Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/34352e3136332e3230302e302f32322d3232203d3e20323637353532.roa
File:                     34352e3136332e3230302e302f32322d3232203d3e20323637353532.roa (raw, json)
Hash identifier:          mLR1mQq92Ch79Y5KLwZ6JKVVrJrptAOFXNYIYozm2Do=
Subject key identifier:   6F:E7:DF:9D:EC:79:E4:B5:46:57:21:34:88:82:A3:7F:A1:0F:4E:05
Certificate issuer:       /CN=66F2AAD200D9E7BF577BA3DE5A46D415C8075697
Certificate serial:       251DF9C3A0F3887910235E7E72A03F5D3A97CBB0
Authority key identifier: 66:F2:AA:D2:00:D9:E7:BF:57:7B:A3:DE:5A:46:D4:15:C8:07:56:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66F2AAD200D9E7BF577BA3DE5A46D415C8075697.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/34352e3136332e3230302e302f32322d3232203d3e20323637353532.roa
Signing time:             Wed 15 Jul 2026 16:50:56 +0000
ROA not before:           Wed 15 Jul 2026 16:45:56 +0000
ROA not after:            Wed 14 Jul 2027 16:50:56 +0000
asID:                     267552
IP address blocks:        45.163.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/66F2AAD200D9E7BF577BA3DE5A46D415C8075697.crl
                          rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/66F2AAD200D9E7BF577BA3DE5A46D415C8075697.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66F2AAD200D9E7BF577BA3DE5A46D415C8075697.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 07:21:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:1d:f9:c3:a0:f3:88:79:10:23:5e:7e:72:a0:3f:5d:3a:97:cb:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66F2AAD200D9E7BF577BA3DE5A46D415C8075697
        Validity
            Not Before: Jul 15 16:45:56 2026 GMT
            Not After : Jul 14 16:50:56 2027 GMT
        Subject: CN=6FE7DF9DEC79E4B5465721348882A37FA10F4E05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:be:c7:8e:38:61:55:70:30:2b:75:05:ba:89:
                    2c:9a:ee:99:6f:62:25:fd:5a:04:44:25:a4:59:bb:
                    fd:ea:a7:2b:e6:39:df:06:86:83:f4:c7:f8:15:f5:
                    ff:5c:71:28:57:96:0b:b2:3d:61:67:e2:a9:52:ed:
                    25:cf:2e:31:05:34:52:f0:e0:7a:ee:f5:2a:3d:77:
                    bc:33:4f:cf:fc:f4:ad:3b:9d:a0:45:ce:77:18:df:
                    69:05:42:58:d3:3c:d7:da:63:ed:6a:55:95:2b:b1:
                    f7:4b:2d:95:89:93:dd:e7:36:cf:1d:0a:58:d7:00:
                    01:8e:eb:b8:66:8f:92:86:d3:c5:97:1b:bb:bf:2f:
                    78:74:63:26:9b:82:ae:0e:61:32:76:56:93:2e:30:
                    38:b3:ee:b0:00:64:3b:84:91:3f:6b:d1:07:e0:29:
                    ae:df:8b:fd:30:d8:ea:e8:fe:b8:ae:9f:fa:46:05:
                    fe:eb:1f:24:25:50:50:a6:9d:c6:03:fa:1d:90:85:
                    95:40:ff:ab:15:32:8a:fb:ad:7a:14:40:0b:47:31:
                    1b:dd:e8:2d:95:b9:98:fd:0c:69:01:20:1f:75:70:
                    5c:5b:6c:b3:41:b7:50:a7:6b:9d:83:79:ee:ca:07:
                    21:64:e4:c9:9c:ff:18:cb:e0:06:ed:aa:83:3c:7d:
                    63:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E7:DF:9D:EC:79:E4:B5:46:57:21:34:88:82:A3:7F:A1:0F:4E:05
            X509v3 Authority Key Identifier:
                keyid:66:F2:AA:D2:00:D9:E7:BF:57:7B:A3:DE:5A:46:D4:15:C8:07:56:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/66F2AAD200D9E7BF577BA3DE5A46D415C8075697.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66F2AAD200D9E7BF577BA3DE5A46D415C8075697.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/34352e3136332e3230302e302f32322d3232203d3e20323637353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:5a:61:7e:b3:91:e5:71:b4:55:06:fc:fa:f3:64:37:33:97:
         d4:4e:81:2a:fa:53:fe:05:bb:7d:eb:dc:8c:d8:59:7c:e4:26:
         35:68:2d:6b:d2:13:ea:90:49:ea:8d:27:3f:12:3f:dc:72:ea:
         ff:06:ce:5d:5a:8d:47:f4:01:4e:1d:31:72:54:d8:a7:1d:30:
         ea:ee:5b:12:5d:08:43:e9:68:e1:05:16:8d:25:18:d7:3c:83:
         9c:ea:9f:0f:b8:bf:92:58:20:cf:be:15:03:35:62:3d:a2:89:
         0b:ae:60:34:ee:97:5f:b3:0c:e1:c3:96:d2:92:ce:5e:f6:19:
         1a:ba:3f:a2:e1:01:95:50:ff:78:d3:0d:7e:f5:05:65:77:e9:
         63:aa:88:9f:ec:d1:27:3f:fc:9e:f8:45:63:57:ae:6e:7c:73:
         9b:8a:4d:48:dd:c1:3c:44:86:61:4d:03:10:1a:86:6d:5a:fe:
         d3:74:b3:8c:38:e4:4c:63:50:b6:9f:20:3b:cb:97:ce:6c:83:
         47:de:8c:2d:fe:5d:f4:81:49:44:86:9c:bb:e1:95:81:42:e4:
         1f:a9:08:2b:11:24:35:a0:34:98:21:e1:8a:62:41:d8:72:31:
         02:19:b7:00:6b:fe:18:22:14:b3:1e:bd:e3:e9:84:ca:e1:26:
         58:ea:d0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:47:02 2026 by rpki-client