Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233392e302f32342d3234203d3e20323639353935.roa
File:                     34352e3138382e3233392e302f32342d3234203d3e20323639353935.roa (raw, json)
Hash identifier:          sq0vv6FTvAbw9+VhU0T+vLuLFOgHj9v7k5VHaA0AZiE=
Subject key identifier:   AB:3B:0B:93:A5:8D:52:F0:F3:AA:0D:EC:73:1B:85:5E:D2:A1:8A:2A
Certificate issuer:       /CN=7D39C9ADF62DFB388A21593379ED3126ED53BFCB
Certificate serial:       785F58A6A5742145AA5EA5254942CB1C9670245B
Authority key identifier: 7D:39:C9:AD:F6:2D:FB:38:8A:21:59:33:79:ED:31:26:ED:53:BF:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D39C9ADF62DFB388A21593379ED3126ED53BFCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233392e302f32342d3234203d3e20323639353935.roa
Signing time:             Fri 17 Apr 2026 18:21:52 +0000
ROA not before:           Fri 17 Apr 2026 18:16:52 +0000
ROA not after:            Fri 16 Apr 2027 18:21:52 +0000
asID:                     269595
IP address blocks:        45.188.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/7D39C9ADF62DFB388A21593379ED3126ED53BFCB.crl
                          rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/7D39C9ADF62DFB388A21593379ED3126ED53BFCB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D39C9ADF62DFB388A21593379ED3126ED53BFCB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 20:35:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:5f:58:a6:a5:74:21:45:aa:5e:a5:25:49:42:cb:1c:96:70:24:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D39C9ADF62DFB388A21593379ED3126ED53BFCB
        Validity
            Not Before: Apr 17 18:16:52 2026 GMT
            Not After : Apr 16 18:21:52 2027 GMT
        Subject: CN=AB3B0B93A58D52F0F3AA0DEC731B855ED2A18A2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:63:c0:a3:9c:1b:a3:96:f8:48:1e:2a:e3:0a:
                    ef:94:6b:c0:93:6e:3d:dc:96:9b:a5:d0:a1:1b:da:
                    f9:64:95:d8:3f:ec:66:5b:5c:5f:17:02:21:f1:49:
                    02:72:c9:11:50:79:3c:a2:8c:36:17:1a:7a:13:e5:
                    99:e9:18:e2:9e:36:0e:cb:4f:3f:0d:21:c4:d6:8d:
                    0a:06:68:39:e8:9e:6f:66:d0:bd:ed:92:85:a8:cc:
                    5f:07:9c:aa:18:3c:58:45:16:d9:87:35:d4:b8:a1:
                    9b:52:a3:b7:a9:58:52:b1:b2:d5:91:f8:61:d2:59:
                    f1:6c:b3:a2:d1:5a:a9:e3:57:9b:29:1f:4f:c5:3c:
                    c4:07:1d:e6:f0:58:ba:f3:f5:e7:9f:21:77:31:ae:
                    58:a6:77:ad:66:62:3d:cb:a8:06:ff:6b:09:5c:5e:
                    70:bf:8f:d5:02:4b:3d:97:86:e4:f9:6c:04:0b:c6:
                    99:3c:b4:fa:d8:2e:ca:e7:ae:f3:5b:92:69:f6:1a:
                    c4:b1:12:d1:50:bd:f9:06:30:6d:39:f5:4b:9b:2d:
                    01:99:c7:c5:13:ca:27:e1:db:43:f9:84:e3:17:d3:
                    03:db:8c:c8:0c:ec:1b:8a:f2:6b:10:ff:8e:20:5c:
                    1b:ab:9d:9f:58:3b:d5:0b:4b:ca:37:25:9e:a5:2c:
                    85:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:3B:0B:93:A5:8D:52:F0:F3:AA:0D:EC:73:1B:85:5E:D2:A1:8A:2A
            X509v3 Authority Key Identifier:
                keyid:7D:39:C9:AD:F6:2D:FB:38:8A:21:59:33:79:ED:31:26:ED:53:BF:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/7D39C9ADF62DFB388A21593379ED3126ED53BFCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D39C9ADF62DFB388A21593379ED3126ED53BFCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233392e302f32342d3234203d3e20323639353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:62:c5:46:41:49:aa:80:bd:97:c0:cc:d7:19:d4:d0:23:37:
         02:06:ad:41:0d:02:ae:69:d2:eb:08:f7:b6:48:3e:53:a3:56:
         8b:52:35:17:26:c1:04:89:04:e3:07:97:05:a7:30:72:28:e1:
         9d:04:60:d5:c8:c4:0b:34:21:6c:38:90:26:e3:bc:ae:70:9f:
         e1:ae:0a:58:7e:30:d4:9b:30:52:46:75:87:f1:75:33:14:9a:
         a7:e7:2e:57:12:8c:7b:58:b7:a6:9a:3a:f8:fa:84:0c:eb:40:
         5a:9b:09:2e:fc:c1:5d:57:76:68:99:36:3c:e9:f5:7e:8f:c2:
         97:b0:f3:87:2e:aa:b8:1e:f1:36:31:3a:17:b9:39:d2:a5:ae:
         02:d1:7e:f5:fd:fe:aa:97:3d:ca:9e:f8:4a:3b:6b:19:c6:ef:
         71:38:ad:2f:86:9f:c0:fa:4b:97:a5:05:ba:61:4d:04:9e:96:
         53:ed:df:a8:ea:85:f5:1d:45:d8:cb:ad:da:99:b7:c6:3a:c7:
         66:59:6e:54:7e:19:a7:4c:81:14:fb:54:55:5b:4d:d9:f6:37:
         1d:4d:ba:56:da:c1:4f:7c:86:6e:bb:1f:e6:c3:53:f2:9c:4a:
         d0:9c:fa:47:b6:e0:3b:51:cb:8c:4a:25:14:1f:86:46:3e:c0:
         08:c1:25:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:16:46 2026 by rpki-client