Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/34352e3136362e3230302e302f32322d3332203d3e20323638303333.roa
File:                     34352e3136362e3230302e302f32322d3332203d3e20323638303333.roa (raw, json)
Hash identifier:          ktGx59JETujExjo30VVMt5PUSTyoY0psMj+P78eLE/Q=
Subject key identifier:   7D:11:8C:15:B3:B0:D7:DB:7E:FE:1E:F2:A9:D9:8F:9E:7D:5B:2E:96
Certificate issuer:       /CN=CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38
Certificate serial:       5A0AB6545D76D29879586DDF72D7EB9556337F78
Authority key identifier: CE:6B:71:A4:B0:42:85:BB:0E:FE:A1:1B:40:BA:75:9B:C5:FD:1C:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/34352e3136362e3230302e302f32322d3332203d3e20323638303333.roa
Signing time:             Mon 16 Mar 2026 12:36:07 +0000
ROA not before:           Mon 16 Mar 2026 12:31:07 +0000
ROA not after:            Mon 15 Mar 2027 12:36:07 +0000
asID:                     268033
IP address blocks:        45.166.200.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.crl
                          rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 10:58:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:0a:b6:54:5d:76:d2:98:79:58:6d:df:72:d7:eb:95:56:33:7f:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38
        Validity
            Not Before: Mar 16 12:31:07 2026 GMT
            Not After : Mar 15 12:36:07 2027 GMT
        Subject: CN=7D118C15B3B0D7DB7EFE1EF2A9D98F9E7D5B2E96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:dd:cd:24:4a:fd:10:06:ef:5a:c8:40:ee:ba:
                    26:01:ea:51:74:3c:f6:67:e2:fa:0a:0d:54:f0:e8:
                    86:5a:0f:6f:81:33:3e:52:6f:fb:4e:b2:a5:79:99:
                    c3:f9:6d:3d:8c:e0:73:5d:cc:72:e0:d8:42:7a:63:
                    22:b5:f5:f6:16:65:36:7e:7f:b8:87:62:10:7d:cc:
                    50:d7:ac:d3:be:f6:db:91:8d:a3:99:2c:56:b4:63:
                    73:69:9b:61:d8:83:dd:c5:79:fd:f4:44:4e:41:3c:
                    5f:50:3d:b5:5b:ab:99:0d:90:5c:23:93:51:37:3e:
                    fc:c5:0f:9d:59:6e:a3:4b:8f:73:ba:80:59:10:af:
                    8d:1f:6b:6f:9a:7d:a5:13:b8:ed:ba:c9:f8:b8:23:
                    53:47:f4:4e:32:9e:a2:82:52:ef:f5:d9:69:95:e1:
                    05:2b:36:8d:00:28:ce:9b:57:6c:cf:cd:87:94:25:
                    16:04:e2:21:1e:5c:5c:d6:9a:18:03:67:4a:36:a0:
                    f1:3f:0c:da:ee:cf:00:66:a4:4a:f6:ac:e2:17:11:
                    d6:92:bb:ac:0e:b7:a9:f5:16:45:68:f8:c4:82:0b:
                    d1:23:93:45:8e:7a:0b:8c:a1:51:1f:08:ad:7b:5c:
                    f6:0d:dc:bf:d0:70:50:75:c9:3f:2a:ca:d5:23:48:
                    55:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:11:8C:15:B3:B0:D7:DB:7E:FE:1E:F2:A9:D9:8F:9E:7D:5B:2E:96
            X509v3 Authority Key Identifier:
                keyid:CE:6B:71:A4:B0:42:85:BB:0E:FE:A1:1B:40:BA:75:9B:C5:FD:1C:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/34352e3136362e3230302e302f32322d3332203d3e20323638303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:a9:15:67:d1:e6:d0:57:0a:ab:21:55:6c:e4:03:67:af:3a:
         a2:d1:4d:31:43:4e:5e:e3:f8:af:e4:e1:eb:18:b2:42:46:87:
         21:28:5c:dc:38:45:56:d6:fa:cf:c9:87:24:3c:17:bc:e8:16:
         70:a0:f6:f8:7c:09:44:32:ec:3f:49:53:90:35:50:2a:9d:62:
         dd:30:c8:6f:b8:bd:6d:36:4f:1e:e5:9a:13:ad:b1:24:25:95:
         e9:ea:08:0a:72:cb:6a:c5:7a:71:d2:75:d9:e3:2b:37:29:77:
         aa:c8:7e:5b:5d:c3:d6:5c:60:61:08:13:8b:53:ed:ab:6f:ee:
         a9:15:4f:35:97:19:0f:ca:4d:3f:27:f6:23:64:2c:11:7c:61:
         5d:bd:db:11:6f:c9:3a:bb:58:5e:41:96:c5:f2:f3:85:f6:60:
         09:b5:6b:ba:7c:08:27:80:dd:44:f6:d8:ff:24:6c:98:69:27:
         ce:a3:98:5b:3f:3c:5d:95:91:5a:4d:ad:16:c4:a1:4c:40:20:
         06:72:86:4f:24:1a:97:1f:11:58:ff:be:bb:65:7b:c4:4d:38:
         95:c0:3e:0b:be:5b:c7:63:b4:90:15:3e:d5:a9:66:05:48:c3:
         f1:b5:1a:3f:c8:cb:a5:76:7c:f4:d1:24:1e:ce:be:6e:ee:e8:
         a6:f1:5c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:33:09 2026 by rpki-client