Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81p2ttP2snroB5xvSdVos3EBZMruy5CBFwizQYz1tQzB/0/34352e3136362e3136322e302f32342d3234203d3e20323637393835.roa
File:                     34352e3136362e3136322e302f32342d3234203d3e20323637393835.roa (raw, json)
Hash identifier:          LeI+vbP3X7DhfVznBvh3oLyPjcjebvcViokDF5x6M9M=
Subject key identifier:   69:B0:AC:5C:79:C1:6C:8B:10:44:15:C0:54:12:98:0B:22:2D:AC:C2
Certificate issuer:       /CN=AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B
Certificate serial:       0F871A49513FF0F8AC7E3CED1437BD690940AA65
Authority key identifier: AC:36:29:F0:60:4D:B8:D2:00:6C:F0:F4:9A:CF:2A:8B:7A:E8:73:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81p2ttP2snroB5xvSdVos3EBZMruy5CBFwizQYz1tQzB/0/34352e3136362e3136322e302f32342d3234203d3e20323637393835.roa
Signing time:             Wed 22 Jul 2026 14:25:54 +0000
ROA not before:           Wed 22 Jul 2026 14:20:54 +0000
ROA not after:            Wed 21 Jul 2027 14:25:54 +0000
asID:                     267985
IP address blocks:        45.166.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/81p2ttP2snroB5xvSdVos3EBZMruy5CBFwizQYz1tQzB/0/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.crl
                          rsync://rpki-repo.registro.br/repo/81p2ttP2snroB5xvSdVos3EBZMruy5CBFwizQYz1tQzB/0/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 07:52:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:87:1a:49:51:3f:f0:f8:ac:7e:3c:ed:14:37:bd:69:09:40:aa:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B
        Validity
            Not Before: Jul 22 14:20:54 2026 GMT
            Not After : Jul 21 14:25:54 2027 GMT
        Subject: CN=69B0AC5C79C16C8B104415C05412980B222DACC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1a:f9:e4:dd:7a:07:aa:3b:a3:aa:3c:cb:16:
                    ba:37:4a:40:1f:84:04:a8:a7:a9:02:cd:8b:0f:ba:
                    c5:2e:4d:2e:e3:7b:e7:c9:fd:5a:78:72:f6:ce:b5:
                    5a:41:dc:9e:f4:2e:0a:30:be:c9:06:6f:40:67:a8:
                    91:6e:1f:44:c3:6e:08:cc:c4:2d:ba:4c:be:3f:31:
                    3b:3a:ad:aa:47:b1:56:b5:ce:9f:6b:6f:4c:a5:2e:
                    f9:65:9c:ef:2a:38:f6:50:7c:66:de:a1:ba:75:d1:
                    31:c5:1e:b5:99:b0:43:65:ef:13:96:5c:54:ae:41:
                    f8:f3:62:53:ab:3d:fc:3c:64:6c:f5:04:8b:b6:9e:
                    58:b6:b6:0d:ee:bf:29:61:25:f6:23:9b:02:04:58:
                    1e:96:fd:9e:ea:6f:f3:50:18:fc:9c:e7:9c:35:cc:
                    bd:2e:33:a1:f7:64:66:bb:4d:d5:71:c9:54:20:6f:
                    77:51:54:65:64:7a:bf:f4:8f:97:89:d7:03:52:45:
                    22:64:32:d2:0b:46:06:92:ea:f8:4c:c9:fd:c8:17:
                    da:90:7a:70:78:53:1f:e2:e0:ce:dd:68:36:03:bd:
                    f6:a7:ee:a5:81:6f:80:ec:0a:97:55:52:ec:f3:1e:
                    64:3c:9e:65:cb:4f:54:5b:70:bc:ad:6a:bb:86:3a:
                    6d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B0:AC:5C:79:C1:6C:8B:10:44:15:C0:54:12:98:0B:22:2D:AC:C2
            X509v3 Authority Key Identifier:
                keyid:AC:36:29:F0:60:4D:B8:D2:00:6C:F0:F4:9A:CF:2A:8B:7A:E8:73:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81p2ttP2snroB5xvSdVos3EBZMruy5CBFwizQYz1tQzB/0/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81p2ttP2snroB5xvSdVos3EBZMruy5CBFwizQYz1tQzB/0/34352e3136362e3136322e302f32342d3234203d3e20323637393835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:8d:fd:80:59:79:ab:13:b8:0a:15:31:5c:6c:78:a5:82:12:
         ad:87:46:31:09:68:41:be:6d:c8:43:f1:7c:56:6b:1e:5b:1b:
         bb:01:6e:70:28:8b:99:d0:85:d6:05:b3:a0:b4:fd:7a:7d:9f:
         fd:c4:8f:ea:47:eb:15:8d:24:1c:aa:af:f0:84:7f:0c:7a:b1:
         f8:ca:0c:42:da:2b:bd:78:fc:a0:1f:3d:7e:10:e2:77:bc:1b:
         7f:c3:fb:69:07:86:b0:a6:99:82:a8:b1:76:16:e9:5c:53:6c:
         8d:21:02:43:79:c7:83:41:63:e4:a0:41:82:0b:62:a1:08:e5:
         bc:02:99:73:18:f7:01:1f:a7:15:82:79:2b:e1:d4:de:cb:92:
         d7:cf:e4:79:4a:b1:db:7c:0a:61:63:82:73:69:2d:dd:17:43:
         98:6d:cb:1b:86:27:2a:ce:b0:85:5b:c0:1f:1d:2a:4f:c2:77:
         c3:05:10:8c:99:72:1e:10:d4:42:05:46:99:36:0a:e5:eb:93:
         d9:6e:35:c7:15:32:89:ac:d6:80:9f:9a:4d:14:f1:b4:ab:b1:
         5f:3a:21:12:fc:38:a4:3c:e0:bf:36:88:b0:7c:df:2b:78:d8:
         c4:52:ea:21:a7:71:2e:f0:d4:d8:39:ad:d4:80:20:8d:36:ae:
         d2:6d:d6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:35:47 2026 by rpki-client