Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/34352e3136312e3139332e302f32342d3234203d3e20323638343831.roa
File:                     34352e3136312e3139332e302f32342d3234203d3e20323638343831.roa (raw, json)
Hash identifier:          RHlBUjwlKoYaR+a+mwz+WZbUdGpgoGM8wpXWwIut5ZQ=
Subject key identifier:   CF:50:82:57:9F:DD:20:68:2A:63:93:D9:A3:3D:E5:86:DA:93:A5:98
Certificate issuer:       /CN=85154D17EB56420277A0D6D3168ECEB7B88CD654
Certificate serial:       72511775CF34DD7A16592B6726D5A2B9D523AE6E
Authority key identifier: 85:15:4D:17:EB:56:42:02:77:A0:D6:D3:16:8E:CE:B7:B8:8C:D6:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85154D17EB56420277A0D6D3168ECEB7B88CD654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/34352e3136312e3139332e302f32342d3234203d3e20323638343831.roa
Signing time:             Fri 12 Jun 2026 15:05:26 +0000
ROA not before:           Fri 12 Jun 2026 15:00:26 +0000
ROA not after:            Fri 11 Jun 2027 15:05:26 +0000
asID:                     268481
IP address blocks:        45.161.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/85154D17EB56420277A0D6D3168ECEB7B88CD654.crl
                          rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/85154D17EB56420277A0D6D3168ECEB7B88CD654.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85154D17EB56420277A0D6D3168ECEB7B88CD654.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 03:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:51:17:75:cf:34:dd:7a:16:59:2b:67:26:d5:a2:b9:d5:23:ae:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85154D17EB56420277A0D6D3168ECEB7B88CD654
        Validity
            Not Before: Jun 12 15:00:26 2026 GMT
            Not After : Jun 11 15:05:26 2027 GMT
        Subject: CN=CF5082579FDD20682A6393D9A33DE586DA93A598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:86:07:12:3d:32:cd:90:a2:5e:f4:bf:e8:9d:
                    bd:0c:66:ef:a4:30:77:0f:82:56:0b:42:1d:a1:db:
                    26:cd:50:d3:66:1e:d1:a5:28:6c:a6:c6:92:14:c5:
                    2b:36:7c:28:27:33:58:f7:57:62:d4:a1:ce:4a:4f:
                    31:e7:b0:33:28:a7:40:90:1e:d9:56:f6:6a:05:81:
                    85:74:f5:c8:85:94:4f:19:29:bf:2b:0b:66:5b:8d:
                    f1:01:14:8f:39:ad:de:3b:bd:6a:0a:62:e3:fa:8b:
                    5b:c1:8e:7b:03:d8:44:55:09:86:88:cd:25:42:1e:
                    a1:7f:e8:28:ab:44:bb:50:73:8b:0f:70:6c:1c:ae:
                    6a:79:d1:ce:fe:1e:7b:f0:97:6c:b6:a4:04:89:64:
                    da:3d:b3:6d:e0:5f:4b:c7:8d:c6:1f:77:ad:44:57:
                    07:7f:46:60:45:7a:51:77:06:d1:55:4b:8d:88:60:
                    73:a0:4d:59:e8:55:a2:31:98:d0:24:9d:94:15:14:
                    39:a8:39:c4:29:4f:8b:9f:6c:03:8f:e9:a1:20:ce:
                    9c:d3:3d:cc:36:7f:7a:50:3b:d4:75:b7:92:e5:13:
                    84:c6:1d:13:19:db:1a:d8:d2:30:38:6a:9e:8f:99:
                    07:97:88:a3:bf:f8:5b:79:1d:61:33:62:53:8d:61:
                    e6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:50:82:57:9F:DD:20:68:2A:63:93:D9:A3:3D:E5:86:DA:93:A5:98
            X509v3 Authority Key Identifier:
                keyid:85:15:4D:17:EB:56:42:02:77:A0:D6:D3:16:8E:CE:B7:B8:8C:D6:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/85154D17EB56420277A0D6D3168ECEB7B88CD654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85154D17EB56420277A0D6D3168ECEB7B88CD654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/34352e3136312e3139332e302f32342d3234203d3e20323638343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:6a:1e:72:92:2b:41:4d:fb:d7:e1:31:35:1c:ca:38:c5:0b:
         2a:c1:d3:ab:c4:f2:92:f5:98:22:d8:55:a9:3e:db:12:d8:82:
         88:49:0f:82:2b:e4:78:3c:85:5e:ec:c5:e5:81:25:70:21:3e:
         fe:24:0b:f1:48:96:d1:88:47:06:8f:c6:38:6b:9d:73:e1:60:
         59:c0:9f:36:a5:e8:53:a0:85:69:d3:7f:f4:68:9d:c2:a3:b0:
         65:fb:b5:cd:0e:53:fd:f6:66:02:1f:ca:d3:65:ba:fc:08:ad:
         18:ed:35:a7:21:7e:f3:b9:49:af:92:10:b2:7b:53:bd:53:18:
         e9:d4:7d:f9:3f:5c:a6:10:68:30:2d:48:de:16:4f:ca:09:3b:
         f7:94:97:7d:62:c2:9c:db:3f:43:69:22:16:db:e6:3f:a1:fb:
         54:89:8c:9c:7e:9b:20:b9:8c:2f:75:86:dd:53:50:12:90:b2:
         eb:17:87:d3:e6:37:38:3f:04:ca:20:73:41:0d:54:d4:75:9f:
         4d:16:76:11:54:2a:b1:30:eb:f2:0b:c2:78:f3:3b:64:99:70:
         24:e1:00:46:0a:ad:91:74:7d:cd:c9:08:6b:05:d1:75:39:95:
         67:26:a2:9a:f6:71:42:a3:e6:ae:ee:95:20:76:64:96:fb:76:
         0c:08:df:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:15:34 2026 by rpki-client