Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/34352e3138362e34302e302f32342d3234203d3e20323636353134.roa
File:                     34352e3138362e34302e302f32342d3234203d3e20323636353134.roa (raw, json)
Hash identifier:          2glpKsOrjWjGQE0KwtZ60iSrGxzE/q47N8jlXp2vPa0=
Subject key identifier:   83:23:A4:56:37:AC:7B:A3:1C:35:23:61:C3:E0:A5:D7:DF:41:59:18
Certificate issuer:       /CN=5DB65048062197DEFB6E6487EAB36BD76F794483
Certificate serial:       51D73B809F849279CC7A30F0FC67747E5A2B4133
Authority key identifier: 5D:B6:50:48:06:21:97:DE:FB:6E:64:87:EA:B3:6B:D7:6F:79:44:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DB65048062197DEFB6E6487EAB36BD76F794483.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/34352e3138362e34302e302f32342d3234203d3e20323636353134.roa
Signing time:             Tue 01 Sep 2026 12:02:23 +0000
ROA not before:           Tue 01 Sep 2026 11:57:23 +0000
ROA not after:            Tue 31 Aug 2027 12:02:23 +0000
asID:                     266514
IP address blocks:        45.186.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/5DB65048062197DEFB6E6487EAB36BD76F794483.crl
                          rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/5DB65048062197DEFB6E6487EAB36BD76F794483.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DB65048062197DEFB6E6487EAB36BD76F794483.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 14:58:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:d7:3b:80:9f:84:92:79:cc:7a:30:f0:fc:67:74:7e:5a:2b:41:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DB65048062197DEFB6E6487EAB36BD76F794483
        Validity
            Not Before: Sep  1 11:57:23 2026 GMT
            Not After : Aug 31 12:02:23 2027 GMT
        Subject: CN=8323A45637AC7BA31C352361C3E0A5D7DF415918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a5:c7:3d:43:03:63:11:2b:ca:9d:74:0f:63:
                    e9:de:e6:60:df:3f:08:af:91:3f:cb:19:78:30:fc:
                    d4:86:9d:e4:fa:3f:8a:7f:12:4c:e0:65:65:11:3d:
                    01:7f:57:25:d2:0b:49:3e:1e:83:0f:d8:ca:5f:43:
                    f1:10:44:58:54:d2:83:ce:da:34:8b:6a:96:28:7b:
                    33:c4:59:b0:1b:8b:4c:f3:e6:9a:5f:ac:af:d5:bb:
                    bf:84:99:6c:0f:46:91:3b:f5:e9:96:a0:44:38:32:
                    fc:0f:5a:cf:15:0d:77:bb:df:3a:02:0e:84:67:4d:
                    60:be:b0:55:27:3c:3c:9b:b5:5b:2a:22:a4:68:de:
                    32:34:0f:86:f7:77:cc:83:41:39:4f:5e:12:ab:19:
                    89:2c:b2:a0:c0:3a:02:ce:5d:8b:59:d6:b3:8d:ae:
                    c8:8c:de:92:8b:86:4f:f9:42:6b:bf:42:e5:fe:1b:
                    5a:8d:8b:1f:db:66:2f:e6:1b:22:80:63:9e:18:c8:
                    cf:d7:d7:e7:4f:ec:41:83:e8:3f:41:f2:bd:a8:9a:
                    f6:c1:ba:13:23:00:71:d7:c2:19:14:39:8d:ee:36:
                    08:f6:63:7e:8a:ff:a9:e1:86:12:71:f5:77:04:81:
                    ba:91:6b:0b:32:89:0e:77:1f:ff:77:42:e6:93:fa:
                    45:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:23:A4:56:37:AC:7B:A3:1C:35:23:61:C3:E0:A5:D7:DF:41:59:18
            X509v3 Authority Key Identifier:
                keyid:5D:B6:50:48:06:21:97:DE:FB:6E:64:87:EA:B3:6B:D7:6F:79:44:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/5DB65048062197DEFB6E6487EAB36BD76F794483.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DB65048062197DEFB6E6487EAB36BD76F794483.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/34352e3138362e34302e302f32342d3234203d3e20323636353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:11:cf:37:44:88:6b:1e:c4:f8:56:de:eb:f1:70:bd:b5:50:
         06:06:4a:3c:5e:8b:00:7c:ae:21:6c:53:2a:9b:f1:15:4b:3d:
         0f:ae:7d:94:1d:69:f1:44:47:e8:1c:33:ab:c5:8c:d5:6f:85:
         bd:89:53:12:de:f2:cf:39:41:68:f9:2f:e5:d6:fe:97:c0:c4:
         01:1f:56:36:a4:83:d0:35:b0:4f:25:25:25:4c:c0:3b:3f:82:
         41:ee:57:0f:f9:56:d6:78:da:d3:64:c1:72:71:61:ee:08:de:
         b9:a0:38:8e:9c:e0:f8:cd:fc:88:f3:be:fa:14:bc:e9:82:fb:
         cc:48:93:96:8a:0a:c5:18:c6:91:9c:88:54:fa:1d:f4:fd:68:
         19:28:73:d2:fd:34:b0:99:5d:0f:5b:6a:2a:02:63:8c:b0:57:
         31:d1:ca:34:72:5c:39:c1:8d:ed:e7:9f:ab:3d:99:7c:13:2b:
         7b:50:40:57:17:22:6c:28:55:58:61:0b:d1:15:67:db:4d:b2:
         fa:5b:f6:9c:03:3c:bd:23:c9:8b:32:4a:a2:d0:b5:18:98:c5:
         a8:0c:a6:24:30:b8:6a:b8:75:77:44:7c:05:d8:ed:9d:a6:53:
         80:0c:73:69:7e:c2:71:87:69:35:5d:f7:fc:60:f8:79:d1:2d:
         50:70:f7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:28:26 2026 by rpki-client