Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/34352e3138372e3133302e302f32332d3233203d3e20323639343636.roa
File:                     34352e3138372e3133302e302f32332d3233203d3e20323639343636.roa (raw, json)
Hash identifier:          NrTlTvlnOEYD25jyOaohMKcaJRZhGrud8ZrbJX0DdJ4=
Subject key identifier:   1E:35:03:FC:EC:22:15:A9:1B:BE:E9:59:63:1B:7A:68:93:D5:87:9B
Certificate issuer:       /CN=D75ABD4B44D8B16CC34566E12A7B68762DCDFA50
Certificate serial:       49D86C479A23CE0D7C00F1334C947F5B1B8594B8
Authority key identifier: D7:5A:BD:4B:44:D8:B1:6C:C3:45:66:E1:2A:7B:68:76:2D:CD:FA:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D75ABD4B44D8B16CC34566E12A7B68762DCDFA50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/34352e3138372e3133302e302f32332d3233203d3e20323639343636.roa
Signing time:             Wed 13 May 2026 18:26:36 +0000
ROA not before:           Wed 13 May 2026 18:21:36 +0000
ROA not after:            Wed 12 May 2027 18:26:36 +0000
asID:                     269466
IP address blocks:        45.187.130.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/D75ABD4B44D8B16CC34566E12A7B68762DCDFA50.crl
                          rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/D75ABD4B44D8B16CC34566E12A7B68762DCDFA50.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D75ABD4B44D8B16CC34566E12A7B68762DCDFA50.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 09:34:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:d8:6c:47:9a:23:ce:0d:7c:00:f1:33:4c:94:7f:5b:1b:85:94:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D75ABD4B44D8B16CC34566E12A7B68762DCDFA50
        Validity
            Not Before: May 13 18:21:36 2026 GMT
            Not After : May 12 18:26:36 2027 GMT
        Subject: CN=1E3503FCEC2215A91BBEE959631B7A6893D5879B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9e:eb:eb:4a:a7:f2:c9:93:c2:c1:d6:63:aa:
                    29:db:0c:fe:82:72:29:4f:66:0e:52:81:10:c8:78:
                    9d:8e:1a:c5:fa:40:13:3e:78:a5:63:43:1b:e9:ef:
                    1d:95:f0:9e:d7:f4:5d:bb:26:4e:7a:f7:fe:0a:fc:
                    eb:64:83:f3:67:31:54:6a:8d:f4:07:ae:61:13:e5:
                    bb:17:07:16:df:89:67:56:c1:55:ac:db:98:ec:07:
                    ad:ef:d4:55:70:69:51:6b:22:ef:6d:30:48:55:26:
                    78:82:1d:7d:e5:f7:f2:35:40:0c:50:0d:b6:9c:bf:
                    bf:cd:35:b3:90:20:07:a9:1b:9d:93:be:0e:1e:32:
                    bb:f3:70:4d:ee:ae:4d:45:8c:a2:86:97:ed:e5:dc:
                    b8:0b:be:c4:8c:52:20:5a:10:e3:91:ed:af:c4:2c:
                    27:0c:af:f4:e2:31:08:e6:8e:60:20:b6:96:d3:4f:
                    0b:32:46:02:9f:6c:4a:0d:d1:21:da:e3:76:6a:0f:
                    7b:a1:8f:59:35:8b:d6:93:a6:5c:79:8f:22:91:d5:
                    f6:d1:c1:8c:2e:8a:3d:38:d6:89:fb:8e:4b:40:86:
                    03:d8:2f:fd:c0:52:a5:ce:45:38:f1:31:77:37:08:
                    65:8b:f6:fc:5d:c5:45:62:8d:db:75:be:cf:9e:a7:
                    9c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:35:03:FC:EC:22:15:A9:1B:BE:E9:59:63:1B:7A:68:93:D5:87:9B
            X509v3 Authority Key Identifier:
                keyid:D7:5A:BD:4B:44:D8:B1:6C:C3:45:66:E1:2A:7B:68:76:2D:CD:FA:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/D75ABD4B44D8B16CC34566E12A7B68762DCDFA50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D75ABD4B44D8B16CC34566E12A7B68762DCDFA50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/34352e3138372e3133302e302f32332d3233203d3e20323639343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:21:9f:30:04:a2:04:c6:d8:65:2c:25:a9:92:14:b2:7e:45:
         dd:b3:b0:d5:4d:15:0b:47:ed:6e:c4:d6:20:14:0b:fd:4e:0a:
         40:35:49:e5:72:fa:e6:99:c4:f9:fd:e5:ef:90:b8:65:41:a0:
         e2:cc:ba:e6:2e:42:7f:43:c8:44:91:f9:83:d2:a2:15:2d:1d:
         ed:39:31:b2:6d:40:be:88:8f:ea:39:a4:43:e1:38:ba:6a:3c:
         42:08:66:fc:ef:5e:cf:e6:cc:da:0c:8c:56:54:2d:8d:d9:21:
         5f:f4:aa:d0:bf:3d:e7:44:bd:b6:a6:98:55:ba:d6:4c:e2:3c:
         7e:09:bc:2b:0b:4d:51:b2:65:52:53:d9:d8:a1:7d:c5:de:6c:
         9f:76:5b:5f:de:cd:06:14:7b:02:07:99:73:af:91:f3:11:5c:
         2a:d9:0a:98:1f:94:5a:4b:c6:37:0d:74:6a:0b:61:6e:be:8c:
         c2:14:f8:a3:08:30:63:35:2d:14:f0:2d:0d:52:91:05:49:7a:
         39:66:01:6c:fe:70:46:c0:74:24:87:c7:51:59:e0:98:3b:bb:
         f8:3a:af:9f:05:76:c6:a3:22:f0:d0:35:a1:22:05:c1:42:de:
         96:dc:f0:fa:4f:b5:ec:ae:5c:3f:7d:18:fd:8e:07:e3:12:1f:
         b4:2e:f6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:06:12 2026 by rpki-client