Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/34352e3136352e3136302e302f32342d3234203d3e20323637393631.roa
File:                     34352e3136352e3136302e302f32342d3234203d3e20323637393631.roa (raw, json)
Hash identifier:          /dJ0zxnEK3uou05+3sjpl02aaUtBwbdDPB7ANUfMglw=
Subject key identifier:   C7:A9:8C:6A:4C:7B:21:53:46:B7:C5:F0:87:C6:61:FC:50:9C:43:A9
Certificate issuer:       /CN=5B8ABC4057DFF8AB24E14E53576B0E9EC723CF60
Certificate serial:       4E93840BC827E2D2A7C94EFCC94CB7A991274F70
Authority key identifier: 5B:8A:BC:40:57:DF:F8:AB:24:E1:4E:53:57:6B:0E:9E:C7:23:CF:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B8ABC4057DFF8AB24E14E53576B0E9EC723CF60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/34352e3136352e3136302e302f32342d3234203d3e20323637393631.roa
Signing time:             Wed 10 Jun 2026 19:37:07 +0000
ROA not before:           Wed 10 Jun 2026 19:32:07 +0000
ROA not after:            Wed 09 Jun 2027 19:37:07 +0000
asID:                     267961
IP address blocks:        45.165.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/5B8ABC4057DFF8AB24E14E53576B0E9EC723CF60.crl
                          rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/5B8ABC4057DFF8AB24E14E53576B0E9EC723CF60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B8ABC4057DFF8AB24E14E53576B0E9EC723CF60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 23:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:93:84:0b:c8:27:e2:d2:a7:c9:4e:fc:c9:4c:b7:a9:91:27:4f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B8ABC4057DFF8AB24E14E53576B0E9EC723CF60
        Validity
            Not Before: Jun 10 19:32:07 2026 GMT
            Not After : Jun  9 19:37:07 2027 GMT
        Subject: CN=C7A98C6A4C7B215346B7C5F087C661FC509C43A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a2:6c:41:85:be:a7:cc:ba:5b:2c:7c:81:f7:
                    6f:26:47:9e:44:29:a6:92:f9:c2:97:bb:af:d1:7c:
                    75:12:c6:e7:2e:80:ff:3a:ef:f1:16:1d:d5:c9:25:
                    99:43:61:e9:ce:a5:a7:68:c2:28:ad:71:5a:43:43:
                    b1:14:fe:e7:22:92:04:ef:21:34:25:5e:db:8f:d5:
                    97:0e:98:cf:ae:82:da:a8:45:e8:bd:9d:fd:be:59:
                    f9:dd:1b:35:50:19:b9:04:8b:5b:c1:98:39:de:3c:
                    d4:47:6d:18:78:ea:ce:41:87:aa:31:ce:59:87:5f:
                    7a:83:4f:f2:f9:29:1b:81:5e:75:5d:7f:23:9a:95:
                    00:f6:c6:ab:8a:c5:d2:94:c2:c1:5a:1f:1b:60:55:
                    b0:31:bd:6d:a7:23:11:d3:f9:1e:04:ba:9a:93:8b:
                    9c:13:79:9e:2a:51:31:57:4f:92:b7:dd:c5:80:2f:
                    fe:3a:54:ce:b7:c2:36:0c:ac:4c:f2:56:31:4a:05:
                    93:83:b7:49:18:a5:17:c4:d3:a7:bd:5f:66:ae:80:
                    c9:94:65:fd:64:89:f6:c5:cd:c1:41:ad:0d:f7:83:
                    0c:7b:d8:f7:92:d4:bd:ca:ae:67:ab:a5:16:0b:17:
                    d6:7c:a0:2f:7c:a8:c2:a3:8e:51:dc:d9:50:65:b0:
                    9f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A9:8C:6A:4C:7B:21:53:46:B7:C5:F0:87:C6:61:FC:50:9C:43:A9
            X509v3 Authority Key Identifier:
                keyid:5B:8A:BC:40:57:DF:F8:AB:24:E1:4E:53:57:6B:0E:9E:C7:23:CF:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/5B8ABC4057DFF8AB24E14E53576B0E9EC723CF60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B8ABC4057DFF8AB24E14E53576B0E9EC723CF60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/34352e3136352e3136302e302f32342d3234203d3e20323637393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:46:70:95:f9:64:a7:0e:b4:75:67:c0:81:78:f2:ef:e5:f3:
         5b:a2:31:d0:f0:97:ca:a2:dc:96:87:54:e0:d3:cb:9f:98:7d:
         5a:bc:26:65:34:ec:32:32:5b:19:12:69:ec:70:ba:59:38:2d:
         d5:41:d2:bf:9d:1f:40:8f:80:e6:0b:60:cb:75:bd:8f:26:b8:
         57:50:0a:c1:29:4e:45:77:e0:fa:34:86:11:04:9f:44:f4:38:
         e0:ed:61:8a:51:d0:ee:08:a5:73:1b:5f:c8:09:7e:ea:b1:99:
         a3:6d:ce:14:ca:ad:8d:18:a5:96:e1:27:75:28:bb:c9:2f:1c:
         e8:c9:8b:96:19:69:f0:7c:2c:18:eb:85:00:e2:99:d9:23:d7:
         84:a4:f2:83:cf:f7:23:0a:68:fb:84:ee:43:a5:1e:aa:2f:a9:
         9a:91:ce:f1:da:ec:63:cf:75:37:29:7a:aa:aa:60:da:32:01:
         8b:6a:1b:75:24:70:89:f5:5f:c4:fa:21:7c:9c:44:06:63:8c:
         41:d6:eb:e3:81:08:3f:3c:f3:5c:d8:5a:ce:41:e5:26:ce:3d:
         0e:6f:1f:d1:cb:c6:c8:be:95:fc:15:80:a6:77:d9:d8:fe:b0:
         b4:75:89:84:f9:1f:0d:53:74:de:a9:72:f3:58:59:d5:81:67:
         42:cf:da:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:15:02 2026 by rpki-client