Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/34352e36352e3230382e302f32322d3234203d3e20323636323638.roa
File:                     34352e36352e3230382e302f32322d3234203d3e20323636323638.roa (raw, json)
Hash identifier:          ebxWp5wpKyJ7OClVfbJioUsTWhhBwjbDaptw9Kummcw=
Subject key identifier:   05:69:4C:5D:10:00:62:BE:F7:DA:A1:C6:AE:82:FE:1D:21:36:60:A5
Certificate issuer:       /CN=65B1F9973AFB6EFFA9031919C1DD54079AAB8F75
Certificate serial:       1864F60AE9D8927A172D4F53E35ECF8F793910FB
Authority key identifier: 65:B1:F9:97:3A:FB:6E:FF:A9:03:19:19:C1:DD:54:07:9A:AB:8F:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65B1F9973AFB6EFFA9031919C1DD54079AAB8F75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/34352e36352e3230382e302f32322d3234203d3e20323636323638.roa
Signing time:             Fri 05 Jun 2026 23:22:42 +0000
ROA not before:           Fri 05 Jun 2026 23:17:42 +0000
ROA not after:            Fri 04 Jun 2027 23:22:42 +0000
asID:                     266268
IP address blocks:        45.65.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/65B1F9973AFB6EFFA9031919C1DD54079AAB8F75.crl
                          rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/65B1F9973AFB6EFFA9031919C1DD54079AAB8F75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65B1F9973AFB6EFFA9031919C1DD54079AAB8F75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 22:13:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:64:f6:0a:e9:d8:92:7a:17:2d:4f:53:e3:5e:cf:8f:79:39:10:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65B1F9973AFB6EFFA9031919C1DD54079AAB8F75
        Validity
            Not Before: Jun  5 23:17:42 2026 GMT
            Not After : Jun  4 23:22:42 2027 GMT
        Subject: CN=05694C5D100062BEF7DAA1C6AE82FE1D213660A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:db:7e:e3:7f:b3:e1:e1:24:08:07:08:06:50:
                    66:24:ec:82:c6:9a:0a:eb:9d:57:d8:5e:1c:c3:dc:
                    33:89:4f:39:84:04:c1:e7:93:1f:70:eb:f7:b3:e3:
                    e0:dd:e4:04:6b:0e:bc:8b:c1:67:69:cb:c9:36:2e:
                    83:ba:70:9b:cd:98:1f:34:56:53:74:54:30:d4:e9:
                    79:dc:4f:1c:4c:76:54:0c:bf:b2:c6:92:f9:18:69:
                    f0:cb:27:4c:ae:07:41:5c:35:80:93:d2:e4:95:49:
                    54:b7:94:6e:49:07:54:aa:91:81:dc:ca:89:53:e7:
                    0e:73:8a:d3:53:a5:ff:47:c0:b2:a7:dc:e9:19:dd:
                    53:d8:10:35:25:dd:ff:7f:5f:07:4d:8e:44:c6:a9:
                    7a:2a:b8:84:08:da:6e:c3:4a:97:8f:2c:c0:8a:63:
                    a6:64:79:38:84:30:88:48:19:cc:da:f5:8d:14:ed:
                    45:b2:80:d5:a8:ac:de:fd:94:53:ac:cf:dd:e8:38:
                    10:71:55:4c:0b:83:1c:ea:d4:aa:ad:77:f7:9f:d3:
                    74:58:71:ad:7a:6c:f5:a8:31:01:ff:43:5a:b3:2a:
                    88:80:b2:3f:f8:fa:72:b5:af:26:ef:68:fe:f5:0b:
                    e4:38:22:8f:2d:51:27:b2:d8:b9:a6:99:a8:83:1a:
                    0d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:69:4C:5D:10:00:62:BE:F7:DA:A1:C6:AE:82:FE:1D:21:36:60:A5
            X509v3 Authority Key Identifier:
                keyid:65:B1:F9:97:3A:FB:6E:FF:A9:03:19:19:C1:DD:54:07:9A:AB:8F:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/65B1F9973AFB6EFFA9031919C1DD54079AAB8F75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65B1F9973AFB6EFFA9031919C1DD54079AAB8F75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/34352e36352e3230382e302f32322d3234203d3e20323636323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:13:77:d8:2c:cf:f9:e7:8a:01:f4:01:e6:6e:e4:49:bb:29:
         eb:70:da:c2:2d:20:aa:68:32:a7:e4:f2:99:dd:2b:22:f9:b0:
         a9:6c:57:0f:53:9e:ff:d1:74:48:ca:03:62:97:02:60:22:48:
         62:ae:99:14:11:6e:93:b1:ee:b8:f4:a6:e9:91:bd:c2:7c:b6:
         02:53:83:aa:03:b1:3b:3f:f6:6c:7e:f8:ec:57:41:30:d3:4c:
         7c:d7:fd:ef:6f:95:25:ea:68:eb:ff:c9:75:ad:92:30:60:41:
         8b:b0:ed:67:a2:34:56:60:ae:66:fa:b7:2f:4c:a5:06:ae:2a:
         a1:00:35:a4:55:a3:bf:d3:ea:3e:3b:04:ae:63:84:69:2c:0c:
         d3:30:59:5a:51:eb:24:92:a1:65:f9:3f:9d:7a:4b:a4:bb:1b:
         6e:a5:fd:1b:8d:06:95:b0:40:d9:32:c4:01:e3:96:22:10:42:
         ca:7f:b1:66:f3:fe:7d:fe:17:59:b0:73:fb:72:da:bc:3b:78:
         91:a8:26:eb:ec:02:3b:74:28:7e:df:d2:77:28:66:79:91:d6:
         ff:d0:3a:93:39:57:e4:49:7c:06:85:3f:21:97:3c:f9:fb:ae:
         c0:75:3c:8f:23:67:06:89:74:c3:33:4c:b0:b2:3f:27:d1:ee:
         09:60:17:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:57:10 2026 by rpki-client