Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/34352e3136312e3234382e302f32322d3332203d3e20323638343837.roa
File:                     34352e3136312e3234382e302f32322d3332203d3e20323638343837.roa (raw, json)
Hash identifier:          z0AJY3jVHwc5E8d2q9J1XCBlVUOf9VYY9lJjex3hpbI=
Subject key identifier:   EE:8C:66:D0:FC:25:65:4B:20:C0:B4:17:D9:22:BD:FF:D3:EF:55:FE
Certificate issuer:       /CN=464B947257F06B70E4456A2AACFED298FBBEE866
Certificate serial:       6440CDB5A95C358253A4DBE14BBE6DC12DE15A4E
Authority key identifier: 46:4B:94:72:57:F0:6B:70:E4:45:6A:2A:AC:FE:D2:98:FB:BE:E8:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464B947257F06B70E4456A2AACFED298FBBEE866.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/34352e3136312e3234382e302f32322d3332203d3e20323638343837.roa
Signing time:             Mon 13 Jul 2026 17:12:00 +0000
ROA not before:           Mon 13 Jul 2026 17:07:00 +0000
ROA not after:            Mon 12 Jul 2027 17:12:00 +0000
asID:                     268487
IP address blocks:        45.161.248.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/464B947257F06B70E4456A2AACFED298FBBEE866.crl
                          rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/464B947257F06B70E4456A2AACFED298FBBEE866.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464B947257F06B70E4456A2AACFED298FBBEE866.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:04:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:40:cd:b5:a9:5c:35:82:53:a4:db:e1:4b:be:6d:c1:2d:e1:5a:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464B947257F06B70E4456A2AACFED298FBBEE866
        Validity
            Not Before: Jul 13 17:07:00 2026 GMT
            Not After : Jul 12 17:12:00 2027 GMT
        Subject: CN=EE8C66D0FC25654B20C0B417D922BDFFD3EF55FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:40:d0:6b:99:4b:c3:0b:05:09:d9:fe:e3:dc:
                    e2:2d:ba:fb:db:14:16:e6:1a:cd:20:e9:21:d5:94:
                    ec:8b:17:8b:ab:27:18:0b:d3:84:e8:a6:50:75:06:
                    a4:0a:e2:a9:77:76:20:e6:3f:3e:b6:65:33:28:2b:
                    40:de:09:c8:79:09:2f:36:aa:ae:77:f5:43:a1:2b:
                    27:2e:53:34:77:37:7d:f5:ab:95:96:69:81:17:7f:
                    ef:92:9b:02:12:17:84:c2:25:3f:ad:80:68:25:39:
                    85:59:b1:47:d0:00:b5:6b:f4:00:53:a7:8f:e7:41:
                    6f:57:8c:f4:39:df:df:e2:65:56:cb:17:5a:27:63:
                    68:8b:ca:17:b0:e8:d1:e9:0e:ab:52:af:af:16:de:
                    b6:d7:73:10:39:3b:73:4b:eb:19:2f:c5:df:59:b1:
                    ce:62:18:0b:a3:75:62:f6:85:9d:c0:1b:67:e5:d4:
                    13:df:85:c6:99:04:09:74:15:41:18:3a:d4:90:12:
                    ba:3b:b0:d3:f5:32:a3:3e:0c:21:bd:b1:76:da:a3:
                    6e:f0:9b:24:e3:1d:5a:f6:be:99:30:cd:f7:8d:4d:
                    5c:41:c8:6e:4f:04:9d:7c:0c:7b:f5:fc:3c:3a:e8:
                    97:ba:8f:e4:9e:76:de:ee:7a:ea:13:5b:16:76:5e:
                    50:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:8C:66:D0:FC:25:65:4B:20:C0:B4:17:D9:22:BD:FF:D3:EF:55:FE
            X509v3 Authority Key Identifier:
                keyid:46:4B:94:72:57:F0:6B:70:E4:45:6A:2A:AC:FE:D2:98:FB:BE:E8:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/464B947257F06B70E4456A2AACFED298FBBEE866.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464B947257F06B70E4456A2AACFED298FBBEE866.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/34352e3136312e3234382e302f32322d3332203d3e20323638343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:3b:50:11:25:6f:e8:53:a8:0f:22:ce:d6:1d:ec:84:04:9a:
         47:b4:b4:2f:f4:21:26:87:8f:c7:77:42:09:be:f3:a0:42:a7:
         dd:75:62:b1:3e:b8:07:7e:b9:e0:d7:f6:d5:70:69:d5:80:be:
         56:b7:2a:4b:f5:e7:4d:c1:21:50:fe:f3:8b:c6:c1:07:2c:d8:
         7c:e5:f3:eb:a7:ff:50:1c:00:80:76:b5:88:40:4c:71:e0:d4:
         e0:bf:b8:99:c1:2a:10:42:22:20:27:25:f6:50:34:8a:cf:d6:
         fc:9e:9a:d0:a1:b4:44:b1:70:46:dc:e9:2c:2e:3a:26:f9:33:
         09:1b:d7:da:8c:8d:7e:a4:dc:8a:5d:95:7c:e5:d3:c8:c3:1c:
         fe:35:a6:22:8e:1b:16:f6:7f:34:1d:de:c4:3c:72:72:1d:1d:
         77:8c:8f:0c:fb:14:71:35:84:db:53:f1:9c:cb:be:09:0f:25:
         ab:7b:9d:f4:d3:9f:19:d7:b5:92:e1:58:2a:17:82:c0:9b:c6:
         b2:e6:0b:b8:41:d8:d1:bb:de:cc:d4:06:c3:6a:90:3c:d5:99:
         a1:c7:a1:15:f6:3a:62:85:06:2a:43:93:b6:61:0e:45:de:17:
         d0:21:3d:41:bf:e6:37:45:cb:7c:8c:c1:3e:2c:8f:32:d4:25:
         a5:c9:c1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:52:35 2026 by rpki-client