Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/0/34352e3233372e33302e302f32332d3233203d3e20323638323633.roa
File:                     34352e3233372e33302e302f32332d3233203d3e20323638323633.roa (raw, json)
Hash identifier:          mJ/GkVJHTbclA4ekhd6tedOZKHI764fhmKQwRBP0/pI=
Subject key identifier:   99:16:32:0D:2A:4A:F9:EA:47:83:EA:C5:32:5A:50:8E:F4:EB:25:94
Certificate issuer:       /CN=537FBC032732465BE354327393C6D5CE8487C07B
Certificate serial:       10C06164C30242A08AF7ED5446D3EE9D221C8B93
Authority key identifier: 53:7F:BC:03:27:32:46:5B:E3:54:32:73:93:C6:D5:CE:84:87:C0:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/537FBC032732465BE354327393C6D5CE8487C07B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/0/34352e3233372e33302e302f32332d3233203d3e20323638323633.roa
Signing time:             Fri 14 Aug 2026 18:25:42 +0000
ROA not before:           Fri 14 Aug 2026 18:20:42 +0000
ROA not after:            Fri 13 Aug 2027 18:25:42 +0000
asID:                     268263
IP address blocks:        45.237.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/0/537FBC032732465BE354327393C6D5CE8487C07B.crl
                          rsync://rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/0/537FBC032732465BE354327393C6D5CE8487C07B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/537FBC032732465BE354327393C6D5CE8487C07B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 06:28:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c0:61:64:c3:02:42:a0:8a:f7:ed:54:46:d3:ee:9d:22:1c:8b:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=537FBC032732465BE354327393C6D5CE8487C07B
        Validity
            Not Before: Aug 14 18:20:42 2026 GMT
            Not After : Aug 13 18:25:42 2027 GMT
        Subject: CN=9916320D2A4AF9EA4783EAC5325A508EF4EB2594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1f:62:57:6f:da:6c:68:63:66:d6:3f:13:54:
                    78:c5:a3:a9:7b:2e:c0:1f:ef:3b:48:88:0a:82:42:
                    d2:d6:94:99:90:b6:54:ad:b7:2b:0c:aa:e6:01:e8:
                    2f:3f:22:a4:eb:8f:b0:06:e5:3e:1e:de:10:68:70:
                    6f:e8:a4:84:5d:3a:45:ef:78:60:dc:4e:83:f6:a5:
                    ba:cd:4f:69:6d:f8:98:08:a8:7b:1d:da:01:75:37:
                    59:21:87:c4:e8:9b:52:47:a6:39:25:50:f9:25:27:
                    69:51:7d:d8:23:75:d2:cf:21:8d:db:c2:06:60:cd:
                    d3:ad:50:90:90:6e:4c:ee:aa:60:7f:9c:60:35:fd:
                    71:0a:07:da:2f:38:85:da:b6:03:c9:d2:0a:03:ad:
                    5f:09:64:bf:60:2c:f5:4a:02:99:52:78:a6:45:88:
                    e4:dc:c7:95:00:26:29:2f:4e:02:98:16:4c:b1:65:
                    cc:a4:85:da:63:7e:a8:59:8e:46:68:0c:81:f8:df:
                    1f:7f:13:2a:cc:c4:d1:90:85:0f:10:72:2d:e0:22:
                    2e:15:78:7f:ba:03:60:e6:04:dc:0b:e4:0c:1e:77:
                    96:46:9b:6c:32:5f:cc:bb:2f:e5:a3:bd:00:6b:5d:
                    ff:12:20:28:3a:13:38:be:e7:b7:1a:5f:fa:6d:85:
                    29:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:16:32:0D:2A:4A:F9:EA:47:83:EA:C5:32:5A:50:8E:F4:EB:25:94
            X509v3 Authority Key Identifier:
                keyid:53:7F:BC:03:27:32:46:5B:E3:54:32:73:93:C6:D5:CE:84:87:C0:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/0/537FBC032732465BE354327393C6D5CE8487C07B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/537FBC032732465BE354327393C6D5CE8487C07B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/0/34352e3233372e33302e302f32332d3233203d3e20323638323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:b2:1b:3e:ec:c0:20:bd:49:92:56:f0:7f:4e:82:3d:11:fc:
         29:eb:a9:2d:13:30:ee:5b:bd:63:6e:e8:fb:d2:4f:d5:d8:0e:
         f6:19:b4:0a:95:cd:09:c2:6b:41:19:b9:86:04:ff:b1:31:de:
         47:8f:b4:8d:d3:6c:02:c5:57:16:c8:cf:87:41:9b:ca:3c:32:
         e1:fb:d0:f5:f6:d4:37:21:63:5a:a8:eb:1b:9c:cb:5d:01:48:
         cc:5e:a9:46:ef:56:9a:a4:e1:f1:b4:d5:0c:91:3a:83:6e:46:
         fa:aa:8d:12:c7:ad:9c:35:d2:24:ec:12:b2:38:47:e5:bc:a2:
         ca:84:5c:27:0e:05:ec:d1:2b:62:97:41:af:a8:04:e8:04:b8:
         d3:43:be:d0:a5:60:a0:4a:3f:38:06:00:2c:dc:52:8a:29:6d:
         25:94:cb:9a:20:50:9d:59:ff:10:87:b6:24:0e:45:44:53:77:
         f8:3e:5e:06:ff:61:75:6a:43:d6:b3:e9:4a:40:f2:49:a0:a4:
         07:dc:f9:18:46:13:2a:0a:e0:cd:8c:01:27:96:0e:87:8e:54:
         79:30:de:f9:96:22:14:b1:87:8d:41:5a:3d:b7:63:b0:06:e4:
         c7:b4:bf:7d:ac:25:bd:55:0f:98:9a:82:b6:d3:1b:6c:5c:70:
         bf:89:6c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 14:07:17 2026 by rpki-client