Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5bMoAsUhewAr2pEPCMWTqXYmpxqXLGYLTeAfv84x2oTi/0/34352e3233322e3130332e302f32342d3234203d3e20323637323632.roa
File:                     34352e3233322e3130332e302f32342d3234203d3e20323637323632.roa (raw, json)
Hash identifier:          SLoK8DcTehg/DFNpPeKB8AZ5uGi6atUVhkav+12pZ+U=
Subject key identifier:   76:CD:D4:57:01:E4:64:38:5C:7E:68:C3:EB:52:38:0C:E0:DB:31:B7
Certificate issuer:       /CN=19928676C4E40B6FDAB72D6783797D3DA074FDF3
Certificate serial:       0D578BA4AD6427B313557E712F59FEB0985595
Authority key identifier: 19:92:86:76:C4:E4:0B:6F:DA:B7:2D:67:83:79:7D:3D:A0:74:FD:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19928676C4E40B6FDAB72D6783797D3DA074FDF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5bMoAsUhewAr2pEPCMWTqXYmpxqXLGYLTeAfv84x2oTi/0/34352e3233322e3130332e302f32342d3234203d3e20323637323632.roa
Signing time:             Tue 09 Jun 2026 15:38:00 +0000
ROA not before:           Tue 09 Jun 2026 15:33:00 +0000
ROA not after:            Tue 08 Jun 2027 15:38:00 +0000
asID:                     267262
IP address blocks:        45.232.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5bMoAsUhewAr2pEPCMWTqXYmpxqXLGYLTeAfv84x2oTi/0/19928676C4E40B6FDAB72D6783797D3DA074FDF3.crl
                          rsync://rpki-repo.registro.br/repo/5bMoAsUhewAr2pEPCMWTqXYmpxqXLGYLTeAfv84x2oTi/0/19928676C4E40B6FDAB72D6783797D3DA074FDF3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19928676C4E40B6FDAB72D6783797D3DA074FDF3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 08:51:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:57:8b:a4:ad:64:27:b3:13:55:7e:71:2f:59:fe:b0:98:55:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19928676C4E40B6FDAB72D6783797D3DA074FDF3
        Validity
            Not Before: Jun  9 15:33:00 2026 GMT
            Not After : Jun  8 15:38:00 2027 GMT
        Subject: CN=76CDD45701E464385C7E68C3EB52380CE0DB31B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2a:37:84:28:c7:95:ec:d9:bd:0c:ca:83:88:
                    22:b6:ad:77:17:d4:ea:5b:cd:5f:a2:7d:ea:49:30:
                    4a:72:6a:a4:65:79:b1:61:2a:4d:62:51:ee:f2:c0:
                    02:f0:15:a9:89:21:a4:e4:b7:33:45:58:35:5a:0a:
                    f9:4a:b2:95:e4:a9:87:b9:a2:c9:18:d2:d7:28:f8:
                    ac:57:79:cc:e7:3e:10:78:d1:7b:9f:2f:cd:8f:45:
                    de:a6:45:7f:e2:7d:e3:2a:5d:41:ca:9a:80:85:62:
                    1d:ca:2b:07:a8:4f:a2:23:b2:8c:35:3c:b6:a0:f0:
                    58:f5:60:94:6b:8d:2b:64:4f:f0:ed:22:d0:1c:2f:
                    d6:27:63:02:b0:2b:bd:cb:ad:5f:fb:16:ee:73:cf:
                    01:fb:46:c9:a0:25:af:09:64:4e:bc:dc:71:be:8a:
                    46:1b:c1:99:bb:9e:34:10:7e:cf:20:43:66:d8:61:
                    5e:bf:1b:92:45:1c:7f:0d:4d:20:5c:ff:67:d0:ec:
                    f2:23:3a:86:68:d4:7f:60:63:48:6f:3a:52:5f:86:
                    4a:b9:ac:26:2e:ab:eb:aa:32:ba:aa:da:27:81:f6:
                    e9:ce:f2:b7:4f:db:01:c2:b0:cf:94:5e:b9:6f:ed:
                    19:6c:41:22:e0:ae:bc:8a:9f:c3:0f:b2:7b:e6:7d:
                    9e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:CD:D4:57:01:E4:64:38:5C:7E:68:C3:EB:52:38:0C:E0:DB:31:B7
            X509v3 Authority Key Identifier:
                keyid:19:92:86:76:C4:E4:0B:6F:DA:B7:2D:67:83:79:7D:3D:A0:74:FD:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5bMoAsUhewAr2pEPCMWTqXYmpxqXLGYLTeAfv84x2oTi/0/19928676C4E40B6FDAB72D6783797D3DA074FDF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19928676C4E40B6FDAB72D6783797D3DA074FDF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5bMoAsUhewAr2pEPCMWTqXYmpxqXLGYLTeAfv84x2oTi/0/34352e3233322e3130332e302f32342d3234203d3e20323637323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:cb:d9:88:e5:e0:bb:b5:71:f5:08:fb:56:b8:49:db:96:57:
         44:11:88:ec:b2:8c:45:ed:0d:14:89:ee:9a:95:1d:33:c9:a4:
         ad:a5:93:e7:38:17:84:dd:e2:90:b2:b0:f4:c1:2a:0f:aa:4e:
         2c:68:c5:f4:1d:c5:93:ac:32:a1:01:7f:94:be:d7:da:0c:eb:
         c6:01:a3:24:d6:e0:e2:b8:46:bc:11:3a:1e:1f:6b:fc:ba:8d:
         49:c5:b4:18:1f:88:a3:5d:2c:36:5b:23:bc:35:cd:9c:3f:74:
         94:80:17:e4:26:24:2a:8e:bc:5e:f0:d5:00:e1:b2:aa:d2:03:
         25:67:66:80:ed:f4:c2:d1:24:1a:25:57:fa:38:96:cc:0d:16:
         17:44:a3:e3:06:e2:35:d0:72:d9:f0:3a:ae:a4:62:5e:12:06:
         48:50:12:ac:46:0f:27:cc:a8:41:3c:04:55:d8:ab:b3:82:03:
         54:90:a1:15:9c:be:ab:37:9d:d2:ee:12:b2:69:40:b5:c1:f3:
         e0:4a:00:6e:27:a6:b6:86:c9:7a:ea:51:5e:94:f9:d2:df:f6:
         31:49:40:36:2f:37:5e:8d:f2:8c:aa:1a:9b:31:1a:4e:a1:2d:
         d9:7d:08:6e:4b:c0:08:b5:51:04:84:ef:6c:18:54:a2:4b:88:
         6a:0a:63:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:26:12 2026 by rpki-client