Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BY8XH386EyPVJzy6aDQ9f8hWjR9KVXdQTzBGEhpukVTn/0/34352e3136302e35362e302f32342d3234203d3e20323638333935.roa
File:                     34352e3136302e35362e302f32342d3234203d3e20323638333935.roa (raw, json)
Hash identifier:          hcqOgtHBwJod0EIZRj7CN4vRJiHdmf+Xryj/ipnh34c=
Subject key identifier:   BC:94:8A:B9:17:F7:1F:7C:9C:F1:C6:45:E8:30:DF:F7:96:64:B5:12
Certificate issuer:       /CN=CE4D1FDDB129DB78C7D09173C95C6AF30690DA42
Certificate serial:       31FDC07D5F8E2B9085E93DA73F8991DAF9A13D12
Authority key identifier: CE:4D:1F:DD:B1:29:DB:78:C7:D0:91:73:C9:5C:6A:F3:06:90:DA:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4D1FDDB129DB78C7D09173C95C6AF30690DA42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BY8XH386EyPVJzy6aDQ9f8hWjR9KVXdQTzBGEhpukVTn/0/34352e3136302e35362e302f32342d3234203d3e20323638333935.roa
Signing time:             Tue 09 Jun 2026 17:35:58 +0000
ROA not before:           Tue 09 Jun 2026 17:30:58 +0000
ROA not after:            Tue 08 Jun 2027 17:35:58 +0000
asID:                     268395
IP address blocks:        45.160.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BY8XH386EyPVJzy6aDQ9f8hWjR9KVXdQTzBGEhpukVTn/0/CE4D1FDDB129DB78C7D09173C95C6AF30690DA42.crl
                          rsync://rpki-repo.registro.br/repo/BY8XH386EyPVJzy6aDQ9f8hWjR9KVXdQTzBGEhpukVTn/0/CE4D1FDDB129DB78C7D09173C95C6AF30690DA42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4D1FDDB129DB78C7D09173C95C6AF30690DA42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 08:59:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:fd:c0:7d:5f:8e:2b:90:85:e9:3d:a7:3f:89:91:da:f9:a1:3d:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE4D1FDDB129DB78C7D09173C95C6AF30690DA42
        Validity
            Not Before: Jun  9 17:30:58 2026 GMT
            Not After : Jun  8 17:35:58 2027 GMT
        Subject: CN=BC948AB917F71F7C9CF1C645E830DFF79664B512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f9:52:8c:e6:f4:9a:c5:4b:47:39:b7:4b:03:
                    a4:58:a1:fd:01:a7:ec:7c:a3:d3:da:60:17:40:e8:
                    19:c6:6f:75:58:c7:93:b1:3b:ef:25:83:ba:31:8b:
                    f3:df:97:67:06:75:6b:59:6f:dd:a8:bc:77:5d:ec:
                    2f:39:c5:b5:ee:89:ac:28:45:1a:fe:7a:8c:59:fb:
                    48:52:d2:60:55:b3:b5:67:a9:79:59:e4:06:5c:4c:
                    44:f6:04:1a:8b:45:2c:a2:30:a7:7e:eb:af:3c:3e:
                    51:34:aa:bb:16:70:35:a0:e9:42:53:52:57:89:b6:
                    55:fc:73:ba:d8:d9:87:75:c0:c4:71:91:b7:02:94:
                    a3:98:28:a5:7d:d3:69:71:65:6b:19:c4:f4:64:28:
                    db:86:e0:e4:a3:2c:59:72:98:d9:6a:f1:91:d6:fe:
                    d5:1a:fc:95:5f:a9:8b:a2:02:5a:07:9c:be:76:3e:
                    75:fe:c5:01:ff:13:86:98:3f:cf:47:23:be:07:ae:
                    35:85:90:f0:b5:a8:2a:1b:5a:cb:b8:ec:4f:4f:36:
                    90:02:82:8e:20:a6:ef:63:f7:e5:7f:83:1f:ce:bb:
                    34:82:6f:bc:7b:0d:68:2d:d5:b4:3a:b5:7e:da:ec:
                    f6:3c:42:14:b0:dd:9b:90:3e:26:3b:ca:75:1f:0d:
                    98:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:94:8A:B9:17:F7:1F:7C:9C:F1:C6:45:E8:30:DF:F7:96:64:B5:12
            X509v3 Authority Key Identifier:
                keyid:CE:4D:1F:DD:B1:29:DB:78:C7:D0:91:73:C9:5C:6A:F3:06:90:DA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BY8XH386EyPVJzy6aDQ9f8hWjR9KVXdQTzBGEhpukVTn/0/CE4D1FDDB129DB78C7D09173C95C6AF30690DA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4D1FDDB129DB78C7D09173C95C6AF30690DA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BY8XH386EyPVJzy6aDQ9f8hWjR9KVXdQTzBGEhpukVTn/0/34352e3136302e35362e302f32342d3234203d3e20323638333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:d2:e4:84:9f:8e:73:82:29:f3:87:95:06:06:47:52:7e:fe:
         51:b7:2e:36:c9:0c:07:1b:77:0a:07:53:37:b7:6c:2e:85:d6:
         99:69:23:4d:f4:27:c8:14:c0:fa:3a:b8:2e:4f:93:78:1e:c5:
         83:2e:ce:09:db:5f:2d:71:44:26:1a:8e:77:54:4d:7d:27:24:
         a2:a0:45:8e:80:2f:a8:24:7b:97:22:14:ec:f7:fc:9a:ad:4e:
         07:7a:39:61:58:47:5e:6a:30:3a:68:d8:6e:15:24:b3:a2:35:
         06:8f:de:f1:25:82:79:b2:3c:41:90:4f:00:4b:9a:68:1b:3c:
         d2:24:66:ee:32:35:30:37:b8:bb:77:6c:96:61:13:15:7d:4c:
         c0:59:ce:13:60:d0:36:42:46:d1:e2:8f:7d:a1:bb:6f:1f:cf:
         69:06:03:f0:8c:3f:0a:cc:4b:0d:38:14:61:b1:fe:01:cd:29:
         96:86:59:21:e1:52:17:07:b7:91:13:5c:ea:ef:9b:5f:17:76:
         cc:12:c2:35:13:a0:eb:e1:5b:54:1d:f6:47:47:e6:a7:04:ff:
         88:68:db:0e:32:d8:38:c2:15:b5:22:5a:14:77:64:c5:2d:98:
         31:5e:0a:33:8c:a7:06:49:25:42:52:96:23:b6:11:ea:0d:a4:
         f7:52:53:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:36:13 2026 by rpki-client