Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/34352e3136382e3136392e302f32342d3234203d3e20323638303737.roa
File:                     34352e3136382e3136392e302f32342d3234203d3e20323638303737.roa (raw, json)
Hash identifier:          Z0J281BOPXvroozFFhyJxWsP0rzoFsEk+MQp7NYfe2E=
Subject key identifier:   7D:AE:9C:82:63:15:2C:21:FE:FE:EE:1C:62:16:7B:6F:B0:13:68:E2
Certificate issuer:       /CN=974B1286BDF6AAAF8648D23141EAB781B973C049
Certificate serial:       2BE707CC2403E0A701423E772F6DD6748B9C0640
Authority key identifier: 97:4B:12:86:BD:F6:AA:AF:86:48:D2:31:41:EA:B7:81:B9:73:C0:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/974B1286BDF6AAAF8648D23141EAB781B973C049.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/34352e3136382e3136392e302f32342d3234203d3e20323638303737.roa
Signing time:             Wed 15 Jul 2026 16:38:43 +0000
ROA not before:           Wed 15 Jul 2026 16:33:43 +0000
ROA not after:            Wed 14 Jul 2027 16:38:43 +0000
asID:                     268077
IP address blocks:        45.168.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/974B1286BDF6AAAF8648D23141EAB781B973C049.crl
                          rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/974B1286BDF6AAAF8648D23141EAB781B973C049.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/974B1286BDF6AAAF8648D23141EAB781B973C049.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 04:28:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:e7:07:cc:24:03:e0:a7:01:42:3e:77:2f:6d:d6:74:8b:9c:06:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974B1286BDF6AAAF8648D23141EAB781B973C049
        Validity
            Not Before: Jul 15 16:33:43 2026 GMT
            Not After : Jul 14 16:38:43 2027 GMT
        Subject: CN=7DAE9C8263152C21FEFEEE1C62167B6FB01368E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:71:2a:99:b4:a3:82:dd:c4:ce:d3:7e:84:46:
                    62:82:ff:a6:66:b0:39:dc:91:89:53:c5:35:5f:c5:
                    ab:73:26:cc:fe:db:74:0c:0a:52:e7:c6:1a:ed:13:
                    ab:71:0f:31:14:f2:c6:bc:8b:18:8d:fe:f7:1b:32:
                    17:56:cd:5b:cd:52:41:80:b6:db:c8:de:a0:f6:cd:
                    c8:15:79:5c:5b:41:e4:4a:a9:5f:bb:b5:a8:09:1d:
                    e2:30:05:6c:06:61:fe:56:ab:f7:16:f2:b0:b4:46:
                    4a:b8:b7:b6:1e:de:90:20:58:65:3b:89:32:cf:a1:
                    32:cd:81:3d:a6:f4:36:df:af:03:00:55:f4:a7:8a:
                    ed:15:e2:11:f6:d3:67:ac:04:bd:60:70:77:b2:db:
                    20:61:fb:20:00:0b:e8:32:8b:c6:d0:b2:95:13:37:
                    b4:ee:b6:b1:2c:bf:47:4b:9c:40:9a:63:b7:23:30:
                    b1:ed:d5:06:fc:98:f2:f1:bf:83:87:a4:cd:9f:f0:
                    78:2f:d3:bc:aa:7e:0a:51:34:8d:0d:40:ce:9d:a1:
                    4a:e3:3e:a2:56:c9:3d:0f:9c:b3:23:2d:a0:36:8c:
                    38:e6:4c:ed:f3:62:22:fa:dd:43:c6:25:4c:df:1b:
                    d0:ec:a8:0b:05:b9:0c:0e:6c:20:93:ce:14:8f:82:
                    df:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:AE:9C:82:63:15:2C:21:FE:FE:EE:1C:62:16:7B:6F:B0:13:68:E2
            X509v3 Authority Key Identifier:
                keyid:97:4B:12:86:BD:F6:AA:AF:86:48:D2:31:41:EA:B7:81:B9:73:C0:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/974B1286BDF6AAAF8648D23141EAB781B973C049.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/974B1286BDF6AAAF8648D23141EAB781B973C049.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/34352e3136382e3136392e302f32342d3234203d3e20323638303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:7d:24:e4:32:7e:fb:56:a5:95:e9:0d:86:57:75:a8:ec:58:
         2b:1c:68:35:5c:95:42:85:7b:47:7c:a9:f6:d7:96:cc:46:e0:
         a3:d3:df:3f:ee:11:0a:4f:59:6b:ee:2a:65:18:aa:d9:82:f7:
         f7:8e:93:29:b4:60:d0:1b:06:4f:71:6f:97:83:9b:ce:3c:76:
         f5:dd:b2:bc:4e:a1:87:34:59:45:a4:fc:a3:76:9c:8a:40:a3:
         16:8d:db:5a:e5:54:43:13:f7:07:9d:20:64:da:db:da:64:08:
         71:19:57:44:b5:a4:e6:30:a0:9b:31:ef:1e:dd:8d:92:23:5d:
         d8:f9:e2:df:b3:93:25:24:38:06:2c:55:f8:3a:e8:39:38:99:
         0c:1c:0e:f5:1b:71:ac:49:60:4f:ae:9e:ff:25:21:7b:c4:e5:
         7b:91:34:8c:a5:24:62:21:d7:c6:72:64:0c:1f:9a:e5:ad:29:
         05:52:1f:52:2f:a9:61:03:f7:b2:05:9a:d7:81:85:2c:bc:ad:
         8b:a8:ea:19:6f:58:b5:16:43:55:0d:5a:33:cb:f7:f7:bc:07:
         59:31:29:5a:a5:04:4b:31:28:46:b6:dc:43:ae:3f:21:c8:8f:
         23:3e:b4:4c:7f:da:91:51:05:48:2e:9f:e2:ea:87:5e:e2:69:
         7f:05:f8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:43:26 2026 by rpki-client