Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6p1vaP1SiWHEAapWhdJf1dfdmTtY9mdbVjUSv8Cvnszb/1/34352e3233362e35362e302f32322d3332203d3e20323638323332.roa
File:                     34352e3233362e35362e302f32322d3332203d3e20323638323332.roa (raw, json)
Hash identifier:          zbSZwFl3o6D7CKm0dullew19M3cMmcSSg1zLpXx6ENA=
Subject key identifier:   20:BB:21:7D:86:08:45:CA:EC:6F:0C:00:CB:3D:A3:36:35:0D:7E:B4
Certificate issuer:       /CN=0BC5ED59B8AADF14810D51CD1C2D6BAC0A8DACA9
Certificate serial:       3E97C2E847EC5F7FE67237C4B14F17F28D7A4F23
Authority key identifier: 0B:C5:ED:59:B8:AA:DF:14:81:0D:51:CD:1C:2D:6B:AC:0A:8D:AC:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BC5ED59B8AADF14810D51CD1C2D6BAC0A8DACA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6p1vaP1SiWHEAapWhdJf1dfdmTtY9mdbVjUSv8Cvnszb/1/34352e3233362e35362e302f32322d3332203d3e20323638323332.roa
Signing time:             Thu 04 Jun 2026 21:19:08 +0000
ROA not before:           Thu 04 Jun 2026 21:14:08 +0000
ROA not after:            Thu 03 Jun 2027 21:19:08 +0000
asID:                     268232
IP address blocks:        45.236.56.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6p1vaP1SiWHEAapWhdJf1dfdmTtY9mdbVjUSv8Cvnszb/1/0BC5ED59B8AADF14810D51CD1C2D6BAC0A8DACA9.crl
                          rsync://rpki-repo.registro.br/repo/6p1vaP1SiWHEAapWhdJf1dfdmTtY9mdbVjUSv8Cvnszb/1/0BC5ED59B8AADF14810D51CD1C2D6BAC0A8DACA9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BC5ED59B8AADF14810D51CD1C2D6BAC0A8DACA9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 05:49:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:97:c2:e8:47:ec:5f:7f:e6:72:37:c4:b1:4f:17:f2:8d:7a:4f:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BC5ED59B8AADF14810D51CD1C2D6BAC0A8DACA9
        Validity
            Not Before: Jun  4 21:14:08 2026 GMT
            Not After : Jun  3 21:19:08 2027 GMT
        Subject: CN=20BB217D860845CAEC6F0C00CB3DA336350D7EB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:da:c3:4a:e3:d5:29:ea:07:b5:a4:28:44:e7:
                    6c:00:99:a7:9b:91:6a:a0:62:1e:b5:42:22:37:3a:
                    0e:1c:dc:a7:c5:fe:35:bf:43:fe:6b:71:d7:a4:d0:
                    ea:31:04:3f:af:41:3f:5d:bd:b7:e4:c9:fb:5f:8b:
                    de:92:6d:01:2d:5c:9f:31:f4:e6:a3:64:2b:1c:c8:
                    12:9a:76:9f:78:0c:02:96:4f:bf:7d:12:53:64:f2:
                    d3:b3:4d:a4:b6:6c:31:a6:e5:f6:c5:1c:7a:0f:9d:
                    2f:24:19:71:b0:e4:8c:cb:b9:1d:41:a5:16:e1:55:
                    f7:e8:53:35:1c:67:b2:7a:96:19:42:af:be:05:58:
                    d3:49:47:da:e9:c5:4a:b2:3a:cc:76:af:34:95:75:
                    bc:a7:25:5a:9b:03:fb:e2:28:1e:43:03:b1:7c:f8:
                    bd:e8:ce:55:27:ed:d9:1c:cd:a8:05:c8:29:68:af:
                    83:b5:fa:0d:c3:09:f4:dd:86:c1:ea:7e:76:cd:d1:
                    fc:91:7b:16:27:74:41:a5:b1:b7:52:64:25:42:af:
                    04:93:ff:73:37:2f:47:f7:06:c0:40:55:17:a9:1c:
                    59:55:17:cd:22:7e:f0:9c:b9:61:53:e1:a1:b9:1f:
                    78:72:39:08:01:12:6e:60:65:13:8f:1e:a1:40:d2:
                    15:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:BB:21:7D:86:08:45:CA:EC:6F:0C:00:CB:3D:A3:36:35:0D:7E:B4
            X509v3 Authority Key Identifier:
                keyid:0B:C5:ED:59:B8:AA:DF:14:81:0D:51:CD:1C:2D:6B:AC:0A:8D:AC:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6p1vaP1SiWHEAapWhdJf1dfdmTtY9mdbVjUSv8Cvnszb/1/0BC5ED59B8AADF14810D51CD1C2D6BAC0A8DACA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BC5ED59B8AADF14810D51CD1C2D6BAC0A8DACA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6p1vaP1SiWHEAapWhdJf1dfdmTtY9mdbVjUSv8Cvnszb/1/34352e3233362e35362e302f32322d3332203d3e20323638323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:bf:1b:a7:b9:b5:ba:08:d3:60:ac:a3:bf:57:c1:e4:4c:b2:
         fe:6b:b9:bd:a7:c7:83:c4:b9:e1:83:16:9e:97:d5:d9:f5:5e:
         76:73:1c:2a:e5:f4:c6:d6:21:e6:45:f8:a2:b8:e9:e0:0f:3b:
         57:e4:7c:77:5e:6d:13:1a:89:be:1b:8b:7b:13:15:6b:33:95:
         1b:48:48:7e:31:78:4a:6b:7a:ae:85:75:3e:c0:c9:60:de:02:
         bc:3f:58:03:d8:4e:31:12:ef:c9:f4:06:b9:46:bb:27:40:5e:
         c3:76:b6:1a:52:f8:5e:05:1f:61:55:fb:1b:2e:eb:ae:fd:1a:
         7f:85:7b:0f:57:e8:84:c1:c6:53:72:33:5c:e1:d9:a0:d8:55:
         ed:46:e5:ab:ef:44:5b:0b:21:11:27:ef:fd:f9:71:39:f0:75:
         78:30:9e:f7:ab:4b:71:2b:6e:c2:b3:93:23:f9:ed:07:3d:27:
         88:34:35:2d:3d:8b:74:0a:92:98:e8:5d:05:37:34:89:60:64:
         c9:df:e1:42:53:dd:06:48:c1:78:79:6c:85:9b:4d:56:82:36:
         4a:ca:51:91:ae:a1:e3:86:95:68:97:6c:96:22:da:dd:7e:cc:
         40:a5:39:32:fd:a9:b0:3c:ee:4f:f7:7c:e7:70:e6:7f:10:8f:
         c6:08:fb:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 10:00:25 2026 by rpki-client