Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/34352e3233392e3137382e302f32332d3234203d3e20323634333938.roa
File:                     34352e3233392e3137382e302f32332d3234203d3e20323634333938.roa (raw, json)
Hash identifier:          6tJeeBTb9vkvkDmPrvRQk38XJjLSe2dW7MOjCE4BzJk=
Subject key identifier:   1D:37:2B:D0:60:4C:7A:C6:4E:38:0F:18:46:BA:AF:2F:E4:EE:76:D5
Certificate issuer:       /CN=9828F8A8915A72753136825A1F46FECBBF95B7E4
Certificate serial:       18A25B0C489937D0384B85A3AA3DB736BC0C5DF3
Authority key identifier: 98:28:F8:A8:91:5A:72:75:31:36:82:5A:1F:46:FE:CB:BF:95:B7:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9828F8A8915A72753136825A1F46FECBBF95B7E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/34352e3233392e3137382e302f32332d3234203d3e20323634333938.roa
Signing time:             Wed 20 May 2026 19:43:02 +0000
ROA not before:           Wed 20 May 2026 19:38:02 +0000
ROA not after:            Wed 19 May 2027 19:43:02 +0000
asID:                     264398
IP address blocks:        45.239.178.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/9828F8A8915A72753136825A1F46FECBBF95B7E4.crl
                          rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/9828F8A8915A72753136825A1F46FECBBF95B7E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9828F8A8915A72753136825A1F46FECBBF95B7E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 00:36:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:a2:5b:0c:48:99:37:d0:38:4b:85:a3:aa:3d:b7:36:bc:0c:5d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9828F8A8915A72753136825A1F46FECBBF95B7E4
        Validity
            Not Before: May 20 19:38:02 2026 GMT
            Not After : May 19 19:43:02 2027 GMT
        Subject: CN=1D372BD0604C7AC64E380F1846BAAF2FE4EE76D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c0:3a:09:a3:d7:13:90:4c:14:3c:3e:2d:a0:
                    1f:17:78:58:9d:bc:f8:5b:59:a7:33:46:93:bd:9d:
                    70:92:74:b8:68:bf:6c:38:c5:f9:26:76:14:f2:cd:
                    7f:eb:ae:ea:39:ed:32:ea:ea:b7:d5:55:ca:93:01:
                    42:e7:9e:f1:17:9d:46:0c:5d:9a:4c:cb:a8:f3:45:
                    fa:0b:b9:37:6f:de:81:bb:d9:df:05:b4:29:eb:6c:
                    0a:54:3c:ec:5a:17:69:3e:ec:c1:ea:d9:14:70:3b:
                    02:72:56:7d:05:e0:01:a5:34:06:ae:4e:08:63:16:
                    73:fb:bd:73:a9:30:07:a6:f8:92:8c:bd:bf:01:28:
                    30:c9:3c:87:e8:57:89:e9:4c:c0:fa:d8:36:b2:66:
                    68:aa:c4:69:18:73:0b:7f:7f:b0:75:b3:f8:15:4f:
                    fb:15:f3:cd:39:2f:ca:0c:5f:6e:88:48:68:18:2b:
                    72:d7:2e:b3:a6:ec:f5:d6:8a:58:0c:2f:bf:b3:2e:
                    74:3c:fc:c3:15:27:f0:2b:0e:78:d7:85:e5:c2:b6:
                    74:60:ab:9a:1f:27:38:3e:4e:79:82:33:b4:f2:28:
                    a7:58:07:56:b5:0d:be:e0:c8:c7:c3:b5:6e:ee:f0:
                    19:61:c8:d0:e1:0d:db:06:ee:da:97:fa:65:96:58:
                    58:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:37:2B:D0:60:4C:7A:C6:4E:38:0F:18:46:BA:AF:2F:E4:EE:76:D5
            X509v3 Authority Key Identifier:
                keyid:98:28:F8:A8:91:5A:72:75:31:36:82:5A:1F:46:FE:CB:BF:95:B7:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/9828F8A8915A72753136825A1F46FECBBF95B7E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9828F8A8915A72753136825A1F46FECBBF95B7E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/34352e3233392e3137382e302f32332d3234203d3e20323634333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:8d:3b:7c:b6:e5:8f:9b:f4:10:65:25:2c:fe:2a:3f:2f:35:
         51:cb:35:ee:64:a9:56:8a:91:c4:78:f9:8a:76:79:09:84:29:
         ed:e6:5e:e6:44:27:e9:a0:46:96:60:f8:e6:fa:a6:e5:f3:0b:
         86:dc:bb:cf:86:03:8a:9c:f3:1d:ac:f8:16:b6:23:f3:48:ba:
         b8:3a:05:a3:06:0e:0f:7b:06:dd:49:99:66:a7:96:28:0c:7f:
         c5:82:aa:c0:fe:9a:45:23:50:88:a2:ac:b9:8a:fe:de:4b:38:
         8d:b3:2f:23:cc:37:a7:ab:3e:ce:aa:fe:2c:09:e2:10:a7:1d:
         d5:0d:71:8c:cf:bd:a0:be:60:60:4f:e4:b2:70:27:3d:56:3b:
         8b:aa:e9:0e:78:64:16:1c:a6:80:fc:75:ee:ef:e2:55:78:0c:
         03:bc:e9:ea:4d:0d:f3:b1:a8:56:4b:c8:56:8a:85:21:40:86:
         2b:21:ab:cc:fa:33:3d:34:77:9a:c1:ec:a9:02:3e:72:14:3f:
         1d:dd:e7:da:5f:1c:9f:91:22:b9:f6:3b:c3:df:ed:a8:e4:23:
         1d:2b:bd:75:99:43:22:5f:a2:07:98:fc:fc:8a:7e:a1:75:d9:
         eb:aa:6e:7c:af:d7:4e:9d:8c:fc:f9:45:1d:46:92:81:8d:00:
         58:a3:d4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 12:47:15 2026 by rpki-client