Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/34352e3136372e3132382e302f32322d3332203d3e20323634333938.roa
File:                     34352e3136372e3132382e302f32322d3332203d3e20323634333938.roa (raw, json)
Hash identifier:          03YrTIjJvD99p7J5w+jsOxbmwrD0xBAhpcS9VfmsL0g=
Subject key identifier:   BF:F8:1B:7F:7D:E1:A8:F2:AA:B4:68:E0:29:8D:88:1E:54:68:29:52
Certificate issuer:       /CN=9828F8A8915A72753136825A1F46FECBBF95B7E4
Certificate serial:       28F3B0D1B691F77FEBF18D141C3DA88080F318B7
Authority key identifier: 98:28:F8:A8:91:5A:72:75:31:36:82:5A:1F:46:FE:CB:BF:95:B7:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9828F8A8915A72753136825A1F46FECBBF95B7E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/34352e3136372e3132382e302f32322d3332203d3e20323634333938.roa
Signing time:             Wed 20 May 2026 19:43:03 +0000
ROA not before:           Wed 20 May 2026 19:38:03 +0000
ROA not after:            Wed 19 May 2027 19:43:03 +0000
asID:                     264398
IP address blocks:        45.167.128.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/9828F8A8915A72753136825A1F46FECBBF95B7E4.crl
                          rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/9828F8A8915A72753136825A1F46FECBBF95B7E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9828F8A8915A72753136825A1F46FECBBF95B7E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 00:36:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:f3:b0:d1:b6:91:f7:7f:eb:f1:8d:14:1c:3d:a8:80:80:f3:18:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9828F8A8915A72753136825A1F46FECBBF95B7E4
        Validity
            Not Before: May 20 19:38:03 2026 GMT
            Not After : May 19 19:43:03 2027 GMT
        Subject: CN=BFF81B7F7DE1A8F2AAB468E0298D881E54682952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a3:fa:80:ac:8b:84:5a:13:ea:e7:e9:a5:d0:
                    8d:64:8e:8a:28:34:5f:f4:76:11:c7:19:f3:13:ca:
                    15:8d:bd:44:09:c6:64:38:7a:42:6d:bf:15:38:e2:
                    22:0d:fb:43:c7:87:26:7f:94:d9:40:79:e7:bd:b7:
                    90:2c:27:a9:1c:c9:47:32:4a:14:aa:55:b7:2b:34:
                    bf:fe:d9:d7:98:d3:f3:ce:81:ef:61:03:88:68:3e:
                    bc:bb:00:ba:c9:a0:9d:f5:87:17:df:0f:6d:97:bc:
                    10:a5:0e:48:28:e7:88:71:15:db:8e:2e:ce:1e:ae:
                    15:9b:f5:3e:64:ae:e1:97:b2:4b:ac:d8:0d:23:47:
                    c5:25:47:31:dd:76:a5:30:3a:af:f4:ef:eb:56:2f:
                    76:c3:ed:28:ff:58:76:73:8e:ad:0c:2c:be:50:72:
                    96:c9:5d:39:d4:c6:a6:38:3e:01:9e:ef:2b:6e:6b:
                    1e:bc:07:a2:6a:20:56:d9:33:f6:75:dc:f5:8f:0a:
                    09:71:80:1f:1c:b4:48:72:eb:48:a2:ec:d0:c2:b8:
                    4a:ea:7b:8b:6c:f1:22:c9:b0:ed:23:5c:0a:38:5d:
                    0c:a4:7a:6d:53:77:2e:08:9c:e9:ab:3c:90:ba:77:
                    8b:54:4d:e1:91:6c:c2:b4:41:e8:6e:a2:1d:b1:7a:
                    61:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F8:1B:7F:7D:E1:A8:F2:AA:B4:68:E0:29:8D:88:1E:54:68:29:52
            X509v3 Authority Key Identifier:
                keyid:98:28:F8:A8:91:5A:72:75:31:36:82:5A:1F:46:FE:CB:BF:95:B7:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/9828F8A8915A72753136825A1F46FECBBF95B7E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9828F8A8915A72753136825A1F46FECBBF95B7E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/34352e3136372e3132382e302f32322d3332203d3e20323634333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:0f:5c:b0:72:ae:4a:66:60:f7:b4:bf:c4:23:30:4b:77:4a:
         9c:c0:bc:77:6b:9d:5e:c5:c4:89:07:7c:c2:9c:9c:1d:29:7e:
         dc:67:72:f8:71:14:55:7b:fc:dd:ef:b1:58:fc:22:45:ee:4e:
         8b:12:7d:45:58:4e:15:33:c8:d2:ab:11:db:ea:31:41:b9:99:
         65:e7:fc:4f:2b:a9:e9:de:a4:ae:8a:b2:f5:9f:40:7c:6e:48:
         b8:74:71:52:33:b2:6d:c2:f7:a5:7c:2d:98:9a:b9:d0:d7:44:
         d0:79:a7:bb:6f:88:cf:93:68:b0:d4:0d:88:5f:d8:5c:f9:3a:
         24:51:c0:af:b0:24:11:a9:4c:4f:44:91:da:4a:08:5a:77:0e:
         e0:e9:0e:48:c3:a9:97:4e:0d:6f:be:b7:ea:26:7f:f2:af:51:
         f1:55:c8:7b:1d:3c:c5:60:07:c2:e7:ba:57:b3:01:0e:32:14:
         4c:82:52:34:2a:6b:10:2e:60:07:50:e2:04:7f:fe:55:9f:5b:
         3d:59:3c:a9:98:03:c0:9b:80:8b:b0:38:06:57:94:1f:d8:83:
         38:43:e4:3a:55:4b:ef:56:e9:bf:fe:6a:ee:a9:04:4c:cd:ef:
         e5:6b:96:36:54:df:d8:8b:2c:73:06:30:71:f4:cf:db:07:f3:
         4f:d8:0d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 10:01:23 2026 by rpki-client