Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/752kCJkQ66LxfheZ7mwidMGKfSgWuRmJLJGhHK9Ae5JL/0/34352e352e31392e302f32342d3234203d3e20323636303833.roa
File:                     34352e352e31392e302f32342d3234203d3e20323636303833.roa (raw, json)
Hash identifier:          CDBrVO2CRbJDRmz38R5ycmFa3XCE6JBk/3p9Peie3bk=
Subject key identifier:   AC:CB:DA:D5:AA:08:D3:F4:E8:95:06:22:FA:32:DB:E4:25:2D:31:31
Certificate issuer:       /CN=62FAE95AB944574329BC74B16BE769D2C0948B54
Certificate serial:       0E584A684E49E082392EAEFF4C364586283599F3
Authority key identifier: 62:FA:E9:5A:B9:44:57:43:29:BC:74:B1:6B:E7:69:D2:C0:94:8B:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62FAE95AB944574329BC74B16BE769D2C0948B54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/752kCJkQ66LxfheZ7mwidMGKfSgWuRmJLJGhHK9Ae5JL/0/34352e352e31392e302f32342d3234203d3e20323636303833.roa
Signing time:             Mon 15 Jun 2026 15:52:28 +0000
ROA not before:           Mon 15 Jun 2026 15:47:28 +0000
ROA not after:            Mon 14 Jun 2027 15:52:28 +0000
asID:                     266083
IP address blocks:        45.5.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/752kCJkQ66LxfheZ7mwidMGKfSgWuRmJLJGhHK9Ae5JL/0/62FAE95AB944574329BC74B16BE769D2C0948B54.crl
                          rsync://rpki-repo.registro.br/repo/752kCJkQ66LxfheZ7mwidMGKfSgWuRmJLJGhHK9Ae5JL/0/62FAE95AB944574329BC74B16BE769D2C0948B54.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62FAE95AB944574329BC74B16BE769D2C0948B54.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 27 Jun 2026 22:34:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:58:4a:68:4e:49:e0:82:39:2e:ae:ff:4c:36:45:86:28:35:99:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62FAE95AB944574329BC74B16BE769D2C0948B54
        Validity
            Not Before: Jun 15 15:47:28 2026 GMT
            Not After : Jun 14 15:52:28 2027 GMT
        Subject: CN=ACCBDAD5AA08D3F4E8950622FA32DBE4252D3131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ab:57:aa:fb:5a:e0:5d:07:ac:86:52:fc:f9:
                    8a:7b:d6:68:1d:2d:2a:8e:c3:f2:44:86:36:c4:27:
                    7c:e1:42:9f:be:f6:b2:7b:3d:88:e3:81:fa:a0:b4:
                    1b:4d:c6:04:d2:4d:f8:3a:4c:21:9e:b8:8d:e0:d6:
                    82:bb:7b:04:c0:59:72:53:6d:62:24:ab:0d:3d:6f:
                    27:a4:41:c4:41:81:c3:1a:fc:22:39:14:c0:b4:51:
                    9b:52:2c:8e:c9:c0:89:c6:85:e0:07:ac:31:8f:55:
                    32:8e:e9:ac:43:83:c7:52:ef:4f:f7:cb:7d:81:06:
                    d5:1f:06:b4:24:3f:ec:78:4e:a0:26:54:ae:83:3f:
                    c1:27:53:b7:eb:43:4b:f9:0f:c7:80:04:47:bc:ac:
                    82:f1:37:d5:d3:de:8a:e4:3c:ea:f6:f4:bd:17:5a:
                    fb:b7:e8:87:de:5a:b6:1c:6e:b5:60:c6:b2:6e:e7:
                    af:ad:04:60:18:94:8d:f3:aa:f6:23:28:f5:55:23:
                    70:f9:13:9f:24:c1:ef:d3:30:74:34:ac:30:79:07:
                    97:39:a5:bf:06:ad:96:48:2f:7b:d4:58:b2:c0:94:
                    3f:3d:3f:37:f1:d6:e8:93:b6:07:81:43:9a:14:41:
                    bb:ff:1d:64:01:e7:2a:d2:06:35:70:e8:34:9a:12:
                    78:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:CB:DA:D5:AA:08:D3:F4:E8:95:06:22:FA:32:DB:E4:25:2D:31:31
            X509v3 Authority Key Identifier:
                keyid:62:FA:E9:5A:B9:44:57:43:29:BC:74:B1:6B:E7:69:D2:C0:94:8B:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/752kCJkQ66LxfheZ7mwidMGKfSgWuRmJLJGhHK9Ae5JL/0/62FAE95AB944574329BC74B16BE769D2C0948B54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62FAE95AB944574329BC74B16BE769D2C0948B54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/752kCJkQ66LxfheZ7mwidMGKfSgWuRmJLJGhHK9Ae5JL/0/34352e352e31392e302f32342d3234203d3e20323636303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:c6:1f:be:94:bc:ad:44:db:8f:a8:3f:c9:8b:e5:c4:32:f1:
         96:e3:a8:b8:6c:cf:27:5b:d7:03:9f:ad:c1:4e:dc:6b:24:f2:
         39:8c:8c:21:d7:63:e3:00:b0:03:32:c0:eb:24:1a:ad:b2:4a:
         a4:8a:f2:1d:b4:ac:ff:76:da:bb:f7:c4:5f:7d:3c:68:af:cb:
         84:6f:a8:2f:27:42:80:be:a2:81:95:33:45:17:25:d7:d3:ee:
         fa:59:54:d3:a1:88:39:0d:bc:e9:57:16:25:e3:2e:a3:7b:4a:
         13:cf:01:e5:e8:0a:26:94:fb:c3:c8:86:90:75:a4:5e:d6:a6:
         f2:4d:56:7a:ef:e0:20:8d:19:30:0e:46:c8:15:3d:2c:14:a7:
         d5:45:2d:a8:ee:0a:d9:90:6d:61:1b:d7:78:2e:f5:25:e4:b0:
         e4:bf:bb:c8:00:a8:3d:af:12:09:55:a3:3c:18:ef:70:07:63:
         a3:08:db:d4:17:61:62:d5:43:26:30:1c:3f:1b:98:13:e3:e8:
         f8:cf:c1:3c:b4:ee:c7:cf:a4:e9:22:9e:7c:f0:ab:73:d3:9d:
         6b:4c:45:55:af:86:d9:4f:da:91:a5:2b:d4:5c:aa:34:f0:37:
         d3:91:de:96:b9:dc:30:a8:ec:b9:72:77:20:f0:54:1d:bf:94:
         e3:33:2d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 14:08:19 2026 by rpki-client