Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/34352e3136312e3132382e302f32322d3332203d3e20323638343539.roa
File:                     34352e3136312e3132382e302f32322d3332203d3e20323638343539.roa (raw, json)
Hash identifier:          Hof92lzIBVCJK+rTi2ObNDPeP/ADxes0OlXxmKBuUjE=
Subject key identifier:   E6:95:B2:F6:6F:DC:74:C1:5B:2E:0D:EF:20:65:56:84:AC:4B:15:EE
Certificate issuer:       /CN=CA78BCB51F15F29BEBB3DA7281CF011AF4FB1582
Certificate serial:       38705F682897CA53F07C1E43283AA9FA804A2A3A
Authority key identifier: CA:78:BC:B5:1F:15:F2:9B:EB:B3:DA:72:81:CF:01:1A:F4:FB:15:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA78BCB51F15F29BEBB3DA7281CF011AF4FB1582.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/34352e3136312e3132382e302f32322d3332203d3e20323638343539.roa
Signing time:             Wed 18 Mar 2026 20:40:28 +0000
ROA not before:           Wed 18 Mar 2026 20:35:28 +0000
ROA not after:            Wed 17 Mar 2027 20:40:28 +0000
asID:                     268459
IP address blocks:        45.161.128.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/CA78BCB51F15F29BEBB3DA7281CF011AF4FB1582.crl
                          rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/CA78BCB51F15F29BEBB3DA7281CF011AF4FB1582.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA78BCB51F15F29BEBB3DA7281CF011AF4FB1582.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 15:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:70:5f:68:28:97:ca:53:f0:7c:1e:43:28:3a:a9:fa:80:4a:2a:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA78BCB51F15F29BEBB3DA7281CF011AF4FB1582
        Validity
            Not Before: Mar 18 20:35:28 2026 GMT
            Not After : Mar 17 20:40:28 2027 GMT
        Subject: CN=E695B2F66FDC74C15B2E0DEF20655684AC4B15EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:aa:13:ca:a9:43:da:29:7d:43:fc:4a:40:78:
                    b4:77:9b:cc:82:89:4a:17:f7:3d:ea:bc:c9:10:ae:
                    c0:9b:1d:fc:3f:a8:b4:36:58:ff:76:ad:3a:8f:dd:
                    09:f9:ae:ce:41:44:f5:9b:3a:76:f3:88:e8:71:ac:
                    f7:94:a1:d1:80:8a:50:67:a6:b6:fc:dd:0a:d1:3f:
                    fa:bc:77:83:a2:e2:9c:0d:b7:22:47:0b:24:88:ad:
                    b5:43:9e:03:f6:f9:99:6b:2e:54:a5:55:e9:2d:15:
                    c2:3c:89:1d:dd:2a:9c:a3:b5:31:9a:38:1f:00:97:
                    ce:b3:9a:5f:40:4b:af:5f:96:6d:4d:15:d7:79:03:
                    8c:4d:dc:c0:bd:74:97:cb:07:b0:e3:81:02:24:6b:
                    c0:22:08:e5:f1:7f:07:7a:1f:1f:59:d3:42:10:7f:
                    a8:38:b8:65:80:d8:2a:bb:8a:1f:e0:24:b2:78:a2:
                    cc:55:a3:77:fc:66:fb:26:49:c7:15:88:b4:6f:53:
                    ba:d8:c2:ba:89:ff:cf:fe:f4:15:5f:3d:a9:1f:32:
                    77:00:05:27:5a:ed:28:9d:1c:4e:d9:69:15:d6:fd:
                    a7:97:3e:bd:ef:4f:79:2d:2c:a4:da:ef:a0:fb:70:
                    20:27:ce:c1:33:55:11:e6:b5:dc:2b:22:e5:65:7c:
                    57:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:95:B2:F6:6F:DC:74:C1:5B:2E:0D:EF:20:65:56:84:AC:4B:15:EE
            X509v3 Authority Key Identifier:
                keyid:CA:78:BC:B5:1F:15:F2:9B:EB:B3:DA:72:81:CF:01:1A:F4:FB:15:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/CA78BCB51F15F29BEBB3DA7281CF011AF4FB1582.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA78BCB51F15F29BEBB3DA7281CF011AF4FB1582.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/34352e3136312e3132382e302f32322d3332203d3e20323638343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:75:a7:d7:83:7a:e2:ff:da:7e:24:32:d6:9e:87:d4:e9:08:
         44:5a:38:a4:e3:a1:01:83:df:fc:11:05:a9:24:38:d7:d9:f2:
         22:c1:85:8f:50:c8:a6:1a:0c:01:83:c0:02:ad:bd:0c:12:f0:
         9a:83:c0:58:c0:b3:93:b2:3a:f9:c5:1a:d8:84:87:ea:d8:7f:
         0a:e2:58:6b:bc:22:69:ef:84:36:04:bc:d2:f3:5b:9e:e1:3f:
         b6:35:4f:5e:7d:28:ff:b8:f0:4d:aa:6b:6b:78:64:37:7d:e6:
         74:f6:0e:17:d7:97:f2:8e:0c:30:68:be:1a:6d:ec:da:ae:6b:
         7f:64:ec:21:41:87:9b:9c:c2:6a:75:39:36:bc:fe:f2:6f:8f:
         e7:96:dd:62:b5:12:3a:87:6c:3d:b9:2e:d9:d5:3c:08:ad:ad:
         40:e7:42:32:6f:35:f7:57:9f:9b:ca:b3:87:80:36:d7:ad:a2:
         e3:37:19:5c:68:7d:61:d6:0b:ed:bd:c9:92:8b:ed:f2:97:dc:
         63:34:52:18:b4:65:bf:31:ba:a5:2a:7e:42:7b:d2:1f:72:fc:
         0a:ad:8a:f8:c4:ea:07:d7:12:a8:2e:3a:2a:ba:1d:8d:1d:39:
         80:9a:c0:72:ab:b3:b4:65:71:7b:74:70:44:c5:f8:37:4c:53:
         80:1f:ae:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:57:32 2026 by rpki-client