Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/34352e3136312e34382e302f32332d3233203d3e20323638343437.roa
File:                     34352e3136312e34382e302f32332d3233203d3e20323638343437.roa (raw, json)
Hash identifier:          e20i2JwUpGOKBMihNXXDAeE5HfpMwFBoOgfSxspFkTs=
Subject key identifier:   5F:3D:C5:FF:61:D3:85:DB:95:E6:C2:DF:09:14:A9:A1:E9:1F:7E:72
Certificate issuer:       /CN=ED5F5EB3D93D5114881A3770BD13A572A42C44FE
Certificate serial:       7AF961A646FAA71DCED0FCE5C5DA25D197731BCE
Authority key identifier: ED:5F:5E:B3:D9:3D:51:14:88:1A:37:70:BD:13:A5:72:A4:2C:44:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5F5EB3D93D5114881A3770BD13A572A42C44FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/34352e3136312e34382e302f32332d3233203d3e20323638343437.roa
Signing time:             Thu 14 May 2026 12:59:56 +0000
ROA not before:           Thu 14 May 2026 12:54:56 +0000
ROA not after:            Thu 13 May 2027 12:59:56 +0000
asID:                     268447
IP address blocks:        45.161.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/ED5F5EB3D93D5114881A3770BD13A572A42C44FE.crl
                          rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/ED5F5EB3D93D5114881A3770BD13A572A42C44FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5F5EB3D93D5114881A3770BD13A572A42C44FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 09:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:f9:61:a6:46:fa:a7:1d:ce:d0:fc:e5:c5:da:25:d1:97:73:1b:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED5F5EB3D93D5114881A3770BD13A572A42C44FE
        Validity
            Not Before: May 14 12:54:56 2026 GMT
            Not After : May 13 12:59:56 2027 GMT
        Subject: CN=5F3DC5FF61D385DB95E6C2DF0914A9A1E91F7E72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c7:a2:02:1b:3e:65:6b:cd:6a:74:6f:ab:96:
                    23:10:7d:94:52:30:df:2b:d2:74:ed:35:23:c9:dd:
                    06:cb:ca:19:dd:92:db:f0:d8:36:39:86:7d:bd:77:
                    a6:eb:08:06:0e:7e:1f:ab:0b:77:a8:2d:88:4a:ba:
                    37:6c:ae:0c:b3:de:ea:8e:ac:cd:b0:4f:b0:c3:71:
                    64:33:72:f9:c8:d7:ae:16:31:18:a6:e6:3f:2b:31:
                    91:98:3f:c3:25:2e:81:d7:b7:e1:d0:88:8b:9d:5f:
                    b1:ab:65:1f:ac:a1:0d:52:d9:9f:78:02:ad:59:e0:
                    4c:0c:fd:95:f0:69:dc:47:f0:16:9f:00:73:3f:59:
                    c7:1f:69:ee:2c:7c:ee:52:fa:73:02:b8:57:08:e7:
                    b3:d9:a1:b8:bc:73:f7:41:77:92:ab:2c:0a:e9:86:
                    79:c5:c6:87:a4:c1:1b:5b:a0:24:f3:b1:ac:af:ed:
                    68:13:c9:f2:e4:8c:27:8e:a7:8a:a2:83:96:2b:37:
                    67:27:61:e1:10:e9:f2:5e:5e:51:19:b4:7e:c0:8b:
                    03:d4:49:cb:7d:36:8a:26:df:d3:eb:18:8b:4c:b5:
                    46:b2:59:f3:bf:c8:ca:af:dd:f1:dd:12:60:96:5e:
                    eb:5f:d4:60:0f:90:57:a4:51:c8:59:b6:3b:a2:b8:
                    46:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:3D:C5:FF:61:D3:85:DB:95:E6:C2:DF:09:14:A9:A1:E9:1F:7E:72
            X509v3 Authority Key Identifier:
                keyid:ED:5F:5E:B3:D9:3D:51:14:88:1A:37:70:BD:13:A5:72:A4:2C:44:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/ED5F5EB3D93D5114881A3770BD13A572A42C44FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5F5EB3D93D5114881A3770BD13A572A42C44FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/34352e3136312e34382e302f32332d3233203d3e20323638343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:02:ff:6a:e9:ff:71:4a:f0:23:85:6c:e4:1e:6e:99:6d:75:
         9c:eb:c3:26:46:c4:c3:f9:05:7f:87:cb:cf:82:3a:9f:f8:d4:
         8c:aa:9e:d6:5e:1d:a1:4c:81:bc:67:a5:0b:30:81:7a:07:db:
         e9:85:f0:e0:ee:b2:6e:34:f6:52:9b:99:3d:ce:bc:ae:e1:3d:
         96:e3:04:9c:53:47:7b:32:2e:4a:c7:27:76:91:6c:be:87:03:
         a2:3d:e1:c0:e1:38:18:a2:e6:87:ef:b4:60:60:0d:d2:5f:7a:
         d1:9e:ce:20:03:ce:bf:3a:ab:bb:23:8c:b1:6b:82:37:65:0a:
         d2:58:a0:21:c7:28:76:1e:33:fe:62:4c:12:cb:a0:30:76:7d:
         c0:1c:a9:20:93:2f:79:2e:16:70:3e:9b:14:07:57:7f:29:de:
         42:a0:a2:4d:85:a3:2d:2c:98:4f:c7:6d:c1:6c:7a:e2:62:1e:
         81:5a:46:18:3a:76:35:1c:25:66:9f:1e:c3:de:a0:e7:ea:70:
         9c:db:c6:21:bb:07:7a:6d:0f:65:03:e5:31:a5:4f:41:a2:d3:
         72:c3:04:81:44:db:26:8b:ee:18:d8:20:2b:d6:cb:af:d3:3b:
         16:d5:0c:65:f7:5f:f2:d8:bc:18:09:18:1f:bb:ea:70:45:b7:
         2d:69:a1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:49:53 2026 by rpki-client