Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ENUz4iakany2yxvUkeZzLRxoWwCCvxKNSCbBAoKsnbkn/0/34352e3233342e3139392e302f32342d3234203d3e20323637333834.roa
File:                     34352e3233342e3139392e302f32342d3234203d3e20323637333834.roa (raw, json)
Hash identifier:          pnOVBzIcXoZey+nfgkBg1GefL0+xFdumhH3ZFHMWLbg=
Subject key identifier:   CB:37:EC:B7:2E:E1:D8:16:0B:24:87:5E:6A:40:9C:31:40:1D:75:E8
Certificate issuer:       /CN=9E59DF3AA037619983782349ADD1B34802F0330A
Certificate serial:       42D801F7C5422D8BAD6242418A7BD05E926BB94D
Authority key identifier: 9E:59:DF:3A:A0:37:61:99:83:78:23:49:AD:D1:B3:48:02:F0:33:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E59DF3AA037619983782349ADD1B34802F0330A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ENUz4iakany2yxvUkeZzLRxoWwCCvxKNSCbBAoKsnbkn/0/34352e3233342e3139392e302f32342d3234203d3e20323637333834.roa
Signing time:             Tue 09 Jun 2026 17:28:44 +0000
ROA not before:           Tue 09 Jun 2026 17:23:44 +0000
ROA not after:            Tue 08 Jun 2027 17:28:44 +0000
asID:                     267384
IP address blocks:        45.234.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ENUz4iakany2yxvUkeZzLRxoWwCCvxKNSCbBAoKsnbkn/0/9E59DF3AA037619983782349ADD1B34802F0330A.crl
                          rsync://rpki-repo.registro.br/repo/ENUz4iakany2yxvUkeZzLRxoWwCCvxKNSCbBAoKsnbkn/0/9E59DF3AA037619983782349ADD1B34802F0330A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E59DF3AA037619983782349ADD1B34802F0330A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 15:58:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:d8:01:f7:c5:42:2d:8b:ad:62:42:41:8a:7b:d0:5e:92:6b:b9:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E59DF3AA037619983782349ADD1B34802F0330A
        Validity
            Not Before: Jun  9 17:23:44 2026 GMT
            Not After : Jun  8 17:28:44 2027 GMT
        Subject: CN=CB37ECB72EE1D8160B24875E6A409C31401D75E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e8:91:77:02:99:7c:f8:0f:b6:a3:5d:4e:72:
                    99:ed:20:7b:49:9f:4a:93:43:af:b6:f9:a2:1a:54:
                    8d:0a:2b:4a:2a:2f:ac:ee:cc:87:c5:ed:2e:b7:eb:
                    16:e8:ec:e5:b0:9b:05:27:d8:0e:2d:40:1d:5d:d8:
                    b0:3f:17:d8:3c:00:ef:a2:7d:ff:f5:87:62:4d:15:
                    36:b5:30:01:cd:d9:a2:ad:f6:27:df:5b:f0:3d:2a:
                    e2:b7:8d:e9:42:b7:d6:2d:72:66:81:b5:ac:ab:94:
                    de:32:66:55:70:42:91:61:68:57:59:c3:ca:69:70:
                    aa:93:31:6a:69:fe:27:2a:e8:fc:e6:6e:ca:9d:17:
                    54:11:78:bf:ba:80:f1:6f:43:6d:1c:84:bc:ef:cc:
                    bc:43:9e:ab:58:81:98:2b:d2:c1:48:63:ff:5d:69:
                    ad:c8:06:79:b3:c5:7d:87:79:7f:ef:1f:24:5a:74:
                    9f:55:36:ba:96:91:47:f7:77:6a:c7:94:25:96:93:
                    3d:e9:e3:2c:35:ea:71:11:82:4e:3b:92:d9:80:0f:
                    b4:c9:0c:08:24:db:00:67:60:92:8a:13:94:72:7b:
                    05:fd:a1:50:ee:2d:97:ee:c4:aa:36:36:e3:8c:b3:
                    84:4f:42:c2:8e:5e:73:ee:e2:15:7d:2c:bc:ae:4b:
                    d5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:37:EC:B7:2E:E1:D8:16:0B:24:87:5E:6A:40:9C:31:40:1D:75:E8
            X509v3 Authority Key Identifier:
                keyid:9E:59:DF:3A:A0:37:61:99:83:78:23:49:AD:D1:B3:48:02:F0:33:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ENUz4iakany2yxvUkeZzLRxoWwCCvxKNSCbBAoKsnbkn/0/9E59DF3AA037619983782349ADD1B34802F0330A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E59DF3AA037619983782349ADD1B34802F0330A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ENUz4iakany2yxvUkeZzLRxoWwCCvxKNSCbBAoKsnbkn/0/34352e3233342e3139392e302f32342d3234203d3e20323637333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:f6:74:85:76:3c:ed:a4:50:83:93:4e:6a:4b:74:26:5d:6c:
         eb:9c:a1:bf:30:30:e1:90:2e:a1:fa:57:98:6a:ed:f0:69:6d:
         07:1c:62:ac:6d:24:dd:b2:3a:a8:b4:6f:42:48:33:ab:59:81:
         e8:2f:3c:e6:2b:86:9a:01:31:12:7e:1a:89:35:39:f8:3c:69:
         0a:d1:b3:a5:35:79:1f:4e:0b:e9:05:5a:50:69:06:b2:9d:07:
         06:2c:84:62:2f:2c:79:a6:7c:f1:86:39:da:df:c9:ae:e6:ed:
         9e:bf:0b:2f:20:f7:e3:df:25:21:80:24:2e:fe:1c:70:03:00:
         a1:3f:84:1d:ce:55:4e:d9:38:5f:fc:db:ca:b5:22:f2:b6:88:
         90:ab:71:94:9e:d5:67:05:a7:bb:fd:11:69:05:62:45:f7:5c:
         0e:17:7b:26:69:09:6c:31:59:fe:f2:21:17:75:c9:eb:4f:ba:
         d7:3a:7e:a6:cf:f8:d0:16:17:68:5e:19:2e:8c:82:ce:44:22:
         f0:63:c0:c5:27:e5:17:9d:4a:5e:29:a6:97:53:9f:f3:fc:96:
         aa:a3:39:b1:07:9d:20:ea:0d:f7:3f:09:23:d0:d8:bf:44:f4:
         df:b4:7d:57:6b:23:5d:b4:1e:70:35:05:ae:2c:eb:92:de:a4:
         a3:f9:21:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:57:38 2026 by rpki-client