Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F5qUGcsbDC3g9aBdvmRenu2R3ub1FYq41UtzW3TxGZ42/0/34352e37302e34352e302f32342d3234203d3e20323637353635.roa
File:                     34352e37302e34352e302f32342d3234203d3e20323637353635.roa (raw, json)
Hash identifier:          OijN0iv+Gc24vYgFCJPWPLIa8DDVKqcqCHCknGJczfM=
Subject key identifier:   D2:AC:E0:75:03:49:A7:4C:8E:09:0B:ED:7A:ED:CD:61:D9:CE:57:E2
Certificate issuer:       /CN=D237609A13C9C7211EAE97129E472BB772C3C6AD
Certificate serial:       473362866B86F8B28286293AB41325A0474E59C8
Authority key identifier: D2:37:60:9A:13:C9:C7:21:1E:AE:97:12:9E:47:2B:B7:72:C3:C6:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D237609A13C9C7211EAE97129E472BB772C3C6AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F5qUGcsbDC3g9aBdvmRenu2R3ub1FYq41UtzW3TxGZ42/0/34352e37302e34352e302f32342d3234203d3e20323637353635.roa
Signing time:             Mon 18 May 2026 21:34:33 +0000
ROA not before:           Mon 18 May 2026 21:29:33 +0000
ROA not after:            Mon 17 May 2027 21:34:33 +0000
asID:                     267565
IP address blocks:        45.70.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F5qUGcsbDC3g9aBdvmRenu2R3ub1FYq41UtzW3TxGZ42/0/D237609A13C9C7211EAE97129E472BB772C3C6AD.crl
                          rsync://rpki-repo.registro.br/repo/F5qUGcsbDC3g9aBdvmRenu2R3ub1FYq41UtzW3TxGZ42/0/D237609A13C9C7211EAE97129E472BB772C3C6AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D237609A13C9C7211EAE97129E472BB772C3C6AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 04:58:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:33:62:86:6b:86:f8:b2:82:86:29:3a:b4:13:25:a0:47:4e:59:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D237609A13C9C7211EAE97129E472BB772C3C6AD
        Validity
            Not Before: May 18 21:29:33 2026 GMT
            Not After : May 17 21:34:33 2027 GMT
        Subject: CN=D2ACE0750349A74C8E090BED7AEDCD61D9CE57E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a8:aa:13:9f:bf:39:e0:a9:d6:b9:ef:77:08:
                    f6:8a:34:43:1a:11:36:d7:77:71:6a:5d:d1:28:1c:
                    87:cb:19:50:ab:9e:32:47:f6:c6:17:72:93:b7:d9:
                    21:cd:b2:8f:4c:41:09:72:c4:79:e1:e2:01:5c:71:
                    f8:ba:57:09:57:31:89:11:ca:6c:5c:9e:44:ff:38:
                    90:68:7d:99:d0:db:46:9c:e0:65:19:9d:b2:54:57:
                    87:0a:f6:ca:48:7d:9e:69:84:3f:a3:a0:5d:16:18:
                    13:07:17:34:35:84:4b:89:a1:78:93:b1:5e:a0:0f:
                    a8:18:11:54:aa:e3:58:78:c1:6d:f2:1b:00:dd:bb:
                    2d:6a:58:80:06:cd:fa:58:52:49:19:8c:0a:fa:1f:
                    bf:30:f5:d8:5c:ef:b9:49:4d:17:06:a4:d0:88:3f:
                    4d:41:f8:ff:68:3f:f6:9b:c0:57:74:28:d3:e8:16:
                    b6:d8:13:05:c4:a8:17:28:12:8c:c7:2a:74:de:12:
                    f1:60:6f:99:2c:da:35:c5:b5:3a:6e:85:cb:1e:57:
                    aa:a1:95:42:58:df:87:55:9f:c2:85:ba:8c:d9:67:
                    44:df:95:a9:3e:39:7e:28:27:74:ed:5b:f0:54:f3:
                    af:5f:79:f4:ab:bb:06:2e:61:1d:20:92:1b:52:d1:
                    75:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AC:E0:75:03:49:A7:4C:8E:09:0B:ED:7A:ED:CD:61:D9:CE:57:E2
            X509v3 Authority Key Identifier:
                keyid:D2:37:60:9A:13:C9:C7:21:1E:AE:97:12:9E:47:2B:B7:72:C3:C6:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F5qUGcsbDC3g9aBdvmRenu2R3ub1FYq41UtzW3TxGZ42/0/D237609A13C9C7211EAE97129E472BB772C3C6AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D237609A13C9C7211EAE97129E472BB772C3C6AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F5qUGcsbDC3g9aBdvmRenu2R3ub1FYq41UtzW3TxGZ42/0/34352e37302e34352e302f32342d3234203d3e20323637353635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:e3:fa:13:36:b3:88:44:58:0a:6f:c5:7f:e5:4b:bc:0a:b2:
         66:0b:9f:ed:44:89:de:f1:2f:a9:22:e6:5f:08:17:f4:9b:ce:
         3f:cb:63:c9:1a:86:bc:b4:56:32:c1:9f:3c:d8:79:b5:a2:48:
         c4:9d:ef:ca:6b:47:96:0d:80:d1:b4:6d:7f:fe:76:ef:77:f8:
         ef:93:a3:ba:e4:a0:9d:26:6a:b8:69:ab:ca:8d:5b:02:51:1c:
         c9:f3:fa:f3:a4:63:46:73:be:4b:3f:be:aa:01:e2:93:bc:9e:
         e7:f6:c7:eb:45:3e:0a:4d:b1:d0:b7:1d:e8:15:f3:8c:79:65:
         21:cb:cb:b3:5b:b2:b3:ad:3a:a1:54:13:e2:df:a4:84:85:3c:
         ea:a9:2e:09:cb:ff:3c:f7:6f:a6:d5:67:19:09:86:f5:9f:5f:
         0c:5e:04:cf:35:93:0b:73:54:46:84:5e:0c:85:76:8d:6d:10:
         03:b5:48:1e:e8:ce:f3:aa:b3:9e:7e:67:1a:6b:d8:08:70:f3:
         46:b0:01:ba:b0:c9:ae:79:7c:90:00:00:a0:75:83:b2:bd:5a:
         79:11:07:62:54:0d:65:ee:06:d8:fb:1c:75:e1:f0:0b:32:37:
         98:14:f9:58:db:14:9f:c9:7f:16:49:16:24:44:1d:e1:3b:a3:
         b4:ec:80:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:40:55 2026 by rpki-client