Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/34352e3136382e35342e302f32342d3234203d3e20323638303239.roa
File:                     34352e3136382e35342e302f32342d3234203d3e20323638303239.roa (raw, json)
Hash identifier:          zUgqkYgNu0jdP5W95/aGZ4F7SlxmC5DCcsjdJk5ZktI=
Subject key identifier:   89:C9:0C:C6:6C:50:12:77:84:AC:19:7F:59:70:62:2D:20:6A:5C:1A
Certificate issuer:       /CN=4C754589EB8CD9171C812BC04CC781FCF43209CE
Certificate serial:       2A74AB2B677C35EE610A1E58D32B4A3D5189DB43
Authority key identifier: 4C:75:45:89:EB:8C:D9:17:1C:81:2B:C0:4C:C7:81:FC:F4:32:09:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C754589EB8CD9171C812BC04CC781FCF43209CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/34352e3136382e35342e302f32342d3234203d3e20323638303239.roa
Signing time:             Fri 12 Jun 2026 13:40:04 +0000
ROA not before:           Fri 12 Jun 2026 13:35:04 +0000
ROA not after:            Fri 11 Jun 2027 13:40:04 +0000
asID:                     268029
IP address blocks:        45.168.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/4C754589EB8CD9171C812BC04CC781FCF43209CE.crl
                          rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/4C754589EB8CD9171C812BC04CC781FCF43209CE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C754589EB8CD9171C812BC04CC781FCF43209CE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 00:52:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:74:ab:2b:67:7c:35:ee:61:0a:1e:58:d3:2b:4a:3d:51:89:db:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C754589EB8CD9171C812BC04CC781FCF43209CE
        Validity
            Not Before: Jun 12 13:35:04 2026 GMT
            Not After : Jun 11 13:40:04 2027 GMT
        Subject: CN=89C90CC66C50127784AC197F5970622D206A5C1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:61:25:28:46:25:17:fe:96:06:18:5f:77:af:
                    f8:b1:6d:c8:30:61:91:43:95:e9:fa:06:67:02:39:
                    2d:54:0a:21:82:95:f1:ae:e4:02:77:d7:38:87:18:
                    73:44:fa:61:74:d8:bf:2e:ce:4c:e7:e2:fb:c0:bf:
                    44:49:ce:b9:e7:7a:70:19:4c:c4:93:81:51:27:6d:
                    ec:a9:6d:02:72:08:5a:4d:ef:61:0f:e3:70:64:76:
                    ea:37:4d:6d:77:16:05:8d:62:d2:f3:2b:f2:84:c0:
                    8b:52:be:c0:38:fb:20:b7:60:8e:8d:92:ca:a2:25:
                    37:27:0e:53:f1:1d:07:27:6d:a6:d6:95:95:f8:59:
                    e3:2b:c8:1f:f1:a5:85:80:e3:7d:e2:3c:bc:b1:46:
                    95:69:3f:00:eb:7b:6d:4d:8f:91:eb:a3:11:6c:ae:
                    86:dc:d0:23:9c:3e:2d:c3:68:aa:bb:de:b5:a3:b8:
                    59:3b:ff:9d:e2:7b:da:a2:97:10:10:aa:4c:a7:98:
                    52:61:ff:40:54:ec:f9:3d:34:9b:db:8f:54:a9:6c:
                    30:09:9e:f0:81:da:7f:4b:fe:97:39:f1:91:59:d5:
                    75:63:7f:a1:43:7b:19:29:c9:76:92:77:bd:8a:6d:
                    85:88:7f:5c:80:83:31:4d:ed:2c:9c:b3:ea:89:e5:
                    8f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:C9:0C:C6:6C:50:12:77:84:AC:19:7F:59:70:62:2D:20:6A:5C:1A
            X509v3 Authority Key Identifier:
                keyid:4C:75:45:89:EB:8C:D9:17:1C:81:2B:C0:4C:C7:81:FC:F4:32:09:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/4C754589EB8CD9171C812BC04CC781FCF43209CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C754589EB8CD9171C812BC04CC781FCF43209CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/34352e3136382e35342e302f32342d3234203d3e20323638303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:72:1d:63:1d:45:59:3a:01:f2:b8:f9:d5:db:ef:f3:3f:74:
         4c:ad:b7:20:20:7d:2f:0f:bd:b6:cf:ac:d0:2d:fb:a1:85:5e:
         c9:50:85:ad:78:2e:a6:3d:ab:7f:08:ff:a2:dd:ff:5e:d1:33:
         ab:bf:9f:d0:a9:f3:53:6f:cb:1f:b7:6d:69:ed:ed:b7:d7:cf:
         79:9e:45:c8:28:2a:25:ea:c0:a3:9c:6f:09:fe:f6:76:7a:41:
         bb:c2:6a:6f:63:99:31:08:bc:8a:9b:05:d0:0b:7e:13:fd:7d:
         7f:c8:65:94:e3:8a:69:de:ce:88:7b:fe:86:6d:49:df:a8:bd:
         73:76:c7:6b:8c:5b:4a:28:42:fb:b8:83:77:c1:bb:82:41:e0:
         ed:bf:72:9d:83:fb:dc:a1:72:82:c3:88:aa:d3:65:c7:5a:b3:
         b7:8b:31:92:dd:96:55:cb:fd:0a:bf:41:b0:fc:b9:8c:af:51:
         b3:98:56:c7:ba:20:46:9e:7f:bb:cd:a1:56:61:eb:38:47:0e:
         a9:e0:77:50:86:81:b6:d3:8a:e3:03:10:53:e0:65:79:34:e7:
         13:d1:5b:36:e8:ef:eb:46:34:0e:35:c0:0c:82:21:1b:f2:b2:
         82:88:73:ee:a9:11:66:0d:44:f4:4c:f7:c8:be:0a:d3:fb:64:
         8a:9a:37:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:02:30 2026 by rpki-client