Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/34352e3136382e3137302e302f32332d3233203d3e20323638303737.roa
File:                     34352e3136382e3137302e302f32332d3233203d3e20323638303737.roa (raw, json)
Hash identifier:          pxxYd2ZP5yn6Sl2zou88ZLM65ph4WU+EKs52XzrbHLc=
Subject key identifier:   15:85:37:4C:8A:9C:71:B3:E4:5C:92:A3:92:E4:90:3F:39:E4:E1:E5
Certificate issuer:       /CN=974B1286BDF6AAAF8648D23141EAB781B973C049
Certificate serial:       65B3A89CB382324390D4E9A5F8BA6C4CF54F9A55
Authority key identifier: 97:4B:12:86:BD:F6:AA:AF:86:48:D2:31:41:EA:B7:81:B9:73:C0:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/974B1286BDF6AAAF8648D23141EAB781B973C049.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/34352e3136382e3137302e302f32332d3233203d3e20323638303737.roa
Signing time:             Wed 15 Jul 2026 16:38:43 +0000
ROA not before:           Wed 15 Jul 2026 16:33:43 +0000
ROA not after:            Wed 14 Jul 2027 16:38:43 +0000
asID:                     268077
IP address blocks:        45.168.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/974B1286BDF6AAAF8648D23141EAB781B973C049.crl
                          rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/974B1286BDF6AAAF8648D23141EAB781B973C049.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/974B1286BDF6AAAF8648D23141EAB781B973C049.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 04:28:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:b3:a8:9c:b3:82:32:43:90:d4:e9:a5:f8:ba:6c:4c:f5:4f:9a:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974B1286BDF6AAAF8648D23141EAB781B973C049
        Validity
            Not Before: Jul 15 16:33:43 2026 GMT
            Not After : Jul 14 16:38:43 2027 GMT
        Subject: CN=1585374C8A9C71B3E45C92A392E4903F39E4E1E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f3:d7:e4:8c:cc:9a:7f:c7:14:66:b2:b2:48:
                    f8:9b:48:72:ee:e5:e9:68:93:86:07:e5:0c:75:2d:
                    95:53:a4:18:e0:0f:c6:16:39:8d:ce:eb:84:45:ed:
                    e9:f0:84:68:6b:ed:c9:96:57:21:1a:c5:8e:22:50:
                    8f:38:e4:91:50:40:64:a4:a1:fe:73:3c:ac:df:51:
                    cb:4e:ef:5a:f6:60:64:94:2b:3c:7f:1e:76:ba:90:
                    d8:22:16:e6:00:64:b6:fa:f9:14:e0:89:73:82:63:
                    9a:2f:d4:32:be:08:2e:d7:49:af:de:a4:87:52:d1:
                    22:17:94:53:1f:98:88:d8:9b:b0:d7:a9:9f:c4:ae:
                    ae:3b:ba:0d:a3:f3:54:96:45:a0:75:68:f6:81:6f:
                    d0:88:ea:f1:2d:24:05:d8:15:22:ed:49:dc:43:2a:
                    be:ee:46:29:c5:cb:0c:dc:f4:07:17:b4:37:de:bf:
                    5b:92:c1:b3:11:e9:5b:bd:ec:b7:e1:1e:7f:64:0c:
                    14:92:d7:61:4c:1b:85:0c:10:11:51:9e:f1:93:4d:
                    8d:fa:5b:26:9f:36:b7:8c:f3:e6:99:40:f3:54:dd:
                    ff:d2:50:bf:9b:d4:f7:51:c3:ac:c5:73:df:56:1a:
                    09:79:85:61:e0:4d:ae:e8:df:74:b1:7b:d8:2f:40:
                    10:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:85:37:4C:8A:9C:71:B3:E4:5C:92:A3:92:E4:90:3F:39:E4:E1:E5
            X509v3 Authority Key Identifier:
                keyid:97:4B:12:86:BD:F6:AA:AF:86:48:D2:31:41:EA:B7:81:B9:73:C0:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/974B1286BDF6AAAF8648D23141EAB781B973C049.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/974B1286BDF6AAAF8648D23141EAB781B973C049.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/34352e3136382e3137302e302f32332d3233203d3e20323638303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:ac:f3:b9:9a:47:29:b5:e1:af:17:88:33:bb:62:62:b0:96:
         b4:ab:ca:7a:51:42:48:86:69:72:2b:1f:08:dc:ae:14:a0:a4:
         c6:83:d0:f3:ff:8f:bd:84:90:a7:8a:82:df:d8:52:6b:4a:c7:
         f8:71:20:ab:83:06:da:aa:78:8e:8f:b7:8c:f8:d1:5e:e9:be:
         97:4d:a2:12:f1:ec:4e:ea:44:9a:31:4d:84:32:f7:ad:95:91:
         ac:33:cb:82:b0:f6:ab:97:db:f5:78:f1:f5:39:e2:c2:19:8b:
         0e:38:74:89:88:d1:c5:43:40:3f:d3:bf:5e:e4:04:eb:dd:5f:
         1c:01:80:c2:3b:19:c3:88:24:f5:95:a4:70:0b:29:20:5e:9e:
         bc:88:cb:ba:ba:c6:ee:16:bf:f4:ea:e6:34:99:56:03:3a:d6:
         ac:53:c0:de:50:fb:0f:b3:36:30:16:7e:db:39:f8:85:61:a1:
         37:12:bf:be:aa:fc:67:f9:b4:ba:7f:46:72:56:d6:29:96:ef:
         d9:3a:9b:cf:ce:d6:4f:6b:41:96:64:71:a1:c5:79:20:6b:e7:
         5b:c9:db:63:ce:a4:6d:9c:ce:a3:27:19:c9:4b:4e:28:8d:43:
         46:c0:95:13:4a:27:2f:7a:8d:90:26:25:5a:e9:89:fd:79:16:
         ad:39:7c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:53:52 2026 by rpki-client