        Validity
            Not Before: Apr 17 18:16:51 2026 GMT
            Not After : Apr 16 18:21:51 2027 GMT
        Subject: CN=43E67858A22AA4E574156249AA80A26B61E22851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b1:f9:86:1c:1c:5b:4e:03:b4:1b:c8:b4:e0:
                    ac:0a:1b:d1:83:c4:2d:9b:2a:a2:39:12:f6:0d:41:
                    89:68:59:0d:a5:a4:05:8f:f6:51:b7:af:0b:65:f8:
                    c2:be:b2:7d:52:49:80:a0:18:18:ab:1d:da:1e:ca:
                    00:b1:28:4e:15:d9:ea:e0:c9:be:9e:be:00:ab:6b:
                    5a:81:88:02:87:89:87:61:85:ee:b5:dc:85:2b:4b:
                    47:ba:2d:61:4f:bb:50:66:2b:dc:77:08:bf:85:a8:
                    ec:fa:3d:22:ff:84:4d:4a:2e:70:1f:dd:15:ae:3f:
                    a7:00:5d:2a:9d:0e:4a:c5:49:d2:05:9d:aa:8c:89:
                    26:14:8d:b0:04:08:31:ae:0e:5f:b0:fb:dd:0e:af:
                    fc:60:70:2d:90:85:87:a9:e4:68:5e:b7:70:04:58:
                    6e:85:55:de:91:7e:7d:e9:b6:54:d5:a8:46:63:cc:
                    5b:fa:4b:cf:5f:6c:4f:e8:50:c1:2f:e4:b4:97:85:
                    99:9c:c9:47:bf:26:4f:8b:c5:45:7b:24:65:6a:9e:
                    fd:3d:10:31:8c:b5:ba:f2:87:0e:03:45:e9:57:09:
                    51:6f:f7:c9:96:39:d8:2d:e4:d6:8c:aa:53:c6:52:
                    eb:15:53:db:18:da:f4:8e:de:4c:c1:1e:c2:2a:69:
                    b9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E6:78:58:A2:2A:A4:E5:74:15:62:49:AA:80:A2:6B:61:E2:28:51
            X509v3 Authority Key Identifier:
                keyid:7D:39:C9:AD:F6:2D:FB:38:8A:21:59:33:79:ED:31:26:ED:53:BF:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/7D39C9ADF62DFB388A21593379ED3126ED53BFCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D39C9ADF62DFB388A21593379ED3126ED53BFCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233372e302f32342d3234203d3e20323639353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:51:d8:ed:19:4c:43:62:fd:69:32:d0:46:d8:59:21:97:3c:
         4b:8b:ae:4a:79:c6:a4:4e:5c:e2:c2:ee:3a:61:26:ab:0a:02:
         14:1b:e4:e2:61:b6:26:fe:4c:9c:f3:1e:86:be:b8:5c:ba:c6:
         e6:9c:66:93:eb:7a:f8:fd:9c:c2:86:90:3d:cb:78:24:d4:e6:
         5d:7a:e0:f5:66:82:43:11:cf:5d:1b:8b:35:e0:6a:d7:3c:1b:
         79:33:8f:4e:9b:64:df:78:4e:73:83:17:e5:1d:37:e4:b1:da:
         e7:8c:6a:62:f8:c2:81:ec:49:44:a8:2e:fb:f2:d2:8c:5b:cb:
         a8:67:79:90:a7:d3:05:96:32:6a:69:a6:f2:b5:14:24:aa:c7:
         fd:e1:79:55:a6:7a:cd:f0:0b:61:a7:30:66:48:f7:64:18:78:
         c9:5c:9f:9c:53:ac:7e:34:25:82:84:fc:d1:bb:fb:fe:98:b2:
         b3:ed:88:09:6d:31:5f:9c:0e:bf:55:35:e9:57:cb:b3:64:53:
         ca:35:4b:5f:e2:b6:6e:4e:4b:c6:91:1b:d2:70:fc:64:f3:bd:
         09:77:e8:8d:71:2e:03:0c:ed:e7:37:8e:55:3b:66:25:f1:73:
         fd:f0:a7:62:63:6f:b0:9c:0e:b6:fd:64:b1:29:c0:f9:ca:6c:
         f2:74:f7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:16:46 2026 by rpki-client