Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/34352e3137362e3234322e302f32332d3233203d3e20323638393630.roa
File:                     34352e3137362e3234322e302f32332d3233203d3e20323638393630.roa (raw, json)
Hash identifier:          YOr5+g3kLmUVyTDQ7zpiXYJQcROvOjH5OfpVRn9llEU=
Subject key identifier:   34:CE:A1:D4:3A:F1:F8:A3:5D:B7:7A:53:C8:F5:F4:0D:66:0A:11:56
Certificate issuer:       /CN=E68D8AFF33E9846F7D024674CA13BD85A5518335
Certificate serial:       30ABFEC14E0669C72CF1C0626E35AE9BA7396C50
Authority key identifier: E6:8D:8A:FF:33:E9:84:6F:7D:02:46:74:CA:13:BD:85:A5:51:83:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/34352e3137362e3234322e302f32332d3233203d3e20323638393630.roa
Signing time:             Fri 15 May 2026 15:04:00 +0000
ROA not before:           Fri 15 May 2026 14:59:00 +0000
ROA not after:            Fri 14 May 2027 15:04:00 +0000
asID:                     268960
IP address blocks:        45.176.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.crl
                          rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 07:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ab:fe:c1:4e:06:69:c7:2c:f1:c0:62:6e:35:ae:9b:a7:39:6c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E68D8AFF33E9846F7D024674CA13BD85A5518335
        Validity
            Not Before: May 15 14:59:00 2026 GMT
            Not After : May 14 15:04:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7b:1f:df:29:98:1c:de:0b:5b:48:02:13:71:
                    cf:2e:ad:be:18:52:89:69:d9:33:9b:53:4c:cb:f6:
                    76:24:7d:ae:7c:6b:fe:06:4f:b3:df:d9:e5:90:1d:
                    6c:b2:ce:97:c5:97:92:99:ed:f1:41:5f:d6:6c:21:
                    5f:71:10:25:ca:ae:5d:e2:47:50:a9:aa:ea:09:7c:
                    82:df:5f:68:07:c1:b1:df:9c:4e:46:d1:9d:dd:34:
                    96:15:ea:5a:96:b7:13:8b:07:2e:24:97:ae:35:4c:
                    a9:6f:47:75:74:87:c1:67:99:fe:c8:43:ab:43:46:
                    42:93:fe:35:e9:26:e5:a2:a2:b2:a1:7d:90:47:7c:
                    1f:bc:ae:16:c2:1f:0b:74:d0:2d:da:8c:ce:95:62:
                    5f:c4:0b:01:8a:e7:6b:f0:5f:86:86:50:94:f3:4c:
                    ce:30:e4:46:d9:f6:65:02:35:2e:94:4a:dd:56:05:
                    ee:c8:f6:b0:f1:dc:8a:fd:48:e7:04:03:4f:3e:3b:
                    ad:6e:3f:9a:52:ec:2b:94:77:b8:3b:7f:30:87:84:
                    44:1c:8b:2b:5c:f8:09:39:03:90:4d:b1:d9:40:97:
                    7e:fe:6f:9d:c8:d4:28:2b:c8:da:86:4f:e1:43:a0:
                    67:4f:90:3a:36:53:28:45:c5:54:16:43:87:4f:d2:
                    d8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:CE:A1:D4:3A:F1:F8:A3:5D:B7:7A:53:C8:F5:F4:0D:66:0A:11:56
            X509v3 Authority Key Identifier:
                keyid:E6:8D:8A:FF:33:E9:84:6F:7D:02:46:74:CA:13:BD:85:A5:51:83:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/34352e3137362e3234322e302f32332d3233203d3e20323638393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c8:1c:00:63:25:5f:45:c1:13:b0:e4:43:e3:ab:a2:d0:31:f8:
         0d:9d:f1:f8:4c:90:0e:55:5b:1d:f1:6c:f6:6a:0b:1c:a4:cb:
         0f:4f:1e:ac:fc:18:88:34:c4:40:85:4f:ce:3b:69:90:f1:91:
         18:e1:a1:d1:f7:86:10:0a:d8:f3:07:64:17:e7:2d:16:61:9e:
         d2:69:c6:2b:ca:f4:d3:52:fa:ae:fa:bf:b7:06:fc:a4:1e:2b:
         30:9e:5d:f6:19:0e:5c:71:7d:d1:fd:c3:47:a8:9e:73:a7:c8:
         1b:6e:86:83:c9:b9:8b:1d:44:79:76:95:89:2f:74:45:a3:1d:
         7a:07:6f:59:d5:d1:6c:9e:65:2a:5d:82:bf:07:08:e3:e4:cb:
         e1:8d:be:ec:80:95:6e:32:08:d4:08:3d:23:25:a9:09:99:e3:
         3d:19:ae:83:14:47:38:50:6d:90:f6:4d:95:08:44:e4:4c:6d:
         30:ce:e3:45:1a:ab:ad:07:41:01:26:6d:37:b1:81:e1:85:2b:
         0e:8c:88:05:66:df:76:97:2d:b6:82:16:fb:ff:d7:bb:76:ac:
         60:e3:0f:9e:7f:70:05:8a:af:06:de:a0:07:36:0a:19:db:c5:
         00:9c:87:75:04:9f:c4:aa:83:85:5c:c8:ab:ad:44:9f:78:80:
         96:2a:66:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 15:59:16 2026 by rpki-client