Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/34352e3136332e3139322e302f32322d3234203d3e20323638353537.roa
File:                     34352e3136332e3139322e302f32322d3234203d3e20323638353537.roa (raw, json)
Hash identifier:          ZU+BH7sj/rTVdXYXrqezz/rucwQpJRftu/ZKxsmPL+g=
Subject key identifier:   23:DA:0C:56:76:60:0A:F0:58:E8:73:06:BD:EE:C8:1F:2A:5C:08:8E
Certificate issuer:       /CN=B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8
Certificate serial:       770D42ABCF29116E170D3C534E54F16E9A6C43FB
Authority key identifier: B0:CA:65:D9:C1:CC:96:DA:8D:04:D5:27:F2:AA:10:BA:40:DF:DF:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/34352e3136332e3139322e302f32322d3234203d3e20323638353537.roa
Signing time:             Mon 18 May 2026 21:01:43 +0000
ROA not before:           Mon 18 May 2026 20:56:43 +0000
ROA not after:            Mon 17 May 2027 21:01:43 +0000
asID:                     268557
IP address blocks:        45.163.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.crl
                          rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 22:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:0d:42:ab:cf:29:11:6e:17:0d:3c:53:4e:54:f1:6e:9a:6c:43:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8
        Validity
            Not Before: May 18 20:56:43 2026 GMT
            Not After : May 17 21:01:43 2027 GMT
        Subject: CN=23DA0C5676600AF058E87306BDEEC81F2A5C088E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e4:6b:d2:6f:43:c7:62:5c:42:66:cc:27:6d:
                    79:de:40:be:62:ca:ae:f9:19:6e:b9:38:84:39:96:
                    b0:fe:f7:98:be:8e:58:91:04:ab:94:11:bb:77:04:
                    d5:c7:73:9e:a7:db:1c:26:22:c4:38:1a:68:a7:35:
                    cc:ca:f2:05:20:4e:28:bb:e6:49:4a:3c:5b:77:ca:
                    64:d4:d5:e6:51:6a:18:25:e7:55:59:7d:5f:fe:94:
                    e1:b1:ac:7d:3d:28:c0:76:c5:63:b3:34:f9:1d:d1:
                    96:d4:50:33:4e:13:2c:fa:e3:1e:d1:45:8e:c2:60:
                    6a:8f:b7:92:b3:d9:61:a0:11:f8:aa:ae:9e:07:81:
                    df:64:7a:01:63:39:e7:b3:97:07:a6:93:c3:ae:1b:
                    0a:e6:53:7d:37:ea:10:3b:c3:c7:ba:0c:1f:98:31:
                    f0:cf:63:bb:11:51:c0:9b:0a:f8:1c:01:1e:8e:2d:
                    88:0e:55:3a:38:a0:a8:e5:41:0c:ba:ad:4b:d6:10:
                    30:b4:46:1f:79:8a:d6:ff:c7:66:5f:60:61:ea:13:
                    c0:5b:a9:40:78:0b:c4:78:37:13:41:d4:be:23:e2:
                    97:b2:42:1c:af:a0:ba:5d:f5:7c:cf:0a:63:22:1d:
                    60:c0:a6:17:2b:4a:a9:b2:b3:e7:a3:3f:d9:05:2b:
                    0e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:DA:0C:56:76:60:0A:F0:58:E8:73:06:BD:EE:C8:1F:2A:5C:08:8E
            X509v3 Authority Key Identifier:
                keyid:B0:CA:65:D9:C1:CC:96:DA:8D:04:D5:27:F2:AA:10:BA:40:DF:DF:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/34352e3136332e3139322e302f32322d3234203d3e20323638353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:d7:d8:c2:a0:c8:54:a7:41:77:87:34:a1:3e:fd:7d:6f:9f:
         a4:68:58:5f:47:1d:3a:bc:c5:37:39:86:78:1e:7f:8a:b3:f0:
         52:b6:5d:15:48:27:4e:43:4c:31:46:59:fa:58:59:00:d4:25:
         e7:b1:3e:b4:df:fd:c5:b0:75:ea:c3:80:3f:e4:84:9c:91:93:
         e6:d4:14:54:c4:f9:bc:4b:ed:2e:71:b0:cd:78:0d:12:3f:cb:
         c8:c1:5e:57:2f:e4:4b:d7:2e:fd:75:5b:9e:4d:4b:96:4b:43:
         d4:53:cb:2d:e5:55:77:27:55:4c:16:01:ac:32:52:d8:50:1f:
         aa:31:7e:16:ea:ad:8d:7c:f9:17:de:46:60:6a:ba:0d:4d:d0:
         f0:85:b2:1e:5d:7b:90:cb:03:39:0a:30:b9:38:9f:eb:c6:37:
         44:73:b6:21:ac:02:0b:93:a7:01:07:a5:1d:51:41:99:90:ca:
         fb:40:39:73:b5:29:7e:61:17:65:d2:2f:65:13:a8:09:d2:8a:
         42:b3:d9:e1:fb:46:42:76:59:49:10:c4:53:fb:ab:6f:ae:51:
         10:a5:d7:ce:82:f9:7d:ee:a4:ac:2f:1c:e9:d1:18:4d:b2:95:
         3c:81:8f:b9:6b:e8:bf:05:b1:60:2e:a4:b4:9d:0d:63:e4:59:
         c5:80:0c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:56:24 2026 by rpki-client