Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BP6Jd8zhSCfNZqxLHbUT9pDXvncgSwNpNEayQUGS1VJh/0/34352e3138392e3230382e302f32322d3234203d3e20323639363032.roa
File:                     34352e3138392e3230382e302f32322d3234203d3e20323639363032.roa (raw, json)
Hash identifier:          m5YEhcBYNJ1+WRtr1YVG4wjYXVzNTCFwc3j5u/YwAY0=
Subject key identifier:   B5:83:E6:74:8E:46:49:AD:59:30:1E:3A:F4:C1:87:04:BF:87:8F:C2
Certificate issuer:       /CN=2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC
Certificate serial:       51013AE7950A4A3FAFD48B717D7648ECA307DA81
Authority key identifier: 21:38:06:2C:FB:FA:CA:96:6B:CB:EC:6D:EA:79:5B:2B:3C:42:C0:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BP6Jd8zhSCfNZqxLHbUT9pDXvncgSwNpNEayQUGS1VJh/0/34352e3138392e3230382e302f32322d3234203d3e20323639363032.roa
Signing time:             Tue 23 Jun 2026 19:37:02 +0000
ROA not before:           Tue 23 Jun 2026 19:32:02 +0000
ROA not after:            Tue 22 Jun 2027 19:37:02 +0000
asID:                     269602
IP address blocks:        45.189.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BP6Jd8zhSCfNZqxLHbUT9pDXvncgSwNpNEayQUGS1VJh/0/2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC.crl
                          rsync://rpki-repo.registro.br/repo/BP6Jd8zhSCfNZqxLHbUT9pDXvncgSwNpNEayQUGS1VJh/0/2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Jul 2026 23:13:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:01:3a:e7:95:0a:4a:3f:af:d4:8b:71:7d:76:48:ec:a3:07:da:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC
        Validity
            Not Before: Jun 23 19:32:02 2026 GMT
            Not After : Jun 22 19:37:02 2027 GMT
        Subject: CN=B583E6748E4649AD59301E3AF4C18704BF878FC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ae:0e:18:59:b5:7e:30:09:28:ae:90:e9:e9:
                    68:7d:bc:11:84:f9:74:dc:37:3b:89:b6:b9:bd:25:
                    81:05:e7:45:07:bd:f0:e8:f1:44:4a:d7:7c:6f:fa:
                    a3:7b:f6:53:27:a6:e8:9d:d2:c9:3f:fe:45:e5:b4:
                    70:04:2a:f3:a3:1b:72:d9:5a:dc:0c:ff:05:0a:dd:
                    d6:2b:4a:4f:95:d1:50:d8:a5:60:63:08:dd:14:36:
                    39:17:ae:8b:2f:af:54:de:05:b1:94:6d:dd:8c:45:
                    f1:ff:43:66:36:e9:00:97:75:e2:b5:17:f5:2f:d9:
                    35:e7:38:2e:a2:9f:3a:15:97:d1:d6:d1:49:bd:63:
                    a1:d3:e1:fa:46:6a:08:67:65:b0:fd:7c:af:0e:7f:
                    3a:d7:62:bb:e6:e2:9b:72:c8:d6:69:02:cb:b4:d2:
                    5f:9b:ae:52:15:af:a4:85:da:69:f5:fb:36:74:86:
                    49:45:b7:4b:7e:e5:8a:92:08:e4:61:b0:c2:33:30:
                    88:94:14:76:71:4e:d3:0c:d1:08:ad:0e:8c:b9:63:
                    45:08:cc:ca:d0:bb:50:74:45:fc:f7:46:c4:89:bb:
                    80:d1:aa:ad:c6:f2:60:07:f8:04:52:2b:0c:67:98:
                    24:d1:4b:50:f3:5e:ad:23:bc:a7:a2:29:ab:68:0d:
                    06:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:83:E6:74:8E:46:49:AD:59:30:1E:3A:F4:C1:87:04:BF:87:8F:C2
            X509v3 Authority Key Identifier:
                keyid:21:38:06:2C:FB:FA:CA:96:6B:CB:EC:6D:EA:79:5B:2B:3C:42:C0:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BP6Jd8zhSCfNZqxLHbUT9pDXvncgSwNpNEayQUGS1VJh/0/2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BP6Jd8zhSCfNZqxLHbUT9pDXvncgSwNpNEayQUGS1VJh/0/34352e3138392e3230382e302f32322d3234203d3e20323639363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:59:5f:91:e8:6b:ef:ed:28:33:ef:80:63:a7:7f:d4:30:6c:
         df:d5:24:c3:ea:16:29:d3:4a:6d:17:24:97:8f:e9:c3:c4:6b:
         28:7a:9a:8f:b5:60:c1:35:8b:b9:a0:1f:8e:c8:c9:be:20:c2:
         7d:13:65:12:89:0f:6e:75:e6:6b:2a:01:e9:28:2f:29:1f:67:
         b6:6d:bc:ae:5f:e3:23:56:e7:fd:6a:cf:fe:b8:6b:f4:7a:13:
         1f:a4:9b:6b:a2:30:0a:bf:db:aa:e1:1d:d3:a0:97:81:93:68:
         22:0a:76:78:62:b8:d5:f8:be:1d:93:b2:fb:f9:a5:0c:38:5d:
         25:e8:28:df:22:da:4b:6a:e6:4b:0e:95:13:a1:45:3f:74:13:
         0c:54:69:56:29:92:c4:f9:d2:35:2d:ee:16:b9:39:fd:65:4a:
         dd:e4:a3:50:d9:eb:c8:32:fd:64:2f:00:a6:b9:4c:a4:83:ee:
         93:b3:ac:51:e5:64:24:96:1d:c8:fa:f8:e1:41:a8:7b:0e:34:
         7b:ec:aa:58:ad:a4:00:57:71:40:6e:fb:d2:4f:11:c3:e6:ec:
         47:21:33:bc:4f:e5:b5:a5:87:db:cf:e3:d4:16:45:34:b1:dd:
         e6:98:e0:6e:7d:47:0f:82:24:68:8a:cc:d6:50:12:3c:42:d7:
         b9:9e:0f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:13:10 2026 by rpki-client