Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/0/34352e3136362e3139382e302f32342d3234203d3e20323637393838.roa
File:                     34352e3136362e3139382e302f32342d3234203d3e20323637393838.roa (raw, json)
Hash identifier:          g9rakZ4+TL8oAReTQqkyNecoRnpJTZYK4LhkPtf1Apk=
Subject key identifier:   8C:F7:24:88:E2:60:24:D8:7C:18:3F:0F:91:A4:85:AF:7E:D4:35:7B
Certificate issuer:       /CN=73CDB88FDB601C8E995F621637B4D0A09C0500F1
Certificate serial:       3998A7FA5E75A300E3FA9BA21270211447D17DBE
Authority key identifier: 73:CD:B8:8F:DB:60:1C:8E:99:5F:62:16:37:B4:D0:A0:9C:05:00:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73CDB88FDB601C8E995F621637B4D0A09C0500F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/0/34352e3136362e3139382e302f32342d3234203d3e20323637393838.roa
Signing time:             Thu 19 Mar 2026 15:11:55 +0000
ROA not before:           Thu 19 Mar 2026 15:06:55 +0000
ROA not after:            Thu 18 Mar 2027 15:11:55 +0000
asID:                     267988
IP address blocks:        45.166.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/0/73CDB88FDB601C8E995F621637B4D0A09C0500F1.crl
                          rsync://rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/0/73CDB88FDB601C8E995F621637B4D0A09C0500F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73CDB88FDB601C8E995F621637B4D0A09C0500F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 10:46:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:98:a7:fa:5e:75:a3:00:e3:fa:9b:a2:12:70:21:14:47:d1:7d:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73CDB88FDB601C8E995F621637B4D0A09C0500F1
        Validity
            Not Before: Mar 19 15:06:55 2026 GMT
            Not After : Mar 18 15:11:55 2027 GMT
        Subject: CN=8CF72488E26024D87C183F0F91A485AF7ED4357B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6f:79:19:6c:01:9c:bf:9b:eb:ae:fb:2c:d5:
                    c2:78:b0:65:9e:2c:89:6b:5b:3e:3d:f2:a2:b1:91:
                    28:48:20:21:5e:c6:79:e9:7a:cd:38:09:f2:ac:db:
                    1c:df:1e:74:a0:1d:17:4e:12:3b:83:d9:12:a5:90:
                    b9:ef:49:88:28:52:5f:7e:42:97:aa:b7:17:f8:d8:
                    eb:06:76:f3:e9:52:25:51:ad:68:79:25:27:ab:03:
                    34:69:e5:57:1c:b5:7b:5d:4e:b0:98:eb:88:67:fd:
                    9b:e3:c3:df:9b:8c:dc:9e:98:9f:da:70:07:99:a4:
                    5f:2e:30:2d:63:17:67:57:2f:50:6d:3f:92:2b:33:
                    73:ed:27:43:8a:94:66:bc:a4:d8:04:31:ba:58:d9:
                    47:5e:17:03:77:8a:7a:7e:c2:d0:23:4b:65:23:6f:
                    54:be:35:e7:2e:36:58:5b:2b:3a:4a:1a:c8:91:96:
                    7e:ed:19:da:23:65:88:b2:94:c1:cd:bd:ee:b5:8c:
                    7e:1d:2f:c3:cd:35:33:31:c5:d5:e8:9c:55:50:87:
                    d1:e2:fb:45:1c:32:eb:92:47:63:a7:c9:5d:26:27:
                    20:1d:5b:a1:3b:de:d0:ab:cc:8a:f5:b4:ec:5d:10:
                    7f:08:0e:ee:01:1d:3f:d1:e4:64:7a:ea:9a:25:24:
                    3e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F7:24:88:E2:60:24:D8:7C:18:3F:0F:91:A4:85:AF:7E:D4:35:7B
            X509v3 Authority Key Identifier:
                keyid:73:CD:B8:8F:DB:60:1C:8E:99:5F:62:16:37:B4:D0:A0:9C:05:00:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/0/73CDB88FDB601C8E995F621637B4D0A09C0500F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73CDB88FDB601C8E995F621637B4D0A09C0500F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/0/34352e3136362e3139382e302f32342d3234203d3e20323637393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:89:82:68:15:6c:93:95:85:25:93:c5:6a:02:41:1e:ab:7b:
         40:e4:2b:a0:50:12:b9:74:2c:1f:00:d8:c3:32:ee:d5:f2:5c:
         86:61:fc:a6:2b:ca:d2:de:4e:25:dd:65:00:74:60:ba:7a:68:
         55:df:68:9c:1f:00:f4:68:10:f1:fb:08:d1:67:54:2c:1c:60:
         e4:f9:43:7d:e2:13:81:7d:79:73:1c:15:d3:b4:84:9a:70:d1:
         54:bb:5f:f6:a5:d1:bc:a5:77:4a:cd:e0:25:69:1c:72:52:6c:
         aa:44:ce:6d:38:92:73:59:8e:5e:d6:b6:42:32:e8:cd:55:20:
         4c:8d:03:0f:cb:60:f3:45:25:34:ad:fe:9e:1e:a3:67:ed:ad:
         7c:87:22:18:23:fe:b8:90:a0:38:ea:b0:8b:16:54:93:31:3d:
         e3:c0:2a:15:7b:b8:28:e3:9b:4b:5d:ee:c9:ab:91:5e:3c:ab:
         0d:2f:22:c0:8b:21:8f:d0:15:f8:0e:7d:ca:21:ad:8b:36:58:
         af:ec:d7:64:fb:df:13:e7:c4:72:56:fd:d9:cf:90:0a:37:c5:
         93:51:e9:fb:fe:5f:11:2a:a5:bd:0b:0a:b6:c3:5e:a5:da:8f:
         21:7b:4f:19:dc:0a:c2:8c:76:6a:6d:ad:fc:01:e9:9b:44:cf:
         f9:ac:da:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:05:25 2026 by rpki-client