Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/34352e3136332e3137332e302f32342d3234203d3e20323638353536.roa
File:                     34352e3136332e3137332e302f32342d3234203d3e20323638353536.roa (raw, json)
Hash identifier:          h0OMDp3AOZL+N26qBfptGzHpzt/isUmdSG1fZ+gNKQ4=
Subject key identifier:   0F:03:3F:C5:29:D0:DF:A3:62:B2:5C:68:E8:49:F7:08:8D:32:79:60
Certificate issuer:       /CN=D9870BA926720D53BB9EEBE2A59B473AB1E85E73
Certificate serial:       2C3ADBE43B8D50C29863B2C955554993C0E8BAD9
Authority key identifier: D9:87:0B:A9:26:72:0D:53:BB:9E:EB:E2:A5:9B:47:3A:B1:E8:5E:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9870BA926720D53BB9EEBE2A59B473AB1E85E73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/34352e3136332e3137332e302f32342d3234203d3e20323638353536.roa
Signing time:             Wed 13 May 2026 13:44:46 +0000
ROA not before:           Wed 13 May 2026 13:39:46 +0000
ROA not after:            Wed 12 May 2027 13:44:46 +0000
asID:                     268556
IP address blocks:        45.163.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/D9870BA926720D53BB9EEBE2A59B473AB1E85E73.crl
                          rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/D9870BA926720D53BB9EEBE2A59B473AB1E85E73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9870BA926720D53BB9EEBE2A59B473AB1E85E73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 07:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:3a:db:e4:3b:8d:50:c2:98:63:b2:c9:55:55:49:93:c0:e8:ba:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9870BA926720D53BB9EEBE2A59B473AB1E85E73
        Validity
            Not Before: May 13 13:39:46 2026 GMT
            Not After : May 12 13:44:46 2027 GMT
        Subject: CN=0F033FC529D0DFA362B25C68E849F7088D327960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:22:37:75:8e:17:80:c9:64:2e:29:40:9a:74:
                    e7:dd:52:ad:09:81:09:8a:9c:7f:fa:a7:7d:a9:ee:
                    a1:cb:82:e9:8b:26:90:9e:26:a7:72:c5:d5:47:28:
                    b7:a1:43:37:ea:ec:8e:76:89:4b:72:6e:cb:6f:a9:
                    be:1b:0d:12:ed:ad:db:ca:a5:a3:4c:71:f7:40:39:
                    01:98:10:74:89:c0:e6:c0:f7:c0:8f:69:89:98:5f:
                    97:85:50:c1:5e:c5:be:f8:78:f6:c5:7f:09:4c:65:
                    aa:25:8b:c4:45:f5:82:51:2d:7c:b0:01:66:41:d6:
                    57:87:e0:05:7f:be:31:63:ad:ba:35:20:68:f4:d9:
                    74:0f:49:71:6b:52:13:47:14:af:15:ac:62:f9:4d:
                    0b:b6:b7:df:1b:d9:60:d5:1b:e6:5a:a0:b4:77:91:
                    d0:7f:8a:4f:93:27:32:59:1a:86:41:db:d1:5b:f2:
                    36:2f:fe:19:48:65:c7:a9:97:49:3a:3c:9c:a2:3e:
                    ec:d4:13:06:a5:2a:e7:75:d0:02:01:06:da:c5:b9:
                    8e:70:8f:48:8e:16:50:89:3f:0d:ec:2f:95:6a:91:
                    a3:62:cf:2f:26:d5:76:5e:97:3f:d7:85:0f:e0:7e:
                    6c:7a:b2:31:ba:ed:7e:e2:99:f6:09:11:01:e8:09:
                    56:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:03:3F:C5:29:D0:DF:A3:62:B2:5C:68:E8:49:F7:08:8D:32:79:60
            X509v3 Authority Key Identifier:
                keyid:D9:87:0B:A9:26:72:0D:53:BB:9E:EB:E2:A5:9B:47:3A:B1:E8:5E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/D9870BA926720D53BB9EEBE2A59B473AB1E85E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9870BA926720D53BB9EEBE2A59B473AB1E85E73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/34352e3136332e3137332e302f32342d3234203d3e20323638353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:ad:9d:77:f5:63:17:8c:a4:f1:62:97:0f:d5:60:ba:83:46:
         43:0b:0d:69:81:90:77:ae:df:8a:dc:23:ef:c9:50:c7:a4:a0:
         4b:cd:65:e0:dc:9e:7f:dd:ab:8b:42:82:c7:12:f2:3b:60:c4:
         d4:34:a2:fd:bd:24:e3:a6:1e:c8:49:7c:ec:14:39:f8:e3:96:
         cc:32:83:23:ba:68:0f:0c:09:ad:5e:f7:af:4a:70:41:e6:3e:
         c9:0f:3e:ee:37:71:63:5d:8d:ec:6d:72:86:6e:73:1f:29:43:
         f8:32:48:a4:28:8b:dc:9b:94:58:2e:d0:ee:92:6b:c7:6f:13:
         36:6e:38:18:47:dd:46:9b:5b:74:e6:04:12:67:65:da:db:43:
         2e:2c:12:dc:21:c5:b7:5f:48:2b:e8:ff:88:ce:3c:ec:cd:c0:
         0c:38:9e:5b:40:98:1e:c4:49:00:09:e2:16:7e:38:f4:fe:f7:
         31:cd:67:1b:72:c1:9f:e6:05:9e:cd:7d:f7:3a:90:f7:a0:67:
         99:42:c6:a7:be:0c:48:e6:e5:c8:6f:49:f7:ba:ae:1a:ec:08:
         00:15:e2:64:e0:e5:97:e0:a7:53:78:5b:38:1a:0e:b2:c5:a5:
         ed:82:fd:2d:75:b8:66:ae:16:4f:88:65:88:63:51:55:17:9e:
         70:0b:f2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:45:35 2026 by rpki-client