Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8SHMmdWSmKcuybksu3ErYWNvQbbq5KJpqsa9iAADH7La/0/34352e3136362e3136382e302f32322d3234203d3e20323637393739.roa
File:                     34352e3136362e3136382e302f32322d3234203d3e20323637393739.roa (raw, json)
Hash identifier:          RegZI3vsyljrKjLuLYNVIUqeQudUEDe7c1rQQKMKNtU=
Subject key identifier:   1A:ED:B5:C1:75:87:B6:5B:B5:6C:63:90:44:83:D2:73:6F:00:87:18
Certificate issuer:       /CN=2B02C5E01B8D20D8650057563E069CD85110D041
Certificate serial:       7F678C47870A4BD550BA31D26A4102E669DAEB79
Authority key identifier: 2B:02:C5:E0:1B:8D:20:D8:65:00:57:56:3E:06:9C:D8:51:10:D0:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B02C5E01B8D20D8650057563E069CD85110D041.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8SHMmdWSmKcuybksu3ErYWNvQbbq5KJpqsa9iAADH7La/0/34352e3136362e3136382e302f32322d3234203d3e20323637393739.roa
Signing time:             Mon 28 Sep 2026 17:59:23 +0000
ROA not before:           Mon 28 Sep 2026 17:54:23 +0000
ROA not after:            Mon 27 Sep 2027 17:59:23 +0000
asID:                     267979
IP address blocks:        45.166.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8SHMmdWSmKcuybksu3ErYWNvQbbq5KJpqsa9iAADH7La/0/2B02C5E01B8D20D8650057563E069CD85110D041.crl
                          rsync://rpki-repo.registro.br/repo/8SHMmdWSmKcuybksu3ErYWNvQbbq5KJpqsa9iAADH7La/0/2B02C5E01B8D20D8650057563E069CD85110D041.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B02C5E01B8D20D8650057563E069CD85110D041.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:67:8c:47:87:0a:4b:d5:50:ba:31:d2:6a:41:02:e6:69:da:eb:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B02C5E01B8D20D8650057563E069CD85110D041
        Validity
            Not Before: Sep 28 17:54:23 2026 GMT
            Not After : Sep 27 17:59:23 2027 GMT
        Subject: CN=1AEDB5C17587B65BB56C63904483D2736F008718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5b:60:56:1c:04:ba:28:5d:17:59:3e:ba:e3:
                    b2:0e:73:60:b3:29:e3:a4:a8:ac:c9:09:a1:18:97:
                    51:0a:36:6b:99:53:d3:f7:50:2d:56:61:ef:f2:5c:
                    80:d1:c7:9f:4e:1b:02:51:63:d4:5f:19:a5:da:be:
                    4f:bb:7f:bc:d1:af:45:e0:d9:f8:b3:5c:be:1b:77:
                    4d:50:df:1d:44:8b:72:10:0c:8c:03:28:d1:06:9c:
                    cb:e6:24:93:c6:05:4c:6e:91:f9:4c:19:c7:ac:05:
                    b9:d4:f0:6c:72:55:dc:48:be:aa:ca:ff:aa:34:60:
                    c5:67:eb:5c:45:5a:3b:ba:ad:9a:42:9c:2f:25:d1:
                    79:78:a2:3a:60:a9:6e:4d:0a:ec:b5:ce:07:64:52:
                    e7:f8:e7:0b:10:f9:c4:ee:bd:54:e1:01:d5:be:45:
                    20:41:00:4f:5f:e4:4a:46:f3:36:75:f0:8e:d8:be:
                    9d:ee:08:35:77:62:ba:a7:ed:fe:41:8f:cd:8c:3c:
                    1f:fb:bc:3f:dd:50:9f:bb:37:77:8e:d9:ab:f3:a0:
                    84:ee:3e:b8:e1:d5:76:7f:1b:dd:54:b0:5d:e2:f7:
                    b5:c1:2a:63:83:dc:6d:2e:17:1b:76:bd:09:60:d8:
                    de:11:5c:58:04:50:cc:e9:18:96:bd:b6:2e:00:ed:
                    2a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:ED:B5:C1:75:87:B6:5B:B5:6C:63:90:44:83:D2:73:6F:00:87:18
            X509v3 Authority Key Identifier:
                keyid:2B:02:C5:E0:1B:8D:20:D8:65:00:57:56:3E:06:9C:D8:51:10:D0:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8SHMmdWSmKcuybksu3ErYWNvQbbq5KJpqsa9iAADH7La/0/2B02C5E01B8D20D8650057563E069CD85110D041.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B02C5E01B8D20D8650057563E069CD85110D041.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8SHMmdWSmKcuybksu3ErYWNvQbbq5KJpqsa9iAADH7La/0/34352e3136362e3136382e302f32322d3234203d3e20323637393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:2c:e4:d1:3f:2a:c5:9c:26:aa:7f:83:2c:3f:6b:f7:a8:1b:
         dd:2e:08:01:15:53:ea:ae:93:3b:b0:12:c0:10:a1:59:1d:ca:
         d7:84:5f:4c:d1:12:1c:da:c1:15:0a:90:a0:ac:a0:8f:7e:0d:
         22:f5:ee:8c:1a:9e:6e:8c:af:3b:4d:d7:c9:2c:25:82:9f:0c:
         21:c3:cb:54:93:17:54:41:04:2c:99:3e:47:77:c9:e5:93:fe:
         10:42:5a:0a:d4:51:f1:0b:a2:f6:2e:43:bb:31:9c:0b:ea:79:
         d2:76:cb:f2:6c:93:80:71:a2:6f:77:8e:07:f8:fe:77:cc:0c:
         ae:5e:76:9e:23:2e:f2:1b:e9:62:5d:99:24:94:2f:98:43:61:
         5d:04:26:41:c0:9f:fb:85:47:01:b3:3b:d4:e7:1d:f7:e7:f9:
         17:74:4c:f3:c7:cf:06:de:a9:36:e4:c9:38:7b:b9:18:3f:e3:
         fa:c7:a9:a0:d4:7c:22:d7:1d:47:8b:da:30:31:2c:49:02:d7:
         73:ef:bd:56:3b:bc:5e:35:f2:ef:f0:7a:8e:72:b8:71:f6:8e:
         1a:6f:67:e1:34:eb:1f:53:ac:44:87:3a:4e:85:0f:df:98:8f:
         b0:f5:0f:f5:0b:47:4f:b0:2a:d5:53:1d:b2:8e:de:27:6c:8d:
         c8:bf:e8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 08:28:31 2026 by rpki-client