Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/33fuzRiCZHnyPYFxaZqCvFHpuHS88CGkvydNckcDwWJR/0/34352e3137302e35342e302f32342d3234203d3e20323638373138.roa
File:                     34352e3137302e35342e302f32342d3234203d3e20323638373138.roa (raw, json)
Hash identifier:          j8WXKywhxVmFFUbeZdAVpdYlYq7i1e9T1jPv3imd1ho=
Subject key identifier:   41:28:11:10:71:A4:8D:84:D0:A3:8A:D4:51:D9:FE:2C:03:05:16:9A
Certificate issuer:       /CN=66C430B687446C8AE3DC36FB07B27F2333E6639B
Certificate serial:       72C3B2F29FBDB588DADCE76FD948FBF213B15DC7
Authority key identifier: 66:C4:30:B6:87:44:6C:8A:E3:DC:36:FB:07:B2:7F:23:33:E6:63:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66C430B687446C8AE3DC36FB07B27F2333E6639B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/33fuzRiCZHnyPYFxaZqCvFHpuHS88CGkvydNckcDwWJR/0/34352e3137302e35342e302f32342d3234203d3e20323638373138.roa
Signing time:             Tue 22 Sep 2026 20:41:10 +0000
ROA not before:           Tue 22 Sep 2026 20:36:10 +0000
ROA not after:            Tue 21 Sep 2027 20:41:10 +0000
asID:                     268718
IP address blocks:        45.170.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/33fuzRiCZHnyPYFxaZqCvFHpuHS88CGkvydNckcDwWJR/0/66C430B687446C8AE3DC36FB07B27F2333E6639B.crl
                          rsync://rpki-repo.registro.br/repo/33fuzRiCZHnyPYFxaZqCvFHpuHS88CGkvydNckcDwWJR/0/66C430B687446C8AE3DC36FB07B27F2333E6639B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66C430B687446C8AE3DC36FB07B27F2333E6639B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 12:41:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c3:b2:f2:9f:bd:b5:88:da:dc:e7:6f:d9:48:fb:f2:13:b1:5d:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66C430B687446C8AE3DC36FB07B27F2333E6639B
        Validity
            Not Before: Sep 22 20:36:10 2026 GMT
            Not After : Sep 21 20:41:10 2027 GMT
        Subject: CN=4128111071A48D84D0A38AD451D9FE2C0305169A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:36:a2:8b:31:35:2b:c9:89:f6:a5:3c:05:98:
                    a8:b7:57:2d:01:a0:24:1f:ae:10:b3:17:51:e5:17:
                    ea:5e:03:0c:d6:40:79:9f:b1:a3:ee:4c:77:a3:9f:
                    98:df:83:a5:d0:ce:01:26:25:78:20:fe:a2:8e:2a:
                    a3:79:48:51:f1:15:da:a7:f6:92:48:e4:93:53:c1:
                    ae:57:e0:6f:a4:a1:5a:40:0f:0e:ab:27:3f:7e:c3:
                    1a:a0:39:4b:49:84:a6:81:9a:09:8e:36:04:66:d4:
                    82:9f:b0:af:c7:d0:a9:a7:a7:50:e9:53:4d:a2:69:
                    d8:c7:54:11:15:ed:39:43:aa:88:aa:db:56:b8:93:
                    da:63:d2:bc:24:f7:ad:d5:9f:84:95:8e:90:d9:48:
                    b7:8c:d7:1f:bc:e9:0a:b4:dc:d7:5f:7e:7b:76:4a:
                    1f:28:fc:c9:b8:3b:22:38:04:2b:98:7f:45:59:22:
                    1e:ae:f0:00:28:80:3f:4b:7c:11:55:26:af:5e:60:
                    19:14:ac:de:57:44:d5:ed:36:b2:6a:e3:32:04:d3:
                    c4:e6:42:b7:5c:c4:47:6a:4d:26:aa:ca:27:c6:55:
                    77:67:51:fd:15:8e:52:e2:30:23:87:38:81:44:37:
                    cb:2c:48:07:86:bf:b1:f9:5f:d8:f1:a5:4b:d9:de:
                    e5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:28:11:10:71:A4:8D:84:D0:A3:8A:D4:51:D9:FE:2C:03:05:16:9A
            X509v3 Authority Key Identifier:
                keyid:66:C4:30:B6:87:44:6C:8A:E3:DC:36:FB:07:B2:7F:23:33:E6:63:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/33fuzRiCZHnyPYFxaZqCvFHpuHS88CGkvydNckcDwWJR/0/66C430B687446C8AE3DC36FB07B27F2333E6639B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66C430B687446C8AE3DC36FB07B27F2333E6639B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/33fuzRiCZHnyPYFxaZqCvFHpuHS88CGkvydNckcDwWJR/0/34352e3137302e35342e302f32342d3234203d3e20323638373138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dd:d9:a9:40:41:b5:d7:7b:e1:ea:1f:74:d3:c5:0f:90:28:ec:
         de:63:61:60:af:f5:ef:f7:20:2a:c1:39:83:e5:94:d3:c4:62:
         63:9a:bd:3a:42:ad:66:ba:92:83:fb:74:d5:9d:fb:8f:31:40:
         c7:c8:6a:49:9a:39:00:13:0d:f7:c6:91:63:33:93:c1:c9:8b:
         8b:80:8c:39:6b:ce:9e:04:47:69:67:00:4c:7e:36:a1:d3:f4:
         39:e0:cc:51:d2:e1:06:72:61:83:b8:e9:5d:62:5c:58:64:37:
         26:57:7b:10:89:bd:80:29:74:2c:4f:5e:bd:b6:b0:60:4d:fd:
         5e:0c:e4:c6:d7:d9:15:7c:a9:fb:c7:5a:77:53:45:9b:fd:03:
         a8:e9:85:d4:3a:be:57:55:94:e0:7f:25:65:e4:c4:64:02:13:
         80:35:3c:ae:5a:b2:60:e5:07:6b:08:69:38:5f:2e:ba:5b:bf:
         2f:f6:21:9e:b9:94:21:0d:ef:46:86:39:ee:3f:48:6f:3e:b9:
         0b:cf:d8:de:16:44:da:3c:14:52:64:03:62:10:94:c8:44:00:
         7a:cd:5e:88:d9:d2:fc:5d:6b:f4:11:88:18:ac:ba:57:01:a4:
         ea:8e:df:db:c7:c4:c3:68:3e:49:6e:0e:ee:c7:9a:c1:bd:39:
         a2:0a:2f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:55:38 2026 by rpki-client