Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/34352e3137362e3234302e302f32332d3233203d3e20323638393630.roa
File:                     34352e3137362e3234302e302f32332d3233203d3e20323638393630.roa (raw, json)
Hash identifier:          wfCsbWf9UnXyT7UfN3z2Ext2WE8fuIxF+1CRVpX3C9s=
Subject key identifier:   71:0F:87:C4:97:D7:D1:00:1F:BE:D4:48:FF:D0:C4:4D:3F:D3:4D:8B
Certificate issuer:       /CN=E68D8AFF33E9846F7D024674CA13BD85A5518335
Certificate serial:       2AE34BBEC83AE7FA0E28994DE64B03033CFDCFBA
Authority key identifier: E6:8D:8A:FF:33:E9:84:6F:7D:02:46:74:CA:13:BD:85:A5:51:83:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/34352e3137362e3234302e302f32332d3233203d3e20323638393630.roa
Signing time:             Fri 15 May 2026 15:04:00 +0000
ROA not before:           Fri 15 May 2026 14:59:00 +0000
ROA not after:            Fri 14 May 2027 15:04:00 +0000
asID:                     268960
IP address blocks:        45.176.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.crl
                          rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 07:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:e3:4b:be:c8:3a:e7:fa:0e:28:99:4d:e6:4b:03:03:3c:fd:cf:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E68D8AFF33E9846F7D024674CA13BD85A5518335
        Validity
            Not Before: May 15 14:59:00 2026 GMT
            Not After : May 14 15:04:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fd:81:e8:7f:bc:c2:21:d2:d2:95:d4:68:b4:
                    df:4e:a0:ec:4d:87:d4:34:3d:bf:fe:05:07:35:ad:
                    7b:6b:11:d6:96:f7:d0:78:bd:ed:d7:79:ff:83:fc:
                    ac:fb:bc:b7:ee:db:54:83:ea:8e:13:c6:89:b3:8a:
                    0a:c8:ae:e6:be:0f:23:7d:de:c6:c5:ad:12:16:0f:
                    21:7f:40:8c:d4:91:71:2a:d7:32:96:f3:90:4d:cc:
                    e3:4c:6e:31:98:27:bc:6e:a3:ad:17:52:17:40:d3:
                    bd:42:7c:e2:bf:62:bd:b9:7c:7c:60:43:e7:21:ba:
                    7a:e4:4f:40:97:0e:a6:b5:67:d4:61:9a:98:b1:5c:
                    89:a1:d5:17:8e:07:f5:52:b6:dd:2a:38:3a:f7:0d:
                    2e:d2:07:f4:c3:29:ce:be:1d:23:03:19:6e:0b:f0:
                    07:a8:8b:a9:32:82:b9:ef:48:fc:96:0e:15:84:3c:
                    f8:a8:8c:fb:6e:02:75:02:a9:a2:14:80:f5:a0:10:
                    91:ca:44:9e:30:4b:2c:a2:05:31:8f:31:ea:fb:99:
                    26:18:db:d6:69:91:af:97:3e:0f:98:52:56:19:c3:
                    9a:d8:c7:1b:ef:b8:99:44:47:a7:8d:3c:ab:80:14:
                    6b:8f:b7:e1:1a:e5:36:5d:55:79:84:7e:9c:02:4f:
                    56:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:0F:87:C4:97:D7:D1:00:1F:BE:D4:48:FF:D0:C4:4D:3F:D3:4D:8B
            X509v3 Authority Key Identifier:
                keyid:E6:8D:8A:FF:33:E9:84:6F:7D:02:46:74:CA:13:BD:85:A5:51:83:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/34352e3137362e3234302e302f32332d3233203d3e20323638393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:1b:ae:35:d9:10:f1:81:82:8c:70:6f:36:e6:9a:9e:5a:13:
         2a:3e:a2:b0:db:5f:0d:4a:22:01:4f:99:13:26:bb:b8:33:84:
         f2:e0:5e:50:d5:b4:4e:1f:56:52:b6:15:c1:a4:1e:75:d9:31:
         4a:08:51:e4:71:c8:a9:af:8e:06:0b:c3:01:ae:3b:52:c0:d5:
         91:ce:6a:65:23:5e:b4:48:c9:31:c1:fa:68:e8:ea:d8:df:26:
         db:4f:6f:e5:28:f2:17:53:0d:5c:c8:20:81:57:30:39:6d:15:
         29:08:05:cf:40:e6:7c:1c:bc:2b:03:91:31:3f:32:37:c1:aa:
         40:82:df:6b:3d:72:e6:b7:8f:f9:5c:f7:45:2e:81:87:63:41:
         12:73:43:99:97:f8:3d:1d:f3:13:f9:30:29:9d:a5:26:08:7f:
         56:a6:33:4c:86:b1:67:e3:2a:97:4b:22:67:82:44:18:16:e9:
         73:c4:d1:20:74:b3:e2:cf:de:cb:8c:06:1c:45:12:e7:cc:36:
         5d:c6:81:8b:4b:7a:6d:19:4c:8c:e8:11:19:a1:c6:bd:c8:53:
         9a:16:e3:3b:d4:68:c1:d2:23:62:fa:23:81:09:c8:88:6f:a1:
         c0:10:d8:18:0a:96:0b:f5:21:79:01:c7:17:b1:31:39:39:02:
         a7:e0:af:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 15:59:09 2026 by rpki-client