Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81p2ttP2snroB5xvSdVos3EBZMruy5CBFwizQYz1tQzB/0/34352e3136362e3136302e302f32342d3234203d3e20323637393835.roa
File:                     34352e3136362e3136302e302f32342d3234203d3e20323637393835.roa (raw, json)
Hash identifier:          ANOX5RNOAj0VlP1p4A8/MfXSVnKJFxykCYSqPh0IL+E=
Subject key identifier:   2E:24:46:6A:3E:F4:3D:FD:BE:B6:22:18:D8:AC:56:F2:69:2E:54:2B
Certificate issuer:       /CN=AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B
Certificate serial:       2D263B491E52BA994E6E96CF7DBF9E173E1ABA85
Authority key identifier: AC:36:29:F0:60:4D:B8:D2:00:6C:F0:F4:9A:CF:2A:8B:7A:E8:73:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81p2ttP2snroB5xvSdVos3EBZMruy5CBFwizQYz1tQzB/0/34352e3136362e3136302e302f32342d3234203d3e20323637393835.roa
Signing time:             Wed 20 Aug 2025 13:50:59 +0000
ROA not before:           Wed 20 Aug 2025 13:45:59 +0000
ROA not after:            Wed 19 Aug 2026 13:50:59 +0000
asID:                     267985
IP address blocks:        45.166.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/81p2ttP2snroB5xvSdVos3EBZMruy5CBFwizQYz1tQzB/0/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.crl
                          rsync://rpki-repo.registro.br/repo/81p2ttP2snroB5xvSdVos3EBZMruy5CBFwizQYz1tQzB/0/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 20:51:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:26:3b:49:1e:52:ba:99:4e:6e:96:cf:7d:bf:9e:17:3e:1a:ba:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B
        Validity
            Not Before: Aug 20 13:45:59 2025 GMT
            Not After : Aug 19 13:50:59 2026 GMT
        Subject: CN=2E24466A3EF43DFDBEB62218D8AC56F2692E542B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5c:ce:dd:93:4c:19:da:37:45:35:ea:8d:52:
                    29:6c:46:f0:98:52:ec:5e:db:26:d3:e1:b4:bb:51:
                    5f:c0:3c:d9:6d:55:31:52:ca:a5:98:92:3c:1c:b0:
                    fd:e0:7d:a5:ee:34:28:a9:11:42:c4:06:31:5d:cf:
                    3f:c1:90:4e:92:f6:45:4b:0d:dc:77:cc:9a:a4:f5:
                    82:fa:09:9e:6b:61:f5:4c:06:22:73:23:5a:f5:74:
                    88:86:b3:46:f9:b1:ac:60:54:1d:62:76:a5:39:8b:
                    04:aa:26:6b:0d:bb:5a:c4:8d:82:d2:18:4a:8c:fe:
                    d0:c5:a6:76:b1:9a:64:17:45:2e:29:09:5e:5e:cc:
                    5e:80:01:6a:91:d5:ac:78:c4:c6:ed:fa:09:ed:fc:
                    8a:25:fa:4d:b4:35:7f:33:ae:d8:2e:c1:c2:4b:c2:
                    de:67:d5:8b:28:e6:73:d4:05:9f:8c:f3:ca:49:0b:
                    64:e6:a0:2a:37:51:dc:fc:50:68:2d:22:7c:fa:05:
                    50:67:ec:dc:dd:a2:26:7b:48:5b:65:08:85:d3:df:
                    1f:5e:43:ca:ce:6d:db:b2:01:23:c9:fa:66:c6:cb:
                    fd:af:35:aa:42:a8:ff:e2:f9:cb:0f:d5:b6:c1:02:
                    c7:ca:2c:5c:5e:d3:6b:80:93:13:74:16:b9:31:1e:
                    c1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:24:46:6A:3E:F4:3D:FD:BE:B6:22:18:D8:AC:56:F2:69:2E:54:2B
            X509v3 Authority Key Identifier:
                keyid:AC:36:29:F0:60:4D:B8:D2:00:6C:F0:F4:9A:CF:2A:8B:7A:E8:73:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81p2ttP2snroB5xvSdVos3EBZMruy5CBFwizQYz1tQzB/0/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81p2ttP2snroB5xvSdVos3EBZMruy5CBFwizQYz1tQzB/0/34352e3136362e3136302e302f32342d3234203d3e20323637393835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:94:9d:dc:ee:74:b1:0e:d6:41:5b:69:5a:3a:4b:f8:37:99:
         e3:a1:e9:16:ef:70:05:05:06:65:3e:f0:ee:aa:47:dc:1e:9f:
         80:8d:dc:05:33:f3:3d:cf:d9:d5:b0:a2:5e:c6:40:81:e7:6c:
         cc:d5:b0:f7:b8:aa:94:02:17:26:3f:21:8f:4d:94:b4:95:39:
         22:64:6e:cc:a3:a7:6d:71:28:c6:5e:ee:6c:13:b6:ad:e5:66:
         f0:4d:23:58:02:76:ff:0b:78:3f:b8:54:4e:15:ce:23:ba:d9:
         36:59:d4:41:31:ec:26:64:d3:d8:7c:a9:51:ad:88:87:9d:42:
         a7:f0:3f:5d:6a:b9:ca:e8:24:0f:9f:e6:07:93:d0:aa:cf:a3:
         23:2f:74:65:14:be:89:5e:5f:57:69:47:42:eb:38:1a:3d:c4:
         23:26:90:bd:40:02:5c:2a:0b:07:25:93:28:28:06:1a:28:a3:
         52:12:3b:ff:b6:e7:39:57:b3:c5:0f:56:cf:d7:67:f8:eb:81:
         e3:04:c1:95:d5:2a:dd:81:35:da:23:bb:9a:8e:3e:07:62:d5:
         e0:1c:89:56:14:f7:c7:bc:cb:d0:37:d0:48:78:45:98:0c:06:
         47:91:df:db:cb:8f:21:0f:07:59:23:2a:58:25:a8:76:d3:32:
         a0:54:50:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:48:48 2025 by rpki-client