Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/34352e3136352e3136322e302f32342d3234203d3e20323637393631.roa
File:                     34352e3136352e3136322e302f32342d3234203d3e20323637393631.roa (raw, json)
Hash identifier:          YiRvWkV62ITvlPbmIHSeWB4tVVCHVkfhBKqiUMAUDvA=
Subject key identifier:   45:EF:D1:0C:0E:D5:7A:17:4D:9E:B5:FA:A5:4E:50:F5:71:38:13:66
Certificate issuer:       /CN=5B8ABC4057DFF8AB24E14E53576B0E9EC723CF60
Certificate serial:       677B7D74BF6FBE69407082CD8D2E0C69295FBAEE
Authority key identifier: 5B:8A:BC:40:57:DF:F8:AB:24:E1:4E:53:57:6B:0E:9E:C7:23:CF:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B8ABC4057DFF8AB24E14E53576B0E9EC723CF60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/34352e3136352e3136322e302f32342d3234203d3e20323637393631.roa
Signing time:             Wed 10 Jun 2026 19:37:02 +0000
ROA not before:           Wed 10 Jun 2026 19:32:02 +0000
ROA not after:            Wed 09 Jun 2027 19:37:02 +0000
asID:                     267961
IP address blocks:        45.165.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/5B8ABC4057DFF8AB24E14E53576B0E9EC723CF60.crl
                          rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/5B8ABC4057DFF8AB24E14E53576B0E9EC723CF60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B8ABC4057DFF8AB24E14E53576B0E9EC723CF60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 23:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:7b:7d:74:bf:6f:be:69:40:70:82:cd:8d:2e:0c:69:29:5f:ba:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B8ABC4057DFF8AB24E14E53576B0E9EC723CF60
        Validity
            Not Before: Jun 10 19:32:02 2026 GMT
            Not After : Jun  9 19:37:02 2027 GMT
        Subject: CN=45EFD10C0ED57A174D9EB5FAA54E50F571381366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c0:d4:43:73:4a:b1:cb:fd:32:f0:ab:98:f0:
                    b3:6b:79:ba:dc:3e:ea:fa:d9:0e:be:a8:bc:4a:32:
                    4c:59:a9:10:94:78:90:90:cb:97:77:65:ca:e8:de:
                    bc:96:49:d2:cf:40:d8:9b:82:5b:5a:50:da:1f:65:
                    d0:fa:50:ee:c4:3d:04:83:a9:9f:4e:ff:f4:17:44:
                    b2:21:ee:7e:cf:bc:d2:f3:14:77:10:31:61:03:b1:
                    40:b8:5d:c7:ce:63:4b:65:65:23:70:c1:b2:84:22:
                    be:8e:28:f9:4c:1b:98:a6:b6:2d:0c:1d:35:fc:98:
                    a7:d5:9d:74:7f:e1:d3:15:23:6b:6d:93:0f:a4:05:
                    98:79:90:97:c8:04:df:41:4b:a8:f9:8e:ba:fb:aa:
                    2f:cb:03:99:c6:60:75:fe:93:f2:af:af:77:72:a1:
                    3c:d7:2b:84:0d:73:ef:75:63:7d:34:db:2a:82:3d:
                    0f:80:d1:43:73:71:2b:92:a7:eb:cf:08:bb:02:45:
                    be:e9:6a:86:ca:5d:bc:48:74:63:8f:bd:83:75:c5:
                    98:4e:53:f4:9a:4d:d8:cb:7c:ae:9f:b1:fe:38:3e:
                    41:0c:e7:8b:68:84:ab:ee:0a:68:48:a2:a2:99:57:
                    09:48:7d:09:4b:22:f2:39:9b:f4:48:4f:b3:77:88:
                    3c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:EF:D1:0C:0E:D5:7A:17:4D:9E:B5:FA:A5:4E:50:F5:71:38:13:66
            X509v3 Authority Key Identifier:
                keyid:5B:8A:BC:40:57:DF:F8:AB:24:E1:4E:53:57:6B:0E:9E:C7:23:CF:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/5B8ABC4057DFF8AB24E14E53576B0E9EC723CF60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B8ABC4057DFF8AB24E14E53576B0E9EC723CF60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/34352e3136352e3136322e302f32342d3234203d3e20323637393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:fb:1e:9c:af:58:b2:e8:59:33:aa:8c:56:48:6d:5e:81:92:
         d7:fb:fd:e3:ff:1a:2b:e2:00:1a:58:16:ab:68:38:b2:45:79:
         49:a8:00:cb:8b:35:23:5d:06:82:77:78:82:f8:0d:53:fa:d9:
         65:39:ff:f0:21:44:78:6c:05:02:ab:b5:cb:d3:99:a5:5a:10:
         7e:f6:e3:92:e7:d6:6a:47:0a:7b:56:e8:63:b0:4b:88:40:1d:
         ef:74:0d:ea:de:8e:a4:5d:a1:3c:84:ac:9b:1a:e2:b9:9d:30:
         da:64:47:97:bc:bb:ed:c2:de:23:5a:e4:b4:45:c5:8f:e9:a9:
         36:36:44:e3:ad:fa:69:66:37:23:39:74:1e:2a:0d:55:38:af:
         f0:9a:68:c8:f7:f2:fb:19:5b:aa:2d:48:2e:f8:6d:eb:95:cd:
         bb:6f:a1:9c:f3:ac:f5:ed:dc:07:cd:4c:4b:c4:51:1d:67:4f:
         e2:15:8c:e7:65:6b:db:5d:b1:d0:a9:55:df:44:63:8b:c5:1b:
         13:48:44:9f:de:fc:4f:58:7a:e3:aa:a6:90:a1:ef:4d:45:e9:
         04:80:bf:28:e2:1d:3b:4f:37:b8:14:34:7d:0d:e7:1b:95:71:
         7d:14:d9:a5:5e:22:34:82:c8:3e:76:cb:86:2b:a0:b5:25:47:
         28:ca:31:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:15:14 2026 by rpki-client