Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/34352e36352e3230342e302f32342d3234203d3e20323636353434.roa
File:                     34352e36352e3230342e302f32342d3234203d3e20323636353434.roa (raw, json)
Hash identifier:          BVPQm7vKM7gvufOvOtojmXJwa+u6qpu4TnlKHedOvZE=
Subject key identifier:   15:83:F9:95:54:E5:A9:23:18:A5:41:C6:BB:BB:C9:C4:DC:47:D0:E9
Certificate issuer:       /CN=3806DB121C9269AE400CDA71100F88AF76F0469C
Certificate serial:       3E4E30988D394A5326915FB1D1CB9E8E6FFF6DCA
Authority key identifier: 38:06:DB:12:1C:92:69:AE:40:0C:DA:71:10:0F:88:AF:76:F0:46:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3806DB121C9269AE400CDA71100F88AF76F0469C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/34352e36352e3230342e302f32342d3234203d3e20323636353434.roa
Signing time:             Thu 09 Apr 2026 19:53:05 +0000
ROA not before:           Thu 09 Apr 2026 19:48:05 +0000
ROA not after:            Thu 08 Apr 2027 19:53:05 +0000
asID:                     266544
IP address blocks:        45.65.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/3806DB121C9269AE400CDA71100F88AF76F0469C.crl
                          rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/3806DB121C9269AE400CDA71100F88AF76F0469C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3806DB121C9269AE400CDA71100F88AF76F0469C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 22:59:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:4e:30:98:8d:39:4a:53:26:91:5f:b1:d1:cb:9e:8e:6f:ff:6d:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3806DB121C9269AE400CDA71100F88AF76F0469C
        Validity
            Not Before: Apr  9 19:48:05 2026 GMT
            Not After : Apr  8 19:53:05 2027 GMT
        Subject: CN=1583F99554E5A92318A541C6BBBBC9C4DC47D0E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:47:44:59:83:85:9f:0c:7f:eb:56:a2:56:f4:
                    33:e8:7b:d0:53:9b:e6:52:83:d8:79:ba:c1:40:31:
                    bd:0f:87:32:cf:df:cf:93:62:f0:f4:56:27:50:4d:
                    2a:d0:67:29:b4:bc:6d:f0:ca:0b:5c:a3:c7:15:86:
                    f7:00:a3:59:b5:f5:c0:b5:27:b4:8d:25:1e:4a:35:
                    76:82:30:6a:9b:b1:2b:97:15:11:77:46:a3:12:e4:
                    47:15:cb:c2:16:93:75:3e:f9:04:4e:d9:d6:3a:19:
                    da:9e:f7:25:60:98:db:b2:f7:72:29:06:82:97:3e:
                    d1:c6:1d:b7:c3:8d:94:55:15:8e:57:f3:c3:e8:74:
                    f6:e1:eb:4f:18:e5:2f:a8:5f:3a:77:c2:8c:8f:f5:
                    7c:5d:ee:16:50:89:ce:27:b1:52:c7:08:98:fb:77:
                    ae:1b:b9:17:e4:27:63:32:2f:7c:41:ad:b5:3f:32:
                    3e:5e:a9:42:56:20:b8:c6:61:c1:f0:e0:02:4e:42:
                    65:b7:4c:ae:74:34:2b:18:4e:a9:73:63:a3:2f:0a:
                    a1:85:31:02:3b:1f:16:2b:4f:7c:b8:09:9f:72:f6:
                    55:f5:93:3c:af:94:b8:93:22:5c:89:12:d0:4f:32:
                    13:9d:9c:ec:1f:b1:ce:34:20:02:de:46:21:23:5e:
                    d3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:83:F9:95:54:E5:A9:23:18:A5:41:C6:BB:BB:C9:C4:DC:47:D0:E9
            X509v3 Authority Key Identifier:
                keyid:38:06:DB:12:1C:92:69:AE:40:0C:DA:71:10:0F:88:AF:76:F0:46:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/3806DB121C9269AE400CDA71100F88AF76F0469C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3806DB121C9269AE400CDA71100F88AF76F0469C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/34352e36352e3230342e302f32342d3234203d3e20323636353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:e5:eb:16:3b:54:2a:84:16:65:e4:6e:fa:4b:23:2e:b7:82:
         7e:c0:bd:5d:b1:f0:d4:30:33:20:2e:12:e7:c1:da:20:2f:6b:
         1a:63:63:6f:01:54:44:8a:2a:71:6d:93:1b:69:1b:86:55:64:
         17:eb:3c:27:c3:b5:5b:ad:4d:60:94:73:8c:60:a8:60:d8:47:
         88:89:1a:93:21:a3:f8:01:a9:8f:89:d0:5b:0a:c1:f2:1d:1b:
         44:28:89:16:91:27:c0:74:c6:87:a5:3a:3d:78:1d:c0:75:62:
         a7:cf:68:e0:3e:5d:4c:27:98:d2:3c:1f:7a:aa:a0:1c:27:bf:
         fc:64:b7:77:81:76:35:6d:0b:28:35:a1:4e:0a:8b:c2:5a:18:
         37:4b:1c:f3:e4:cc:92:97:84:74:3c:41:8c:40:e7:d3:b6:c9:
         5e:7c:fe:12:29:0d:14:b5:78:7f:f9:6e:b3:8a:09:51:d0:d0:
         68:8d:f3:7a:66:4f:ae:fe:f3:ed:7a:1f:bd:47:35:2d:13:aa:
         84:26:a6:3a:ce:4c:42:61:bf:fd:fb:fb:31:9e:33:ea:23:35:
         31:4e:a8:38:05:2b:f8:c5:02:fc:3d:dd:27:e2:6a:84:05:20:
         fd:77:10:68:b9:15:7b:05:83:ca:c9:f9:89:65:68:96:7d:45:
         eb:c1:d5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:18:51 2026 by rpki-client