Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/34352e3138382e3138342e302f32322d3332203d3e20323639353330.roa
File:                     34352e3138382e3138342e302f32322d3332203d3e20323639353330.roa (raw, json)
Hash identifier:          1fvjbFeRBaGR+Oe6/WL6Z3uR+bPdye5c+qC0UTeqGNY=
Subject key identifier:   DC:E1:53:E6:8B:57:06:14:E7:D8:3C:E6:67:0C:EC:43:F9:7C:11:74
Certificate issuer:       /CN=D17A867E17AF52B6470057E488A4ACCBD13B57BF
Certificate serial:       0632193F06C2532962E76147A95CB77C681D6A1F
Authority key identifier: D1:7A:86:7E:17:AF:52:B6:47:00:57:E4:88:A4:AC:CB:D1:3B:57:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D17A867E17AF52B6470057E488A4ACCBD13B57BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/34352e3138382e3138342e302f32322d3332203d3e20323639353330.roa
Signing time:             Mon 08 Jun 2026 20:41:56 +0000
ROA not before:           Mon 08 Jun 2026 20:36:56 +0000
ROA not after:            Mon 07 Jun 2027 20:41:56 +0000
asID:                     269530
IP address blocks:        45.188.184.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/D17A867E17AF52B6470057E488A4ACCBD13B57BF.crl
                          rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/D17A867E17AF52B6470057E488A4ACCBD13B57BF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D17A867E17AF52B6470057E488A4ACCBD13B57BF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 02:49:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:32:19:3f:06:c2:53:29:62:e7:61:47:a9:5c:b7:7c:68:1d:6a:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D17A867E17AF52B6470057E488A4ACCBD13B57BF
        Validity
            Not Before: Jun  8 20:36:56 2026 GMT
            Not After : Jun  7 20:41:56 2027 GMT
        Subject: CN=DCE153E68B570614E7D83CE6670CEC43F97C1174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b1:27:d7:06:91:f3:ac:36:ce:53:53:fc:2d:
                    f0:f4:70:85:ea:2c:42:e3:85:7e:6c:44:28:58:72:
                    d6:45:83:77:8d:cc:44:fb:da:f5:ed:e5:bc:f6:32:
                    05:a5:86:e6:3d:95:af:2e:f5:00:24:a7:e1:ae:90:
                    bf:77:bf:b0:33:96:e4:a4:37:1f:e5:d6:d9:78:d2:
                    93:59:cb:18:db:ed:cd:8e:f8:60:12:8c:bb:7e:d1:
                    69:8f:69:5d:fb:fa:20:65:fd:7e:9b:73:3c:95:ca:
                    3a:9d:86:04:b4:29:30:fa:ab:08:a5:ab:15:54:e5:
                    88:db:f8:a7:80:8f:c2:93:89:cf:f6:72:d9:ed:57:
                    16:ef:12:f6:e7:3c:07:1a:ce:7f:c6:bb:cb:01:6b:
                    f2:72:18:b0:c0:81:75:7a:90:0a:4f:08:b4:6c:41:
                    fb:8f:5b:af:c8:1a:50:fb:68:32:42:b0:44:74:29:
                    5b:73:9d:bf:d2:15:ff:7b:e2:ac:4c:b5:4b:e9:75:
                    0c:4b:7a:28:7e:2c:22:56:38:90:47:1e:0f:7d:c3:
                    89:1a:ea:f8:28:53:5c:a7:9b:e7:6e:10:9e:59:30:
                    e5:d8:27:69:91:37:18:6b:82:92:c8:c6:5b:14:f4:
                    65:2a:7a:9e:ed:c1:95:f8:38:fe:c1:bd:04:7c:17:
                    12:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E1:53:E6:8B:57:06:14:E7:D8:3C:E6:67:0C:EC:43:F9:7C:11:74
            X509v3 Authority Key Identifier:
                keyid:D1:7A:86:7E:17:AF:52:B6:47:00:57:E4:88:A4:AC:CB:D1:3B:57:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/D17A867E17AF52B6470057E488A4ACCBD13B57BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D17A867E17AF52B6470057E488A4ACCBD13B57BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/34352e3138382e3138342e302f32322d3332203d3e20323639353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:ba:fe:ce:c0:d9:6f:61:b6:bb:af:86:e0:10:46:1c:17:58:
         b3:a2:10:04:84:76:28:e4:2b:d5:9b:ac:80:7e:9d:49:36:5b:
         37:bb:a6:97:c3:2a:f7:63:5f:78:fe:37:9d:b9:61:f7:59:a2:
         42:b4:1f:f2:0a:57:6b:45:4e:2f:8f:72:6b:d5:f0:45:d1:80:
         8b:cf:96:a9:f0:51:32:ea:5a:ac:0a:17:21:39:e0:87:78:f3:
         d0:21:8c:2c:c1:1c:bb:a5:66:17:9e:ae:a4:79:ec:7b:9c:ad:
         c8:c2:bd:5e:97:41:00:58:7e:78:42:b3:8b:3c:85:17:7f:8b:
         e7:3b:bf:2a:02:4f:2c:2b:8b:dc:9c:f0:e9:ce:47:7a:27:c3:
         02:7e:cd:78:e5:fa:b5:75:8a:96:22:02:da:a2:7c:0e:97:9d:
         eb:0a:66:61:9d:14:dd:38:4a:4a:83:99:88:eb:c7:73:fb:81:
         d1:f4:3b:64:48:13:c0:6e:82:ce:cc:62:bc:bd:b0:0e:91:cf:
         90:4c:90:21:ab:98:6e:de:28:cb:d0:b6:9c:d6:95:9e:71:40:
         6c:e6:c9:97:86:da:e4:21:e6:5e:e9:25:be:94:d4:99:53:82:
         ad:a7:f8:49:b0:cc:9a:c4:de:fa:41:41:6e:4b:ed:02:30:77:
         d8:7c:d9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:16:49 2026 by rpki-client