Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/34352e3136332e3137352e302f32342d3234203d3e20323638353536.roa
File:                     34352e3136332e3137352e302f32342d3234203d3e20323638353536.roa (raw, json)
Hash identifier:          bDQFnRashZCsZCh94GRa45rpt5dsvrOkNLhsbO7e6kY=
Subject key identifier:   AE:CB:F6:F6:D1:1E:20:2F:18:4B:7A:C9:75:99:9A:84:0E:15:C0:1E
Certificate issuer:       /CN=D9870BA926720D53BB9EEBE2A59B473AB1E85E73
Certificate serial:       710F441ADF8AF7A135C54A3BE7EEFD1D5E3065F9
Authority key identifier: D9:87:0B:A9:26:72:0D:53:BB:9E:EB:E2:A5:9B:47:3A:B1:E8:5E:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9870BA926720D53BB9EEBE2A59B473AB1E85E73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/34352e3136332e3137352e302f32342d3234203d3e20323638353536.roa
Signing time:             Wed 13 May 2026 13:44:45 +0000
ROA not before:           Wed 13 May 2026 13:39:45 +0000
ROA not after:            Wed 12 May 2027 13:44:45 +0000
asID:                     268556
IP address blocks:        45.163.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/D9870BA926720D53BB9EEBE2A59B473AB1E85E73.crl
                          rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/D9870BA926720D53BB9EEBE2A59B473AB1E85E73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9870BA926720D53BB9EEBE2A59B473AB1E85E73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 07:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:0f:44:1a:df:8a:f7:a1:35:c5:4a:3b:e7:ee:fd:1d:5e:30:65:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9870BA926720D53BB9EEBE2A59B473AB1E85E73
        Validity
            Not Before: May 13 13:39:45 2026 GMT
            Not After : May 12 13:44:45 2027 GMT
        Subject: CN=AECBF6F6D11E202F184B7AC975999A840E15C01E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e2:2b:17:0f:3c:cb:30:b4:24:f2:03:dc:42:
                    6f:e0:ca:c6:67:8e:2d:f6:5c:36:1c:68:df:b1:30:
                    62:fa:dd:dd:c4:f7:ac:66:16:74:6e:14:e7:72:30:
                    09:fd:58:60:36:4f:9b:31:d7:08:f8:e0:c1:a1:06:
                    b1:db:bb:32:cd:0e:6d:d5:9c:7e:29:dc:0b:32:36:
                    18:dc:08:1f:7d:b2:dc:a1:da:5f:e2:43:ce:ee:b8:
                    af:74:46:ec:11:ea:10:65:da:0e:0b:42:dd:03:2a:
                    77:99:4a:a6:35:eb:20:49:7e:30:e6:f0:14:82:43:
                    ef:f4:ee:6b:70:9c:83:8a:30:8a:36:52:fb:f3:3c:
                    9f:84:c9:40:ca:ed:42:2f:13:bb:15:11:2f:13:22:
                    6d:66:2e:c3:d8:4d:66:05:e7:b7:12:0b:1e:82:95:
                    4c:96:a4:6f:f9:c6:dd:3a:1f:81:e0:88:87:2c:e4:
                    8a:b7:6d:f0:8a:09:49:d3:93:26:f3:a9:0e:69:74:
                    f6:8f:09:28:85:aa:db:04:2b:6d:29:72:1d:06:81:
                    c0:12:2d:c6:03:fa:ff:70:c5:39:bd:75:44:45:ba:
                    37:e1:a6:14:7d:f2:52:e0:0e:80:73:03:62:5b:31:
                    52:4f:88:b7:07:77:e4:34:68:7d:b7:f5:9d:f3:5e:
                    56:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:CB:F6:F6:D1:1E:20:2F:18:4B:7A:C9:75:99:9A:84:0E:15:C0:1E
            X509v3 Authority Key Identifier:
                keyid:D9:87:0B:A9:26:72:0D:53:BB:9E:EB:E2:A5:9B:47:3A:B1:E8:5E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/D9870BA926720D53BB9EEBE2A59B473AB1E85E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9870BA926720D53BB9EEBE2A59B473AB1E85E73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/34352e3136332e3137352e302f32342d3234203d3e20323638353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:ca:74:39:60:15:15:bf:d3:5d:47:9a:cd:1f:e8:9e:1b:cc:
         33:61:f6:eb:b1:86:5f:08:10:5d:bb:80:98:41:06:43:f6:f9:
         a6:f9:92:d7:53:eb:50:ac:25:5c:9f:c4:73:a1:b9:c6:ac:e3:
         bc:46:0c:67:0e:b9:6b:6a:19:ff:47:4f:56:1e:a9:83:96:8e:
         b8:c3:de:87:53:9d:63:f7:86:14:68:99:45:03:f8:8e:8e:32:
         3f:cf:83:07:f9:de:72:2c:b8:51:e6:40:16:37:d1:5d:92:f6:
         56:6a:2f:0e:cd:62:4c:ed:29:9c:a2:5e:10:e0:87:5e:6b:bc:
         45:55:16:f5:4f:36:8f:f3:07:86:75:33:e9:87:f1:91:7a:ee:
         69:a5:33:c3:e0:74:2b:3e:42:4d:bd:3e:1f:f3:25:6e:68:0f:
         4f:ae:66:00:de:ea:ee:d0:6b:85:ed:09:b0:d7:59:eb:dc:b3:
         b0:a4:4b:a2:7b:94:67:6e:72:e3:25:22:e1:1c:f2:91:d1:c7:
         64:b1:e9:3c:a0:b6:91:75:5b:97:ad:57:82:49:b1:d2:1a:e7:
         f7:36:74:ef:a1:2e:3f:33:71:01:e0:3e:f7:a9:86:1d:3f:47:
         11:a0:25:6e:21:d1:c6:74:eb:28:8a:aa:32:69:06:a1:34:36:
         6e:75:6d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 17:11:24 2026 by rpki-client