Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BY8XH386EyPVJzy6aDQ9f8hWjR9KVXdQTzBGEhpukVTn/0/34352e3136302e35382e302f32342d3234203d3e20323638333935.roa
File:                     34352e3136302e35382e302f32342d3234203d3e20323638333935.roa (raw, json)
Hash identifier:          hB/rmNf1xJuCmJ40QVmM4PfsWw45kD3kCxLr6VHr9qI=
Subject key identifier:   DF:5F:03:09:3A:AF:7C:BB:CD:05:E8:56:64:63:1F:AD:AA:23:6D:43
Certificate issuer:       /CN=CE4D1FDDB129DB78C7D09173C95C6AF30690DA42
Certificate serial:       31D0998CD5CCD98E662811498031E05B69779B0B
Authority key identifier: CE:4D:1F:DD:B1:29:DB:78:C7:D0:91:73:C9:5C:6A:F3:06:90:DA:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4D1FDDB129DB78C7D09173C95C6AF30690DA42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BY8XH386EyPVJzy6aDQ9f8hWjR9KVXdQTzBGEhpukVTn/0/34352e3136302e35382e302f32342d3234203d3e20323638333935.roa
Signing time:             Tue 09 Jun 2026 17:35:58 +0000
ROA not before:           Tue 09 Jun 2026 17:30:58 +0000
ROA not after:            Tue 08 Jun 2027 17:35:58 +0000
asID:                     268395
IP address blocks:        45.160.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BY8XH386EyPVJzy6aDQ9f8hWjR9KVXdQTzBGEhpukVTn/0/CE4D1FDDB129DB78C7D09173C95C6AF30690DA42.crl
                          rsync://rpki-repo.registro.br/repo/BY8XH386EyPVJzy6aDQ9f8hWjR9KVXdQTzBGEhpukVTn/0/CE4D1FDDB129DB78C7D09173C95C6AF30690DA42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4D1FDDB129DB78C7D09173C95C6AF30690DA42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 08:59:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d0:99:8c:d5:cc:d9:8e:66:28:11:49:80:31:e0:5b:69:77:9b:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE4D1FDDB129DB78C7D09173C95C6AF30690DA42
        Validity
            Not Before: Jun  9 17:30:58 2026 GMT
            Not After : Jun  8 17:35:58 2027 GMT
        Subject: CN=DF5F03093AAF7CBBCD05E85664631FADAA236D43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:54:fc:61:2f:cc:19:98:bf:58:01:a9:a2:ce:
                    33:a1:06:81:a8:5e:3a:1f:55:49:a1:7b:48:ad:3f:
                    a3:ed:cb:0b:21:01:d9:ae:82:22:28:b1:75:e3:7c:
                    db:fb:c7:dd:a6:e7:ad:50:07:86:5b:4d:32:c9:69:
                    4e:0b:9f:04:20:a4:2d:fb:dd:bc:e6:c7:e6:de:4b:
                    2b:89:1d:59:24:94:6f:6b:47:1e:a6:69:42:6d:a8:
                    ae:c6:6b:5c:d3:ad:61:e5:8b:64:24:1d:17:bc:0c:
                    39:d5:8d:ed:97:b8:12:24:5d:23:39:3e:11:f6:ee:
                    9d:5c:91:52:f0:58:55:2a:82:3b:70:2d:2d:cc:1d:
                    b4:71:9b:f9:f1:92:f9:80:2e:52:a2:e9:6d:2f:12:
                    b5:a7:55:d7:da:78:62:d5:df:85:6c:8d:0d:6e:4c:
                    a6:87:31:2d:7f:28:5d:9a:89:60:ce:e5:ff:71:f9:
                    1f:a8:aa:3b:26:9a:06:e6:a0:c0:3b:11:d4:84:d3:
                    c7:92:33:f9:1f:d7:4b:36:79:0d:2d:4a:e8:52:3f:
                    e3:9c:1a:43:5c:9e:50:79:e3:09:29:e7:8c:73:ea:
                    9a:1f:ce:48:27:59:eb:d6:cf:06:b6:67:c2:ce:73:
                    3d:54:54:00:ff:5f:10:ea:bc:21:45:ae:fb:75:8a:
                    68:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:5F:03:09:3A:AF:7C:BB:CD:05:E8:56:64:63:1F:AD:AA:23:6D:43
            X509v3 Authority Key Identifier:
                keyid:CE:4D:1F:DD:B1:29:DB:78:C7:D0:91:73:C9:5C:6A:F3:06:90:DA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BY8XH386EyPVJzy6aDQ9f8hWjR9KVXdQTzBGEhpukVTn/0/CE4D1FDDB129DB78C7D09173C95C6AF30690DA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4D1FDDB129DB78C7D09173C95C6AF30690DA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BY8XH386EyPVJzy6aDQ9f8hWjR9KVXdQTzBGEhpukVTn/0/34352e3136302e35382e302f32342d3234203d3e20323638333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:14:fd:b5:5e:a1:23:fe:29:1f:32:c5:28:3b:49:d9:9d:38:
         a3:b0:f0:8a:82:3a:ad:ad:89:c1:b6:79:71:07:24:17:8e:e2:
         65:92:9a:ad:89:f8:b3:8a:80:84:cd:b4:af:a0:a0:6f:03:a0:
         1b:32:b7:75:c5:c5:30:d1:73:cc:63:55:1f:9c:18:26:dc:99:
         1f:a8:95:7c:12:2d:bd:7b:13:37:45:13:2f:10:e6:3f:f4:3f:
         10:b1:73:13:c3:8d:96:34:66:0e:bf:16:78:c4:1e:5d:4d:8b:
         76:05:57:2f:de:76:20:99:74:ca:cd:40:07:f6:08:e1:46:86:
         57:89:52:f2:0d:11:c8:c5:9b:48:22:2c:8a:da:47:60:87:a7:
         77:d7:53:61:7f:21:36:ec:53:06:1d:57:c1:16:a8:51:c0:b7:
         91:17:19:84:fe:ca:ba:59:7f:c6:a4:a3:54:5f:69:9e:1f:9d:
         45:68:f1:46:88:2b:54:bd:a3:78:5b:16:f1:4b:28:66:eb:b0:
         de:29:c4:1f:ab:6c:40:85:d0:34:70:3c:07:d8:a7:69:ba:c6:
         10:ed:a2:c7:e8:d2:38:bb:7b:76:21:6b:26:06:2f:3a:25:d3:
         7b:53:31:24:29:c6:09:a4:42:2d:11:98:00:ef:e3:74:cd:c7:
         07:8c:b3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:36:13 2026 by rpki-client