Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BiMVDfTQM5beVkx5brAwNa1B1iXz4wwJLXM5B9UFpJcm/0/34352e3136332e31362e302f32342d3234203d3e20323638363434.roa
File:                     34352e3136332e31362e302f32342d3234203d3e20323638363434.roa (raw, json)
Hash identifier:          prxQSYz2hsSmGmLAw6LLfeUfOBDq18Iq8CBDYkx9JBg=
Subject key identifier:   C5:F3:98:65:26:2B:E5:E8:29:41:E8:29:67:79:01:D3:62:21:32:F7
Certificate issuer:       /CN=B95DA4500CFC4EB3787FB5C9BE7068045664997E
Certificate serial:       67966255335833EBB5AEC46937BE3157732A425B
Authority key identifier: B9:5D:A4:50:0C:FC:4E:B3:78:7F:B5:C9:BE:70:68:04:56:64:99:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B95DA4500CFC4EB3787FB5C9BE7068045664997E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BiMVDfTQM5beVkx5brAwNa1B1iXz4wwJLXM5B9UFpJcm/0/34352e3136332e31362e302f32342d3234203d3e20323638363434.roa
Signing time:             Fri 29 May 2026 00:28:52 +0000
ROA not before:           Fri 29 May 2026 00:23:52 +0000
ROA not after:            Fri 28 May 2027 00:28:52 +0000
asID:                     268644
IP address blocks:        45.163.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BiMVDfTQM5beVkx5brAwNa1B1iXz4wwJLXM5B9UFpJcm/0/B95DA4500CFC4EB3787FB5C9BE7068045664997E.crl
                          rsync://rpki-repo.registro.br/repo/BiMVDfTQM5beVkx5brAwNa1B1iXz4wwJLXM5B9UFpJcm/0/B95DA4500CFC4EB3787FB5C9BE7068045664997E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B95DA4500CFC4EB3787FB5C9BE7068045664997E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 03:50:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:96:62:55:33:58:33:eb:b5:ae:c4:69:37:be:31:57:73:2a:42:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B95DA4500CFC4EB3787FB5C9BE7068045664997E
        Validity
            Not Before: May 29 00:23:52 2026 GMT
            Not After : May 28 00:28:52 2027 GMT
        Subject: CN=C5F39865262BE5E82941E829677901D3622132F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b0:06:af:bc:2d:ce:7f:e6:54:c4:77:b5:80:
                    fa:ff:5a:d5:b3:47:da:b9:dc:e8:a2:23:5f:fc:80:
                    20:19:75:79:79:37:05:44:2e:13:f5:c0:eb:c9:c0:
                    2e:37:9c:c5:09:6d:29:48:89:b3:e9:81:69:24:93:
                    59:0a:70:58:4d:c6:4b:ba:f2:83:b1:79:42:8e:a4:
                    86:8c:3e:3a:31:ac:15:a4:83:ba:d2:2c:bd:61:11:
                    f2:9b:68:ee:4e:9e:b3:dd:29:10:91:17:d2:b2:b5:
                    e6:bb:de:50:67:0d:c7:23:bd:f1:4f:5e:6b:16:47:
                    e1:a5:71:ff:2f:d9:09:d9:f9:24:21:e6:b6:d1:c6:
                    db:7f:18:31:06:81:18:c4:7a:21:4a:19:d4:17:b9:
                    ea:40:00:0d:69:48:2c:41:04:fa:0e:0d:26:09:c1:
                    c0:45:8d:76:35:c4:62:93:fa:ef:cf:36:03:9e:96:
                    a4:c5:ba:a1:00:c8:ed:99:ff:d8:c0:d8:19:e1:3c:
                    fe:7e:66:eb:01:a4:9b:61:c8:54:26:2f:6b:6c:75:
                    be:f5:f5:ef:29:e7:8b:68:b2:98:46:cd:a4:ef:8c:
                    98:60:c4:8d:4f:38:2f:0f:f5:95:f9:34:d6:29:df:
                    78:94:be:f9:ab:d7:1f:3d:19:48:60:e0:92:b3:60:
                    7f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F3:98:65:26:2B:E5:E8:29:41:E8:29:67:79:01:D3:62:21:32:F7
            X509v3 Authority Key Identifier:
                keyid:B9:5D:A4:50:0C:FC:4E:B3:78:7F:B5:C9:BE:70:68:04:56:64:99:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BiMVDfTQM5beVkx5brAwNa1B1iXz4wwJLXM5B9UFpJcm/0/B95DA4500CFC4EB3787FB5C9BE7068045664997E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B95DA4500CFC4EB3787FB5C9BE7068045664997E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BiMVDfTQM5beVkx5brAwNa1B1iXz4wwJLXM5B9UFpJcm/0/34352e3136332e31362e302f32342d3234203d3e20323638363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:f4:f4:7a:79:3d:9d:5f:48:1f:8b:85:c3:ba:97:bc:79:ee:
         79:20:42:66:28:3b:87:20:19:c5:da:47:a5:2f:56:30:c1:94:
         9e:8e:07:b8:f9:ed:bc:8c:4b:d6:90:8c:3c:db:bf:f4:01:d3:
         58:d8:27:ff:1c:a3:a2:ea:e0:da:f8:0f:27:b9:53:c2:f0:f1:
         1e:66:69:f9:f3:6d:88:e0:de:01:05:54:a4:d7:69:6e:20:b4:
         01:bd:5e:c5:ba:cb:f8:c4:9b:ad:06:7b:00:ba:7a:e9:50:0b:
         c1:05:2b:03:88:4c:5f:0f:73:f0:5b:1a:b6:2e:96:1d:cc:13:
         d0:db:13:34:5c:f4:24:42:3d:db:5e:5f:f6:10:f1:b2:d9:5b:
         21:28:93:4c:39:b2:7b:9e:68:d4:c7:a5:f2:42:a0:06:69:31:
         4c:41:87:85:5d:4d:b2:6d:33:58:cd:9a:76:28:e8:1f:61:0a:
         3e:81:5b:d7:00:2c:b6:71:3e:c5:87:01:d8:51:72:b7:05:8d:
         6b:46:b8:f4:17:c8:ba:c2:b3:3f:93:ce:53:2f:01:16:d2:28:
         09:a8:45:c5:64:74:24:a5:f0:32:06:3a:dd:44:c5:0b:b0:47:
         59:7d:32:79:89:19:7f:f2:4d:db:82:66:bf:30:70:dd:8e:3a:
         1e:06:c3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:58:09 2026 by rpki-client