Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/34352e3137382e3231342e302f32332d3233203d3e20323639313131.roa
File:                     34352e3137382e3231342e302f32332d3233203d3e20323639313131.roa (raw, json)
Hash identifier:          pGeffDwVsLnI0OTfJx92LRUmSPb8sWx2xu1UC+0pDqI=
Subject key identifier:   EF:E9:5D:23:13:C7:51:7D:CE:B8:E2:4F:80:A8:FA:E3:CE:CC:24:36
Certificate issuer:       /CN=6B5D42D93E58C00245A6501E9C01C833BB782217
Certificate serial:       4EAB314A2C3284032F6F8CB8258DCE4F90F6C272
Authority key identifier: 6B:5D:42:D9:3E:58:C0:02:45:A6:50:1E:9C:01:C8:33:BB:78:22:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B5D42D93E58C00245A6501E9C01C833BB782217.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/34352e3137382e3231342e302f32332d3233203d3e20323639313131.roa
Signing time:             Tue 09 Jun 2026 20:16:11 +0000
ROA not before:           Tue 09 Jun 2026 20:11:11 +0000
ROA not after:            Tue 08 Jun 2027 20:16:11 +0000
asID:                     269111
IP address blocks:        45.178.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/6B5D42D93E58C00245A6501E9C01C833BB782217.crl
                          rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/6B5D42D93E58C00245A6501E9C01C833BB782217.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B5D42D93E58C00245A6501E9C01C833BB782217.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 16:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ab:31:4a:2c:32:84:03:2f:6f:8c:b8:25:8d:ce:4f:90:f6:c2:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B5D42D93E58C00245A6501E9C01C833BB782217
        Validity
            Not Before: Jun  9 20:11:11 2026 GMT
            Not After : Jun  8 20:16:11 2027 GMT
        Subject: CN=EFE95D2313C7517DCEB8E24F80A8FAE3CECC2436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e7:e2:52:57:f2:bd:a4:78:f9:99:32:f5:63:
                    e7:6a:23:ba:5e:23:93:f4:82:21:ec:18:6d:fa:08:
                    99:ee:70:39:e6:84:5c:62:6a:12:1c:f6:15:8c:9c:
                    f6:19:51:95:fd:20:48:51:1e:2b:61:1a:c2:26:1b:
                    16:ad:a8:a9:18:58:16:13:47:5f:95:6c:f6:f6:9b:
                    08:ad:ce:0c:78:14:d4:ca:35:80:b3:ab:1b:b9:2d:
                    74:2c:39:a1:d8:55:b0:91:c7:c6:ee:e6:69:9e:3e:
                    6b:ec:52:96:bd:45:52:51:0a:52:a0:c1:83:c4:36:
                    8b:11:79:c6:2e:a3:03:32:97:49:33:5d:46:16:9b:
                    87:97:b7:75:99:c9:8f:3f:9a:09:1c:38:ef:fa:53:
                    27:f4:af:2b:27:fb:2a:d5:d4:f9:92:1d:98:d4:8f:
                    e7:74:1a:54:1a:ba:d4:d9:2a:16:29:c6:e4:9b:a1:
                    df:76:27:d0:6d:70:e8:95:bb:0b:19:bc:0b:41:26:
                    ae:16:06:24:96:29:6a:80:10:a8:93:49:cb:dd:e7:
                    14:f9:0c:ef:c1:21:53:ce:da:c0:59:68:68:71:61:
                    af:21:70:22:1c:33:23:c4:ce:27:7c:a9:8d:64:11:
                    5b:7a:b6:88:e4:7c:98:86:c1:f7:02:82:1d:56:df:
                    fc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E9:5D:23:13:C7:51:7D:CE:B8:E2:4F:80:A8:FA:E3:CE:CC:24:36
            X509v3 Authority Key Identifier:
                keyid:6B:5D:42:D9:3E:58:C0:02:45:A6:50:1E:9C:01:C8:33:BB:78:22:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/6B5D42D93E58C00245A6501E9C01C833BB782217.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B5D42D93E58C00245A6501E9C01C833BB782217.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/34352e3137382e3231342e302f32332d3233203d3e20323639313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:5f:53:a0:55:b4:a8:41:c0:57:1b:45:bd:e0:2c:8a:cf:2d:
         a7:d2:43:f9:75:7f:d1:bf:f4:f5:08:e9:86:5b:2e:ce:46:dd:
         36:63:d4:0a:6b:e3:61:da:a7:8b:68:d9:1e:b3:52:d8:3c:71:
         e2:70:dc:30:f5:64:1b:84:8d:f7:ad:73:b5:55:c5:c0:ad:85:
         22:08:f1:f7:f5:7b:c8:67:8f:f5:f4:e4:58:98:e0:c1:8c:b6:
         a6:f7:1c:c9:5b:91:a3:1b:64:0e:fa:6e:11:d8:15:92:6b:e4:
         59:17:6d:f9:3a:24:4f:e5:43:96:91:0f:e6:c9:f4:2e:b6:e0:
         a1:62:8d:6b:52:7d:da:9e:5a:9e:5c:44:15:d8:83:87:97:7d:
         4c:ec:8d:4d:e2:9a:65:e5:ab:40:63:ea:cf:d4:6d:46:cb:f7:
         43:21:41:1f:28:08:f4:78:1f:1e:91:ba:55:77:95:71:31:bf:
         84:7b:35:40:9f:99:62:37:fe:19:cc:e1:02:42:ac:db:4e:3f:
         de:2e:83:aa:92:4b:50:cb:fc:cf:31:95:1c:e5:18:d0:1b:9d:
         94:e0:19:0d:fd:82:7e:6b:c7:a6:5a:2c:c1:0e:17:df:76:94:
         81:9e:a4:ab:dc:ec:b2:a0:f6:a9:7e:a6:ad:0f:7d:c7:8d:a8:
         cf:b0:a0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:50:51 2026 by rpki-client