Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6kvsPX6iuBjDq2gq2afF3QvJWY7zeg3xoZLv6oJQmU4F/0/34352e3139312e3137322e302f32322d3332203d3e20323639363833.roa
File:                     34352e3139312e3137322e302f32322d3332203d3e20323639363833.roa (raw, json)
Hash identifier:          muUy7qpfC+PguZaIHx6bRHGVVsBLEZo8bG/rJET5lHE=
Subject key identifier:   A7:85:23:61:A9:A2:0E:16:AB:6F:20:1D:0D:C5:A7:EA:A4:B4:A7:E0
Certificate issuer:       /CN=C896D3E514DEA0EE3CC97EA356050AE859BEAB4E
Certificate serial:       1E4D2286F63AA4D26F8B78AA98FED710A7BC98C3
Authority key identifier: C8:96:D3:E5:14:DE:A0:EE:3C:C9:7E:A3:56:05:0A:E8:59:BE:AB:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C896D3E514DEA0EE3CC97EA356050AE859BEAB4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6kvsPX6iuBjDq2gq2afF3QvJWY7zeg3xoZLv6oJQmU4F/0/34352e3139312e3137322e302f32322d3332203d3e20323639363833.roa
Signing time:             Mon 18 May 2026 19:47:35 +0000
ROA not before:           Mon 18 May 2026 19:42:35 +0000
ROA not after:            Mon 17 May 2027 19:47:35 +0000
asID:                     269683
IP address blocks:        45.191.172.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6kvsPX6iuBjDq2gq2afF3QvJWY7zeg3xoZLv6oJQmU4F/0/C896D3E514DEA0EE3CC97EA356050AE859BEAB4E.crl
                          rsync://rpki-repo.registro.br/repo/6kvsPX6iuBjDq2gq2afF3QvJWY7zeg3xoZLv6oJQmU4F/0/C896D3E514DEA0EE3CC97EA356050AE859BEAB4E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C896D3E514DEA0EE3CC97EA356050AE859BEAB4E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 04:54:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:4d:22:86:f6:3a:a4:d2:6f:8b:78:aa:98:fe:d7:10:a7:bc:98:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C896D3E514DEA0EE3CC97EA356050AE859BEAB4E
        Validity
            Not Before: May 18 19:42:35 2026 GMT
            Not After : May 17 19:47:35 2027 GMT
        Subject: CN=A7852361A9A20E16AB6F201D0DC5A7EAA4B4A7E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:51:ed:39:68:23:46:82:f5:19:88:fe:58:0b:
                    94:86:77:09:bd:18:e1:cf:11:e1:3d:6b:ab:2e:9b:
                    8e:cf:50:40:4a:d1:c9:6f:fc:42:a5:b0:d0:4f:aa:
                    d3:9d:5d:b6:17:9c:73:13:0d:cb:27:e8:df:1d:c4:
                    61:11:98:4b:cd:34:1c:26:cf:26:4d:cd:82:e5:ab:
                    27:20:67:b0:b9:b1:b5:91:c4:d7:b8:79:32:6d:2a:
                    97:29:ce:69:1a:b4:6d:db:2e:23:35:b4:d1:07:ed:
                    4a:3d:3e:55:2b:4a:86:6e:60:06:d9:d3:14:ac:49:
                    fc:4d:7b:b8:01:40:c5:6f:12:7d:96:fa:8f:2b:f4:
                    5e:79:7b:9f:52:3f:f0:6e:17:19:3e:cc:69:d8:34:
                    48:a9:88:87:51:7b:b7:63:9a:05:96:3a:e4:a1:5c:
                    a7:2e:bc:c0:2b:90:10:32:26:5b:67:25:a6:92:f2:
                    c7:88:76:ee:bd:e8:d0:d6:e7:63:9d:3d:c4:82:be:
                    10:8d:d8:37:d9:2d:a3:a6:bc:8c:f7:1b:da:9f:74:
                    51:3b:45:ce:de:35:8c:0e:b0:9d:9b:4b:20:aa:a1:
                    66:53:38:0e:87:c2:f1:00:bf:73:48:f2:0e:8f:67:
                    f2:c0:6d:44:b8:14:ca:ed:32:d5:e4:9e:4f:df:75:
                    99:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:85:23:61:A9:A2:0E:16:AB:6F:20:1D:0D:C5:A7:EA:A4:B4:A7:E0
            X509v3 Authority Key Identifier:
                keyid:C8:96:D3:E5:14:DE:A0:EE:3C:C9:7E:A3:56:05:0A:E8:59:BE:AB:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6kvsPX6iuBjDq2gq2afF3QvJWY7zeg3xoZLv6oJQmU4F/0/C896D3E514DEA0EE3CC97EA356050AE859BEAB4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C896D3E514DEA0EE3CC97EA356050AE859BEAB4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kvsPX6iuBjDq2gq2afF3QvJWY7zeg3xoZLv6oJQmU4F/0/34352e3139312e3137322e302f32322d3332203d3e20323639363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:c0:09:01:56:9a:0e:21:a9:45:44:3f:d3:e3:92:af:f1:05:
         7e:32:d2:21:8e:9c:74:17:19:d9:39:61:4f:5b:fd:a4:fd:27:
         eb:c9:53:35:0b:8c:5a:36:93:0d:a2:6a:4e:69:c1:62:5f:38:
         d5:24:a4:45:b8:a6:26:d9:61:f9:01:90:f4:39:52:e0:fd:cf:
         7e:f4:50:2d:a8:bb:71:e0:a5:1e:81:c6:96:fa:06:06:15:09:
         88:f2:9b:a3:53:99:ed:1b:84:4b:f8:35:b9:2b:0c:27:50:30:
         7d:2f:0f:84:08:d8:30:13:8d:d3:59:54:b2:e2:57:d9:57:c0:
         07:22:30:29:87:fc:e3:65:4f:a8:77:a6:0e:75:86:9d:46:14:
         58:5a:b3:49:ff:9c:8c:ec:c2:87:74:57:3b:96:13:93:e9:28:
         5f:ec:19:36:1b:cb:b3:b2:e6:40:49:18:ef:de:45:c6:a9:85:
         83:ef:19:8b:56:12:fa:a9:b6:4c:12:5f:a0:ce:1e:29:13:f9:
         75:13:58:50:b0:26:82:8c:89:b7:a4:c2:6a:1a:45:ca:0f:c2:
         46:77:09:63:81:7a:bc:ec:ad:70:41:c7:e1:7d:97:fc:e4:f0:
         a8:7d:89:f2:be:77:67:08:3b:f8:a1:a6:8b:5b:cd:db:c7:7e:
         09:32:d4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:37:44 2026 by rpki-client