Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/34352e3136312e3139342e302f32342d3234203d3e20323638343831.roa
File:                     34352e3136312e3139342e302f32342d3234203d3e20323638343831.roa (raw, json)
Hash identifier:          2Jmhu16jNEb/Jmotf6nH0bYdzuUI3e0KtUetDAh8CNU=
Subject key identifier:   20:26:88:BA:16:8B:BF:8C:5C:98:03:7F:3E:D0:8C:D2:2C:88:0F:BD
Certificate issuer:       /CN=85154D17EB56420277A0D6D3168ECEB7B88CD654
Certificate serial:       72FA5C3A62E658B0CF6EFF40E4EF29F7C3DD7CA0
Authority key identifier: 85:15:4D:17:EB:56:42:02:77:A0:D6:D3:16:8E:CE:B7:B8:8C:D6:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85154D17EB56420277A0D6D3168ECEB7B88CD654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/34352e3136312e3139342e302f32342d3234203d3e20323638343831.roa
Signing time:             Fri 12 Jun 2026 15:05:26 +0000
ROA not before:           Fri 12 Jun 2026 15:00:26 +0000
ROA not after:            Fri 11 Jun 2027 15:05:26 +0000
asID:                     268481
IP address blocks:        45.161.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/85154D17EB56420277A0D6D3168ECEB7B88CD654.crl
                          rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/85154D17EB56420277A0D6D3168ECEB7B88CD654.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85154D17EB56420277A0D6D3168ECEB7B88CD654.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 03:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:fa:5c:3a:62:e6:58:b0:cf:6e:ff:40:e4:ef:29:f7:c3:dd:7c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85154D17EB56420277A0D6D3168ECEB7B88CD654
        Validity
            Not Before: Jun 12 15:00:26 2026 GMT
            Not After : Jun 11 15:05:26 2027 GMT
        Subject: CN=202688BA168BBF8C5C98037F3ED08CD22C880FBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3b:5f:2a:b1:f0:64:62:c5:1d:e7:d2:f3:57:
                    80:2b:68:02:c0:d9:0c:f9:04:5d:7b:7b:2c:78:23:
                    93:f2:8e:42:01:62:a9:75:76:4d:62:45:dc:d6:92:
                    29:83:79:ed:f6:1c:d8:94:a7:78:7f:ce:87:30:85:
                    71:1d:19:b5:2f:48:0c:b7:55:22:85:6e:6a:64:29:
                    ef:13:ab:29:2f:a3:cd:4c:b3:dd:f7:64:43:ec:4d:
                    a5:73:60:a9:c5:93:97:6b:5a:96:4c:35:89:c8:3c:
                    34:83:62:71:97:4e:8c:4b:95:72:98:20:7d:1b:39:
                    3c:56:a7:3b:7b:f8:63:8c:aa:f9:98:10:50:40:b7:
                    8d:ae:3b:03:58:f0:1d:10:19:f3:ec:89:7d:df:4d:
                    cc:e8:c5:fb:69:a6:f7:2f:07:40:2b:12:20:0c:93:
                    48:db:8a:09:5d:64:4c:cb:f2:8a:6a:07:19:ce:bb:
                    1a:20:89:ce:dc:9e:3b:68:ca:82:76:9d:51:6a:5d:
                    12:db:7a:07:90:60:6a:ae:61:ea:61:ca:54:e8:4f:
                    16:fc:c1:00:89:4d:a7:74:9d:4c:7a:de:f9:66:95:
                    23:3e:ce:e0:13:52:10:bc:44:dc:37:fc:d6:ee:a8:
                    28:ac:1d:ca:6b:cb:f3:2a:ed:2e:f1:94:2c:f9:e0:
                    70:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:26:88:BA:16:8B:BF:8C:5C:98:03:7F:3E:D0:8C:D2:2C:88:0F:BD
            X509v3 Authority Key Identifier:
                keyid:85:15:4D:17:EB:56:42:02:77:A0:D6:D3:16:8E:CE:B7:B8:8C:D6:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/85154D17EB56420277A0D6D3168ECEB7B88CD654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85154D17EB56420277A0D6D3168ECEB7B88CD654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/34352e3136312e3139342e302f32342d3234203d3e20323638343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:8c:c1:74:87:a4:ba:98:29:d2:26:2c:01:2d:40:23:bf:2e:
         11:4d:8f:03:1b:b6:d8:3a:3b:d7:0e:53:8f:b6:12:59:00:96:
         62:d0:d0:f5:6d:be:e0:19:1a:68:5a:cc:da:02:ab:97:94:16:
         b0:15:0a:8c:72:14:cb:90:6f:50:8a:30:eb:8b:48:e4:6a:7f:
         b3:d4:f1:38:29:88:28:71:bf:ff:e3:99:07:7d:fd:c2:8e:bb:
         4f:e9:8a:5a:49:22:a2:ef:bf:88:9a:81:57:0d:ad:57:7d:4a:
         02:3c:fa:42:fd:15:4c:26:45:d3:3a:c8:d9:d1:79:67:1e:04:
         64:26:a2:77:5e:99:9e:e4:a4:8f:19:2a:c9:ee:4e:06:be:0b:
         bf:7f:b0:2a:b3:4f:12:f2:85:78:32:8b:dd:78:b4:d9:c5:dc:
         12:da:2c:76:f7:ac:fa:a8:19:13:0b:74:94:7e:d4:0e:4f:e3:
         0b:1b:71:44:7d:87:15:21:2c:71:ba:73:07:5c:71:6f:e9:43:
         76:b9:02:ac:10:5f:45:04:80:24:7d:ef:24:c3:ba:dc:f3:c0:
         14:0f:dc:fd:64:85:70:57:26:cf:86:8c:01:32:ab:90:0b:53:
         15:f7:b9:3e:2a:a0:ec:36:c8:68:68:df:2c:6c:7a:09:c6:3f:
         60:16:6e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:14:46 2026 by rpki-client