Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/0/34352e3137312e3138392e302f32342d3234203d3e203533313037.roa
File:                     34352e3137312e3138392e302f32342d3234203d3e203533313037.roa (raw, json)
Hash identifier:          j0op3mJGHsX4eH4vZV7SUUsUOIg78/8/0RK7jIoAYRY=
Subject key identifier:   D1:BC:7B:5B:0C:F2:C5:33:BF:92:3D:D6:E4:75:CE:7A:FB:5D:85:3A
Certificate issuer:       /CN=A82109DB2DDD4265EEBB8AE79D7D7C2066FA368D
Certificate serial:       341EE22A4C0303063FBC70D807CFB1EB9164F6FC
Authority key identifier: A8:21:09:DB:2D:DD:42:65:EE:BB:8A:E7:9D:7D:7C:20:66:FA:36:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A82109DB2DDD4265EEBB8AE79D7D7C2066FA368D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/0/34352e3137312e3138392e302f32342d3234203d3e203533313037.roa
Signing time:             Mon 25 May 2026 22:52:55 +0000
ROA not before:           Mon 25 May 2026 22:47:55 +0000
ROA not after:            Mon 24 May 2027 22:52:55 +0000
asID:                     53107
IP address blocks:        45.171.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/0/A82109DB2DDD4265EEBB8AE79D7D7C2066FA368D.crl
                          rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/0/A82109DB2DDD4265EEBB8AE79D7D7C2066FA368D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A82109DB2DDD4265EEBB8AE79D7D7C2066FA368D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 00:54:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:1e:e2:2a:4c:03:03:06:3f:bc:70:d8:07:cf:b1:eb:91:64:f6:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A82109DB2DDD4265EEBB8AE79D7D7C2066FA368D
        Validity
            Not Before: May 25 22:47:55 2026 GMT
            Not After : May 24 22:52:55 2027 GMT
        Subject: CN=D1BC7B5B0CF2C533BF923DD6E475CE7AFB5D853A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7b:b6:c5:09:fa:ae:a0:59:ce:f8:24:dd:ed:
                    e0:45:5c:8f:94:38:8d:45:e7:6c:4c:42:ad:ab:fa:
                    5d:6f:63:21:3d:51:26:3f:78:4f:50:c1:6e:b1:23:
                    e4:7b:9d:4e:69:1b:16:58:f5:4f:9d:c4:58:fa:dc:
                    80:06:03:d7:be:26:a7:ff:d9:3b:22:26:f2:38:60:
                    9f:ff:b5:47:93:e9:a2:a9:00:31:6c:bc:d9:df:55:
                    de:30:0e:35:e5:ab:f2:26:12:39:48:6d:cf:fa:0f:
                    59:c2:3d:59:d1:38:7f:80:38:9f:45:68:94:05:f7:
                    bb:fa:73:7d:a1:e6:53:b0:f8:60:4a:c3:ac:10:53:
                    03:28:5a:8b:c3:27:28:c3:ca:06:73:a8:b8:3f:aa:
                    94:aa:1d:05:b4:7b:ee:77:51:52:75:ec:63:34:19:
                    86:ee:ae:86:19:9e:3e:4a:01:3a:f4:d2:a7:47:11:
                    cf:18:43:1d:df:5d:85:ce:78:55:40:a1:c4:ef:00:
                    86:28:d1:b3:f9:ad:0f:b9:13:fa:6e:83:12:29:6e:
                    c8:bd:a3:05:cf:b5:60:01:4e:88:95:58:44:9c:a0:
                    f6:fe:33:e6:9a:63:72:09:43:2c:52:5b:e1:37:26:
                    d6:f9:15:92:74:1f:67:2c:25:65:9c:0a:2c:bc:12:
                    12:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:BC:7B:5B:0C:F2:C5:33:BF:92:3D:D6:E4:75:CE:7A:FB:5D:85:3A
            X509v3 Authority Key Identifier:
                keyid:A8:21:09:DB:2D:DD:42:65:EE:BB:8A:E7:9D:7D:7C:20:66:FA:36:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/0/A82109DB2DDD4265EEBB8AE79D7D7C2066FA368D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A82109DB2DDD4265EEBB8AE79D7D7C2066FA368D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/0/34352e3137312e3138392e302f32342d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:79:c1:9d:2b:c0:4d:2a:9f:ed:78:c8:fd:a1:78:de:ac:2e:
         d3:7c:cf:e2:e7:f2:6e:cb:7d:8e:e8:1e:81:aa:53:cd:d1:5d:
         d5:9b:3d:7a:41:26:1f:17:49:e0:07:93:a8:2d:36:87:b1:b1:
         5b:c8:e7:b5:cb:08:7f:c9:9d:ac:66:6f:c5:7e:3e:cb:71:3b:
         b7:35:aa:36:17:bf:b7:7e:f4:a7:35:81:80:fd:61:2f:a6:44:
         89:b8:0f:47:ac:82:d0:19:8d:70:fd:a3:78:c7:aa:ef:16:03:
         e1:23:34:4e:84:fc:e3:86:82:f4:84:52:b6:75:59:00:03:a2:
         11:56:a2:28:e8:b3:db:81:c2:8e:c6:08:47:2b:63:68:dc:0c:
         9f:5d:41:8f:1c:f2:8f:e6:4c:7a:12:c0:ed:e1:10:bc:c3:a0:
         4f:57:ef:0e:23:5a:b7:e4:07:a5:cf:29:e5:6d:31:11:47:6e:
         73:57:ed:06:d1:c4:82:b4:0c:41:ca:cb:57:ac:1f:00:d2:d1:
         0f:d7:ec:73:35:bb:b3:f0:b4:4b:35:14:a4:14:34:7b:67:e5:
         0e:69:cc:95:b8:ed:1a:0e:4d:23:64:02:80:89:50:9a:be:69:
         11:ed:12:e9:ea:94:68:3c:ed:79:d9:0d:51:4d:bd:c2:18:a8:
         99:a9:95:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:13:40 2026 by rpki-client