Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSBBkuDdvZ8xEUHcaa4bfR6SXqNSjxBRiNcZYsWQFHxy/0/34352e3136362e36382e302f32342d3234203d3e20323637393533.roa
File:                     34352e3136362e36382e302f32342d3234203d3e20323637393533.roa (raw, json)
Hash identifier:          RY0+fGsdpABDARpmqjpqtJiJiVO/IiWvbnbddPpaNRA=
Subject key identifier:   A5:F1:CB:43:8E:D0:74:83:C4:77:04:38:4E:56:E3:C4:EC:9D:77:E2
Certificate issuer:       /CN=8C3CF48C6EF2802E55ED0B0F89D3CA5720D72BE0
Certificate serial:       5317EEEBD58CA30AE01BB6D275A01DA7E22A8AAC
Authority key identifier: 8C:3C:F4:8C:6E:F2:80:2E:55:ED:0B:0F:89:D3:CA:57:20:D7:2B:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C3CF48C6EF2802E55ED0B0F89D3CA5720D72BE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSBBkuDdvZ8xEUHcaa4bfR6SXqNSjxBRiNcZYsWQFHxy/0/34352e3136362e36382e302f32342d3234203d3e20323637393533.roa
Signing time:             Wed 13 May 2026 14:25:19 +0000
ROA not before:           Wed 13 May 2026 14:20:19 +0000
ROA not after:            Wed 12 May 2027 14:25:19 +0000
asID:                     267953
IP address blocks:        45.166.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BSBBkuDdvZ8xEUHcaa4bfR6SXqNSjxBRiNcZYsWQFHxy/0/8C3CF48C6EF2802E55ED0B0F89D3CA5720D72BE0.crl
                          rsync://rpki-repo.registro.br/repo/BSBBkuDdvZ8xEUHcaa4bfR6SXqNSjxBRiNcZYsWQFHxy/0/8C3CF48C6EF2802E55ED0B0F89D3CA5720D72BE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C3CF48C6EF2802E55ED0B0F89D3CA5720D72BE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 09:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:17:ee:eb:d5:8c:a3:0a:e0:1b:b6:d2:75:a0:1d:a7:e2:2a:8a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C3CF48C6EF2802E55ED0B0F89D3CA5720D72BE0
        Validity
            Not Before: May 13 14:20:19 2026 GMT
            Not After : May 12 14:25:19 2027 GMT
        Subject: CN=A5F1CB438ED07483C47704384E56E3C4EC9D77E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1b:2e:9c:ae:43:c5:43:e1:13:ca:a4:f6:ec:
                    0d:69:a5:a8:eb:1b:5b:5a:66:52:83:58:66:7f:24:
                    4c:8b:75:77:e1:57:f6:95:09:27:73:54:31:36:cd:
                    4f:8a:37:e8:06:1b:25:fa:57:7e:b7:f7:42:d8:f2:
                    10:5a:83:b7:bf:5b:33:4e:57:ae:67:02:5d:9a:67:
                    a0:50:ef:ea:a5:3f:00:1e:e4:1d:66:0d:87:4a:d4:
                    38:c3:97:79:13:44:21:34:7c:af:aa:57:3d:25:86:
                    59:35:98:a2:52:85:9c:df:63:31:e1:5f:28:18:44:
                    4b:3d:40:2d:ae:6d:4b:f5:38:96:67:18:1f:44:11:
                    d5:93:35:de:e9:d5:e9:f4:4d:f7:5c:dd:3b:b0:a9:
                    9d:92:33:d5:80:92:4c:0e:f8:85:6c:ad:6a:f7:dc:
                    f7:89:62:a4:73:5d:42:9d:40:23:7c:b4:c3:3b:fe:
                    ee:14:b1:a6:2c:df:e7:42:6c:3c:ee:28:96:4a:90:
                    9b:c3:b3:d2:78:87:78:a0:ee:25:a3:7e:1d:ae:2f:
                    82:28:dd:2d:06:64:4d:f7:a2:20:ff:4a:a0:d1:a1:
                    56:32:13:cc:36:95:a4:11:c7:db:9b:e2:16:b0:04:
                    b5:be:c7:18:5e:3c:67:a1:b5:47:2e:33:49:29:df:
                    db:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F1:CB:43:8E:D0:74:83:C4:77:04:38:4E:56:E3:C4:EC:9D:77:E2
            X509v3 Authority Key Identifier:
                keyid:8C:3C:F4:8C:6E:F2:80:2E:55:ED:0B:0F:89:D3:CA:57:20:D7:2B:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSBBkuDdvZ8xEUHcaa4bfR6SXqNSjxBRiNcZYsWQFHxy/0/8C3CF48C6EF2802E55ED0B0F89D3CA5720D72BE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C3CF48C6EF2802E55ED0B0F89D3CA5720D72BE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSBBkuDdvZ8xEUHcaa4bfR6SXqNSjxBRiNcZYsWQFHxy/0/34352e3136362e36382e302f32342d3234203d3e20323637393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:3e:4a:7d:fc:48:8d:d5:6a:5d:65:e5:65:cc:e8:56:ed:ba:
         28:de:8a:f4:70:34:89:0a:c3:84:d0:56:03:1f:d1:20:60:c0:
         39:8f:58:04:95:23:e7:c0:22:1c:1a:24:b0:31:40:12:ee:7c:
         10:d2:1b:f6:c9:46:a7:8f:2e:20:ca:e5:bd:05:9a:2e:6f:a4:
         60:a4:f7:b8:93:f6:28:a7:8e:3e:82:4c:cf:e8:27:dc:6b:7e:
         29:56:6c:c9:b3:c2:23:a1:11:5b:f5:04:24:51:96:20:de:5b:
         b0:11:3c:f8:80:54:e4:dd:48:35:e2:80:a8:6b:05:97:7b:0a:
         05:ce:d8:c3:86:0e:7f:ee:29:03:47:8d:3a:2d:d8:38:b2:42:
         6f:ec:0a:92:9a:c2:31:98:f7:47:cc:cf:36:97:42:17:d0:02:
         e4:09:1b:35:fc:7e:6d:a4:b1:32:40:cc:79:f6:d9:86:e6:89:
         07:e8:4d:68:bd:9a:01:82:5c:55:c3:64:88:62:78:92:8a:07:
         fb:c4:27:bd:d3:3b:2e:85:0d:4f:a1:85:be:56:93:b3:94:1e:
         33:6e:cc:ec:c6:e3:6b:63:ad:fa:93:52:6d:ca:1c:a8:de:0f:
         10:01:08:33:15:d9:18:be:06:ef:50:9c:e4:21:fb:0f:2e:25:
         e4:9b:dc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 19:27:24 2026 by rpki-client