Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/34352e3136362e38362e302f32332d3233203d3e20323633323932.roa
File:                     34352e3136362e38362e302f32332d3233203d3e20323633323932.roa (raw, json)
Hash identifier:          5WwndifQ6hJlDzcda6t2rojqcFfgyOI6fBntwr9MyS4=
Subject key identifier:   77:58:36:0E:DF:DF:AE:AE:A7:CD:D9:3D:B2:9A:90:B2:1B:C8:80:0C
Certificate issuer:       /CN=11E1019D6E7D72E9421F53039B1444A69155D242
Certificate serial:       669C1DFD46D6F709A8FA3B3533B6878E785A840E
Authority key identifier: 11:E1:01:9D:6E:7D:72:E9:42:1F:53:03:9B:14:44:A6:91:55:D2:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/34352e3136362e38362e302f32332d3233203d3e20323633323932.roa
Signing time:             Mon 18 May 2026 20:01:37 +0000
ROA not before:           Mon 18 May 2026 19:56:37 +0000
ROA not after:            Mon 17 May 2027 20:01:37 +0000
asID:                     263292
IP address blocks:        45.166.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.crl
                          rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 23:43:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:9c:1d:fd:46:d6:f7:09:a8:fa:3b:35:33:b6:87:8e:78:5a:84:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11E1019D6E7D72E9421F53039B1444A69155D242
        Validity
            Not Before: May 18 19:56:37 2026 GMT
            Not After : May 17 20:01:37 2027 GMT
        Subject: CN=7758360EDFDFAEAEA7CDD93DB29A90B21BC8800C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:64:fe:6a:5a:67:4c:5f:78:ed:f0:66:6c:28:
                    ab:2e:11:cb:58:7c:05:9c:c3:92:74:37:0f:34:00:
                    18:1a:89:9c:1c:23:9a:d2:ca:31:17:71:f2:08:f4:
                    e8:a0:96:77:89:ab:cf:93:46:e3:cd:0a:b2:76:b2:
                    aa:b0:77:17:5b:7c:6f:ea:f0:73:ec:de:2c:75:8a:
                    a3:8d:31:75:98:09:3c:15:6f:0f:2a:f9:bd:9c:66:
                    68:dc:97:ae:06:86:ba:3f:26:3c:51:29:be:4a:48:
                    d4:5b:e5:1d:19:32:fc:29:c1:2a:c7:48:40:89:08:
                    f1:0e:2e:2c:cf:69:19:e5:9e:9e:1d:f2:3e:62:94:
                    10:0f:c5:14:0c:31:7a:b2:ec:7d:69:99:9d:ce:cc:
                    8c:6f:c3:b7:82:89:e4:5b:79:ba:8c:57:dd:8b:d2:
                    ce:3e:75:3f:23:3e:8f:dc:aa:a1:50:7d:d1:42:fc:
                    f8:e2:ec:c7:87:c3:81:e2:11:ac:e3:8a:30:c8:e7:
                    fc:4b:4a:53:23:f7:f3:85:c1:be:98:fd:8d:90:f1:
                    d1:f6:d2:bc:c0:a7:21:95:54:d9:90:c1:8a:d5:90:
                    5f:11:31:9f:75:b8:80:4f:3c:e5:ba:df:60:e7:29:
                    a7:72:a0:85:a0:72:37:56:1f:13:bf:50:a5:58:a4:
                    c3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:58:36:0E:DF:DF:AE:AE:A7:CD:D9:3D:B2:9A:90:B2:1B:C8:80:0C
            X509v3 Authority Key Identifier:
                keyid:11:E1:01:9D:6E:7D:72:E9:42:1F:53:03:9B:14:44:A6:91:55:D2:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/34352e3136362e38362e302f32332d3233203d3e20323633323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:5a:24:62:45:82:1c:0d:57:4c:37:e7:0a:12:4c:30:09:80:
         16:9d:ac:8b:c3:e4:f0:bc:6c:23:a4:2c:63:6a:67:14:be:8e:
         2d:2e:01:2f:0f:9f:2e:82:f9:e8:ef:5b:b3:b7:35:c6:a0:34:
         b6:82:16:ae:01:64:be:8f:ab:c2:54:8e:fd:39:bb:76:34:21:
         55:64:81:9c:0c:cb:07:c3:e4:42:c5:97:0c:6f:33:ac:81:ff:
         3c:c5:bc:4f:77:f6:19:cc:7d:ff:15:2c:7a:c6:6c:b4:5e:3d:
         24:45:36:e0:6c:7e:22:31:f3:cb:c9:2f:68:a9:c2:2a:73:14:
         61:03:08:bc:b4:30:16:f2:03:7a:ce:5e:b8:14:48:65:0e:9b:
         63:37:77:14:0b:ae:cc:ae:98:52:5f:b1:b7:54:e2:37:72:20:
         32:94:4e:07:0a:b2:1d:55:6c:f4:90:8c:6a:2f:83:44:85:ed:
         2b:3d:41:62:ee:a0:80:ad:a6:b4:53:fc:65:31:2c:e2:f6:63:
         50:a7:fd:8a:6c:8c:21:8b:e0:f4:01:0e:cd:3d:f9:e1:5b:5d:
         1a:d8:d4:f3:84:9f:29:65:12:36:b0:39:e0:73:ec:db:cc:af:
         aa:51:7b:bc:8c:41:29:7f:92:b5:9d:54:14:fe:9a:ca:13:7e:
         aa:32:79:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:37:14 2026 by rpki-client