Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bk1A8mkEcjfxosBHuo5DGx8nutsvfqahJikHN8pYWY1G/0/34352e3137352e3138362e302f32342d3234203d3e203533313037.roa
File:                     34352e3137352e3138362e302f32342d3234203d3e203533313037.roa (raw, json)
Hash identifier:          TDKM7mlyWMl1bdmoefhenWxnjDPpxwsnod0cX3r+ed0=
Subject key identifier:   8D:AB:1B:A1:70:BF:64:79:CE:CC:1F:62:34:4A:27:7F:CE:59:4A:64
Certificate issuer:       /CN=51C7BA1E3942705B2F09644F9699345322A65D7B
Certificate serial:       45A1AFCF5990E8C0B46539066A2FD13005AC56A4
Authority key identifier: 51:C7:BA:1E:39:42:70:5B:2F:09:64:4F:96:99:34:53:22:A6:5D:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51C7BA1E3942705B2F09644F9699345322A65D7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bk1A8mkEcjfxosBHuo5DGx8nutsvfqahJikHN8pYWY1G/0/34352e3137352e3138362e302f32342d3234203d3e203533313037.roa
Signing time:             Thu 09 Apr 2026 18:47:31 +0000
ROA not before:           Thu 09 Apr 2026 18:42:31 +0000
ROA not after:            Thu 08 Apr 2027 18:47:31 +0000
asID:                     53107
IP address blocks:        45.175.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bk1A8mkEcjfxosBHuo5DGx8nutsvfqahJikHN8pYWY1G/0/51C7BA1E3942705B2F09644F9699345322A65D7B.crl
                          rsync://rpki-repo.registro.br/repo/Bk1A8mkEcjfxosBHuo5DGx8nutsvfqahJikHN8pYWY1G/0/51C7BA1E3942705B2F09644F9699345322A65D7B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51C7BA1E3942705B2F09644F9699345322A65D7B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 11:19:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:a1:af:cf:59:90:e8:c0:b4:65:39:06:6a:2f:d1:30:05:ac:56:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51C7BA1E3942705B2F09644F9699345322A65D7B
        Validity
            Not Before: Apr  9 18:42:31 2026 GMT
            Not After : Apr  8 18:47:31 2027 GMT
        Subject: CN=8DAB1BA170BF6479CECC1F62344A277FCE594A64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:94:d0:71:c9:3c:ed:09:77:f7:53:47:05:18:
                    fb:c4:95:de:86:43:55:8a:18:1e:f2:b8:b2:35:17:
                    c7:4b:30:fb:de:cd:b7:53:5e:fc:1c:5b:d0:ce:6d:
                    1a:d5:87:3d:7a:0a:e6:77:a4:e9:11:5b:f6:08:98:
                    57:5c:b9:90:d7:1b:78:be:ca:8c:8c:07:18:04:47:
                    00:17:53:4b:c7:b7:8e:41:39:44:15:31:96:c7:ff:
                    14:dc:20:2a:87:73:76:21:eb:8c:96:33:b4:ed:f4:
                    da:bc:a7:59:52:2b:96:39:2f:8a:04:66:23:bb:c0:
                    b8:b7:38:17:ac:fe:3e:f6:0b:9f:49:ec:35:97:a1:
                    78:b2:2e:4e:b8:37:4a:ff:22:b0:2a:df:15:96:39:
                    04:23:b4:56:89:6c:ab:94:4a:dc:21:d5:4d:f8:5d:
                    be:33:bd:27:10:a2:d0:10:83:0e:6f:8d:59:08:a3:
                    4b:8f:5e:39:fb:b7:90:0d:2d:75:73:dd:93:3c:51:
                    16:99:45:a7:fc:2d:2b:c6:46:35:c8:de:61:f2:41:
                    c0:a5:d4:a1:7e:b4:ef:3d:8a:5e:29:33:8e:56:5e:
                    56:fc:ff:23:88:ee:67:29:c3:29:ad:bb:69:69:32:
                    da:1e:9b:c5:67:15:77:19:9e:cf:b5:85:e4:87:cb:
                    4a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:AB:1B:A1:70:BF:64:79:CE:CC:1F:62:34:4A:27:7F:CE:59:4A:64
            X509v3 Authority Key Identifier:
                keyid:51:C7:BA:1E:39:42:70:5B:2F:09:64:4F:96:99:34:53:22:A6:5D:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bk1A8mkEcjfxosBHuo5DGx8nutsvfqahJikHN8pYWY1G/0/51C7BA1E3942705B2F09644F9699345322A65D7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51C7BA1E3942705B2F09644F9699345322A65D7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bk1A8mkEcjfxosBHuo5DGx8nutsvfqahJikHN8pYWY1G/0/34352e3137352e3138362e302f32342d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:26:b8:a8:94:db:9a:9c:4d:51:a9:3f:d6:02:52:de:fd:b6:
         7f:46:62:6a:95:a0:1b:79:43:dd:79:1b:ca:b0:17:3f:39:d9:
         c8:26:0f:88:22:8f:8f:5c:7e:9c:4e:f0:f2:da:bb:3a:6d:ad:
         8a:ae:f1:fb:bc:80:15:00:83:9f:57:40:a2:f0:85:22:c9:f9:
         2a:2f:ba:2f:a6:86:3c:b3:35:77:a2:72:c2:eb:b3:54:90:d0:
         ff:e7:0f:fa:04:61:fb:54:54:94:c4:b3:7c:56:b6:45:fa:c9:
         66:e8:68:0d:63:20:48:0f:30:bd:0a:1b:88:06:b5:43:2b:c8:
         19:61:ce:32:8c:65:e0:4a:4a:19:f3:a8:a3:7b:5e:fe:6a:27:
         b7:96:2e:e1:b7:99:ef:c3:22:09:44:46:2e:38:94:b5:ef:4b:
         1a:2e:dc:db:a9:11:5d:40:7f:a1:39:cd:08:e1:f3:69:f2:32:
         1e:d8:6a:3f:4b:d3:bc:22:d8:04:10:51:9a:c2:87:06:f6:30:
         c6:74:20:4a:e9:ea:74:2f:7c:b5:cb:bb:d9:08:f0:52:c2:1f:
         cf:4d:4f:d4:d2:02:17:6b:12:b9:5e:94:1e:1b:95:ab:4b:5f:
         ee:55:4a:66:19:85:46:cd:de:33:92:8a:78:c5:11:ed:02:29:
         55:7c:e9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:06:49 2026 by rpki-client