Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AChdSKNTFGoyuVBAiPehY14J9xR8kpx1WjbaBfxzD6rj/0/34352e3138332e35362e302f32322d3234203d3e20323639323633.roa
File:                     34352e3138332e35362e302f32322d3234203d3e20323639323633.roa (raw, json)
Hash identifier:          oaeeI6skTKtYCubk4dGu802GHCwW06rkCdMWhLyaNJk=
Subject key identifier:   A1:18:E8:69:2E:B0:5D:F5:28:90:17:12:F2:01:16:31:86:89:09:E9
Certificate issuer:       /CN=9516E18FF1D878D34D72A62751C21DF82509593E
Certificate serial:       43F95BAC641D65901FDE7D8C6A638D2938271020
Authority key identifier: 95:16:E1:8F:F1:D8:78:D3:4D:72:A6:27:51:C2:1D:F8:25:09:59:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9516E18FF1D878D34D72A62751C21DF82509593E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AChdSKNTFGoyuVBAiPehY14J9xR8kpx1WjbaBfxzD6rj/0/34352e3138332e35362e302f32322d3234203d3e20323639323633.roa
Signing time:             Mon 08 Jun 2026 12:53:00 +0000
ROA not before:           Mon 08 Jun 2026 12:48:00 +0000
ROA not after:            Mon 07 Jun 2027 12:53:00 +0000
asID:                     269263
IP address blocks:        45.183.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AChdSKNTFGoyuVBAiPehY14J9xR8kpx1WjbaBfxzD6rj/0/9516E18FF1D878D34D72A62751C21DF82509593E.crl
                          rsync://rpki-repo.registro.br/repo/AChdSKNTFGoyuVBAiPehY14J9xR8kpx1WjbaBfxzD6rj/0/9516E18FF1D878D34D72A62751C21DF82509593E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9516E18FF1D878D34D72A62751C21DF82509593E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 03:38:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f9:5b:ac:64:1d:65:90:1f:de:7d:8c:6a:63:8d:29:38:27:10:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9516E18FF1D878D34D72A62751C21DF82509593E
        Validity
            Not Before: Jun  8 12:48:00 2026 GMT
            Not After : Jun  7 12:53:00 2027 GMT
        Subject: CN=A118E8692EB05DF528901712F2011631868909E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:37:ae:d1:fd:58:5b:db:2f:85:7b:71:4f:b1:
                    8a:75:78:9e:6a:86:5b:55:69:4a:e4:3f:94:9d:ea:
                    69:77:da:f0:cb:aa:17:74:ed:93:c7:a0:97:7a:9f:
                    5c:4d:36:a9:67:2c:22:a9:04:46:4b:44:b2:e3:51:
                    25:9e:ea:09:1c:fd:58:eb:a9:ab:d1:69:73:40:a8:
                    7b:94:32:87:a0:e3:af:70:c5:8a:c5:17:c4:e9:0b:
                    1d:80:e0:98:31:71:77:34:c4:5e:80:99:d2:50:30:
                    b6:fc:92:f8:3b:87:0c:41:93:b3:ac:22:6e:70:cd:
                    84:8a:9a:30:cb:26:4f:2d:ab:d4:c7:ee:2c:98:8b:
                    fa:2b:c8:c0:da:cd:a1:03:8c:cf:e1:2c:c4:62:ad:
                    55:9c:28:b0:99:5a:81:29:8a:37:3d:c1:b9:e2:19:
                    e1:cd:2b:1a:a3:29:56:ea:fc:20:37:15:41:a2:03:
                    0a:a3:a5:d0:66:5a:5f:c5:25:c6:b9:71:41:d3:5e:
                    e8:66:95:c8:c3:bd:f1:c9:e8:7e:f9:3b:ba:0a:64:
                    33:81:df:12:77:2c:e6:89:f0:49:35:1a:7b:1a:f0:
                    44:fe:cb:9e:d6:15:48:80:90:14:01:58:98:a0:17:
                    8b:50:12:36:9c:01:41:9a:7f:5d:fd:01:fc:b3:f4:
                    b1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:18:E8:69:2E:B0:5D:F5:28:90:17:12:F2:01:16:31:86:89:09:E9
            X509v3 Authority Key Identifier:
                keyid:95:16:E1:8F:F1:D8:78:D3:4D:72:A6:27:51:C2:1D:F8:25:09:59:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AChdSKNTFGoyuVBAiPehY14J9xR8kpx1WjbaBfxzD6rj/0/9516E18FF1D878D34D72A62751C21DF82509593E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9516E18FF1D878D34D72A62751C21DF82509593E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AChdSKNTFGoyuVBAiPehY14J9xR8kpx1WjbaBfxzD6rj/0/34352e3138332e35362e302f32322d3234203d3e20323639323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:9f:35:e2:a9:9b:cd:31:eb:31:5a:97:af:ef:f0:4e:c4:4c:
         61:6b:cb:c5:e2:4c:e4:d0:aa:09:8d:77:bf:77:ac:e5:e4:16:
         62:6f:85:1f:fa:c6:0b:69:fa:4d:88:50:73:b9:7e:45:18:a0:
         33:07:7a:53:cd:a2:25:fa:8f:64:0b:82:dd:4a:04:da:e3:c2:
         85:e5:df:cd:7f:dd:bb:f3:a6:a2:e8:b3:8f:fd:5c:6d:e8:21:
         bf:4f:3a:6b:a3:b6:58:3e:56:28:5f:c7:8c:ff:be:e2:35:06:
         43:8a:28:d6:ee:f8:2b:e9:16:ec:fb:61:3d:84:a9:85:45:bd:
         d8:c1:91:92:e9:e6:59:24:a8:65:6a:a3:e8:d7:06:08:69:d1:
         a7:21:ad:a6:d6:97:55:20:56:9c:26:0c:42:27:b8:e1:c2:26:
         82:96:73:61:3d:32:f0:31:f3:58:3f:db:ff:ed:fa:7d:f6:c8:
         ab:4e:6a:48:ce:47:59:00:b9:95:9d:c1:e6:ed:b7:da:83:55:
         32:56:81:c2:1c:87:cb:b2:d0:f5:6c:4d:bd:22:e3:67:32:c8:
         bb:f2:97:98:45:da:7a:a8:d7:9c:36:92:eb:f0:ad:b3:70:01:
         53:55:97:c0:45:89:37:cf:9c:6b:ec:a2:a2:36:ce:2d:53:2c:
         29:ac:ae:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:27:00 2026 by rpki-client