Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bk1A8mkEcjfxosBHuo5DGx8nutsvfqahJikHN8pYWY1G/0/34352e3137352e3138372e302f32342d3234203d3e20323638393034.roa
File:                     34352e3137352e3138372e302f32342d3234203d3e20323638393034.roa (raw, json)
Hash identifier:          lfjNONQtTz9kQvONe8dg4XztCtHCUgqeWAq3bZ/15yw=
Subject key identifier:   33:23:53:DC:B7:4F:B7:D1:95:A2:C6:02:45:AB:78:4C:22:16:37:7A
Certificate issuer:       /CN=51C7BA1E3942705B2F09644F9699345322A65D7B
Certificate serial:       40B7AD75449AD233D53F0F00BB3925B7551E03D6
Authority key identifier: 51:C7:BA:1E:39:42:70:5B:2F:09:64:4F:96:99:34:53:22:A6:5D:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51C7BA1E3942705B2F09644F9699345322A65D7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bk1A8mkEcjfxosBHuo5DGx8nutsvfqahJikHN8pYWY1G/0/34352e3137352e3138372e302f32342d3234203d3e20323638393034.roa
Signing time:             Tue 19 May 2026 13:19:22 +0000
ROA not before:           Tue 19 May 2026 13:14:22 +0000
ROA not after:            Tue 18 May 2027 13:19:22 +0000
asID:                     268904
IP address blocks:        45.175.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bk1A8mkEcjfxosBHuo5DGx8nutsvfqahJikHN8pYWY1G/0/51C7BA1E3942705B2F09644F9699345322A65D7B.crl
                          rsync://rpki-repo.registro.br/repo/Bk1A8mkEcjfxosBHuo5DGx8nutsvfqahJikHN8pYWY1G/0/51C7BA1E3942705B2F09644F9699345322A65D7B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51C7BA1E3942705B2F09644F9699345322A65D7B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 03:31:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b7:ad:75:44:9a:d2:33:d5:3f:0f:00:bb:39:25:b7:55:1e:03:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51C7BA1E3942705B2F09644F9699345322A65D7B
        Validity
            Not Before: May 19 13:14:22 2026 GMT
            Not After : May 18 13:19:22 2027 GMT
        Subject: CN=332353DCB74FB7D195A2C60245AB784C2216377A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c6:b1:d4:c9:7f:b8:5a:ef:2c:6b:be:e5:bf:
                    60:67:6a:d0:f5:81:45:17:2c:12:67:7f:91:14:a1:
                    d6:6f:53:0d:fd:ae:e6:8c:2f:a2:a1:ae:23:2f:63:
                    a6:b8:7e:e9:5c:91:69:e9:fb:b1:9f:6d:cb:a7:c9:
                    ef:d3:88:68:90:3d:a7:af:15:c5:f5:f1:13:c4:27:
                    3c:72:f9:63:f6:f9:68:23:44:ae:ed:00:2d:75:be:
                    4f:4a:f1:68:10:59:ff:93:df:74:08:2e:76:f8:b8:
                    28:56:7e:df:01:4c:8b:1a:fa:b9:d3:13:b2:eb:35:
                    ea:81:b5:14:32:7c:19:99:dd:97:e7:a0:f2:58:9d:
                    fe:61:f2:a1:59:bb:5e:cf:b3:cc:6b:2e:07:5e:f7:
                    3e:1a:5a:22:26:79:13:1f:e5:7b:c0:ca:7c:91:3e:
                    83:aa:8b:42:2c:86:85:5c:03:a0:bf:51:0a:48:e6:
                    63:de:e5:4c:bb:1f:31:28:33:ad:2a:5d:dd:c1:29:
                    b5:4a:ef:0b:99:81:11:0c:1f:08:91:1f:ab:a3:9a:
                    8d:04:a9:f0:f8:2d:a9:44:cf:41:78:d3:39:c1:98:
                    f6:6b:5f:49:7f:fe:9e:dd:c8:84:ca:42:05:1c:99:
                    64:68:1a:16:13:24:5c:8b:23:54:77:60:4f:b9:9e:
                    ab:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:23:53:DC:B7:4F:B7:D1:95:A2:C6:02:45:AB:78:4C:22:16:37:7A
            X509v3 Authority Key Identifier:
                keyid:51:C7:BA:1E:39:42:70:5B:2F:09:64:4F:96:99:34:53:22:A6:5D:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bk1A8mkEcjfxosBHuo5DGx8nutsvfqahJikHN8pYWY1G/0/51C7BA1E3942705B2F09644F9699345322A65D7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51C7BA1E3942705B2F09644F9699345322A65D7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bk1A8mkEcjfxosBHuo5DGx8nutsvfqahJikHN8pYWY1G/0/34352e3137352e3138372e302f32342d3234203d3e20323638393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:37:8a:40:af:95:ad:13:a5:40:5d:44:de:ea:4c:c5:74:69:
         00:ca:1b:65:1c:0e:e1:17:7e:3d:ab:66:51:ab:a6:c7:a4:de:
         00:91:32:5a:07:39:72:53:dd:0e:9c:d4:83:83:21:7a:69:19:
         f7:ea:e5:e3:96:d3:27:dc:ab:48:4f:71:12:02:5e:c1:08:71:
         9c:10:53:46:69:04:59:a4:ef:e4:d1:03:c4:1e:74:10:1c:cb:
         9c:e2:53:55:a5:1b:e6:ad:0a:85:c2:aa:b5:51:9c:77:72:e3:
         c0:b8:ff:ec:9f:f7:10:63:93:ca:36:f2:64:dd:69:64:69:2a:
         a2:6b:08:ee:d8:20:7c:5f:41:c3:1d:b5:91:0c:e5:c4:36:86:
         72:33:d6:8f:f5:6b:dd:9c:19:ca:b0:08:ef:77:21:8b:8a:df:
         12:16:7b:75:ce:f5:ca:d5:38:96:3e:ef:ea:73:3d:d3:61:77:
         ba:4e:71:de:f5:25:71:d2:30:4a:b9:ab:cb:00:a5:43:2a:f4:
         28:c1:b0:dc:43:03:3c:3d:98:82:ed:75:f0:b6:c4:c1:90:6c:
         a6:d8:1d:db:74:7a:f9:e1:21:c7:5b:6a:8d:3f:c1:27:07:00:
         b0:23:47:e9:3f:49:d0:1a:74:5e:92:dd:38:42:0c:e3:0a:ee:
         78:0d:56:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 15:05:16 2026 by rpki-client