Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/34352e3137302e37322e302f32322d3232203d3e20323638313533.roa
File:                     34352e3137302e37322e302f32322d3232203d3e20323638313533.roa (raw, json)
Hash identifier:          no6Kq0r1AJw2ubs6veyXrXcjT0fnTYjKMef2xOxyU6I=
Subject key identifier:   27:26:54:B3:31:8E:F5:33:9C:01:17:DF:8E:21:0A:D5:54:52:AD:57
Certificate issuer:       /CN=C9252AB23441CBFEC245C4915A2B1DEBF93EAD55
Certificate serial:       7928CECCE9D5050440B1F84A108FC851B0137A54
Authority key identifier: C9:25:2A:B2:34:41:CB:FE:C2:45:C4:91:5A:2B:1D:EB:F9:3E:AD:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9252AB23441CBFEC245C4915A2B1DEBF93EAD55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/34352e3137302e37322e302f32322d3232203d3e20323638313533.roa
Signing time:             Mon 01 Jun 2026 17:37:48 +0000
ROA not before:           Mon 01 Jun 2026 17:32:48 +0000
ROA not after:            Mon 31 May 2027 17:37:48 +0000
asID:                     268153
IP address blocks:        45.170.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/C9252AB23441CBFEC245C4915A2B1DEBF93EAD55.crl
                          rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/C9252AB23441CBFEC245C4915A2B1DEBF93EAD55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9252AB23441CBFEC245C4915A2B1DEBF93EAD55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 Jun 2026 11:18:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:28:ce:cc:e9:d5:05:04:40:b1:f8:4a:10:8f:c8:51:b0:13:7a:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9252AB23441CBFEC245C4915A2B1DEBF93EAD55
        Validity
            Not Before: Jun  1 17:32:48 2026 GMT
            Not After : May 31 17:37:48 2027 GMT
        Subject: CN=272654B3318EF5339C0117DF8E210AD55452AD57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:60:fc:50:e5:70:76:b8:64:f6:1b:cf:0c:87:
                    4e:3c:2e:97:11:d0:e3:c8:a3:e4:cc:d8:69:46:3d:
                    ca:ba:dd:01:f3:3d:34:96:cf:79:29:13:d3:23:b9:
                    fa:9b:45:8a:d6:37:d9:d5:1f:1b:f3:97:b1:41:2d:
                    45:2b:42:9f:39:95:52:21:c0:69:d0:e2:a1:1d:fe:
                    44:66:c7:c5:3f:79:d3:05:45:33:4a:8d:c3:bb:63:
                    49:14:1b:05:f5:20:76:d9:2a:fb:51:86:e2:62:a2:
                    0f:46:8a:7f:9c:66:1c:d2:74:21:f6:35:30:19:6f:
                    f2:26:82:50:1c:9b:d2:88:ee:ea:49:73:b2:35:93:
                    b1:fb:23:8d:41:32:71:5c:dd:ee:2b:6f:1f:1b:d6:
                    cd:77:2e:29:ca:52:7c:48:a8:76:1e:60:8d:b3:b2:
                    15:2f:79:b8:4e:9c:77:97:ec:f0:28:d2:bb:15:8f:
                    0e:4d:6d:e6:98:af:5c:d6:1b:45:ac:7f:76:7c:30:
                    41:6a:27:53:ac:02:8f:e6:e5:84:66:3d:2e:86:9e:
                    ee:51:a6:b5:91:63:d3:fa:ba:8e:ae:9e:aa:6a:42:
                    f1:96:d6:3e:6b:d8:ff:25:e6:24:aa:e0:8f:d4:56:
                    09:2a:5b:7a:ad:b5:a7:4f:a2:d7:c8:72:8a:5d:b8:
                    16:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:26:54:B3:31:8E:F5:33:9C:01:17:DF:8E:21:0A:D5:54:52:AD:57
            X509v3 Authority Key Identifier:
                keyid:C9:25:2A:B2:34:41:CB:FE:C2:45:C4:91:5A:2B:1D:EB:F9:3E:AD:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/C9252AB23441CBFEC245C4915A2B1DEBF93EAD55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9252AB23441CBFEC245C4915A2B1DEBF93EAD55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/34352e3137302e37322e302f32322d3232203d3e20323638313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:81:53:09:eb:b1:07:43:55:d5:0c:6a:57:04:fb:cd:40:1e:
         eb:a9:e9:db:f3:22:e5:55:5f:df:7c:2c:e0:c8:65:14:71:81:
         87:bb:62:e3:2d:3c:36:a1:2f:45:26:9a:33:89:b3:82:ac:10:
         bb:c1:b1:c1:b9:32:d1:06:b7:12:06:78:18:8a:d0:e5:63:a7:
         be:a3:4e:64:2a:ef:21:f5:36:44:25:f3:5c:d5:6f:c6:7b:b7:
         6a:ca:23:a3:5e:25:70:88:b2:7f:d5:7e:23:a5:08:c7:0a:98:
         7f:40:9e:ed:82:a1:4a:2b:1e:f0:db:7c:6d:a3:88:c7:6a:2d:
         23:a9:ca:9c:05:30:db:81:44:ec:d6:ad:50:2f:93:36:5b:6f:
         d9:1f:a9:a1:23:1c:0c:63:43:c7:7f:11:81:35:ed:80:77:e5:
         36:7b:98:dd:0d:55:80:78:e7:39:a2:6d:5c:ea:ad:41:eb:50:
         05:f7:0f:6b:c1:7b:3c:5c:cb:2e:28:fe:6c:d1:e4:e6:67:ed:
         4c:b0:88:06:4c:33:d2:b3:ce:1c:63:05:1e:de:6a:ba:39:fd:
         d4:07:2c:c9:55:16:54:b6:53:8d:ab:b9:e7:56:b5:ec:34:b5:
         b6:97:2b:4a:39:d2:54:af:57:7a:8f:30:fd:63:ec:fd:ab:d6:
         29:88:eb:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 03:41:18 2026 by rpki-client