Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/34352e3136342e3131322e302f32322d3332203d3e203533313831.roa
File:                     34352e3136342e3131322e302f32322d3332203d3e203533313831.roa (raw, json)
Hash identifier:          aJslR/vmDXJnzCKEwTHouZcKOuyOBd8owHk+C/drazo=
Subject key identifier:   76:2D:4F:FC:69:02:D5:E4:76:32:BC:40:E0:BD:A1:B2:8D:1E:93:0B
Certificate issuer:       /CN=70BE7503F48CCC14271EE75026EB08184789273F
Certificate serial:       1E2E46905549FAF31C0FC9AF26B4539D977EEA8A
Authority key identifier: 70:BE:75:03:F4:8C:CC:14:27:1E:E7:50:26:EB:08:18:47:89:27:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70BE7503F48CCC14271EE75026EB08184789273F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/34352e3136342e3131322e302f32322d3332203d3e203533313831.roa
Signing time:             Thu 19 Mar 2026 19:38:17 +0000
ROA not before:           Thu 19 Mar 2026 19:33:17 +0000
ROA not after:            Thu 18 Mar 2027 19:38:17 +0000
asID:                     53181
IP address blocks:        45.164.112.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.crl
                          rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70BE7503F48CCC14271EE75026EB08184789273F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 15:43:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:2e:46:90:55:49:fa:f3:1c:0f:c9:af:26:b4:53:9d:97:7e:ea:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70BE7503F48CCC14271EE75026EB08184789273F
        Validity
            Not Before: Mar 19 19:33:17 2026 GMT
            Not After : Mar 18 19:38:17 2027 GMT
        Subject: CN=762D4FFC6902D5E47632BC40E0BDA1B28D1E930B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:47:22:ee:84:7b:42:c5:77:a5:51:0b:7c:e2:
                    ab:c5:9d:d8:e1:0c:9b:a3:41:14:1a:28:ac:4a:63:
                    22:67:4a:24:54:62:7a:d8:7a:5c:85:d7:71:d8:c0:
                    c6:d9:76:a3:0f:84:ea:13:d3:c3:a7:76:e3:a5:fe:
                    87:04:4f:e6:00:76:ee:ba:1e:3e:ee:bf:05:76:58:
                    95:be:b2:50:33:de:9c:09:aa:81:e2:85:d2:a2:e8:
                    2d:62:46:5e:7d:a0:79:70:ab:48:b9:19:aa:02:d2:
                    d8:f3:c3:b0:3c:c0:df:36:9c:14:d0:93:14:70:32:
                    d3:39:21:4a:09:00:52:b8:ad:70:fe:b0:3d:48:0c:
                    22:9b:65:5e:18:e3:f8:47:b8:d5:8f:19:2b:12:a0:
                    fa:64:45:cd:8d:99:ec:9b:b9:ae:63:0e:3b:81:7c:
                    54:1c:21:b8:b3:ff:e4:6d:1c:83:ee:3f:42:e2:ba:
                    f2:d4:07:b6:cf:2d:22:55:83:27:b6:ba:30:15:09:
                    c1:a1:5d:14:65:b4:b6:ec:d4:d3:07:13:a1:a0:f4:
                    1c:58:05:74:d8:3c:b8:9d:70:30:5f:10:a0:75:e6:
                    e6:8b:8c:68:48:42:da:28:3c:ac:24:41:31:40:c3:
                    5d:a0:d7:38:f5:1d:ba:4e:57:72:91:a0:72:58:44:
                    47:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:2D:4F:FC:69:02:D5:E4:76:32:BC:40:E0:BD:A1:B2:8D:1E:93:0B
            X509v3 Authority Key Identifier:
                keyid:70:BE:75:03:F4:8C:CC:14:27:1E:E7:50:26:EB:08:18:47:89:27:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70BE7503F48CCC14271EE75026EB08184789273F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/34352e3136342e3131322e302f32322d3332203d3e203533313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:e9:37:57:2b:70:45:65:ae:5f:2a:56:6b:39:6c:ca:38:29:
         5e:a3:d4:14:36:c4:69:82:f2:69:2c:5f:f6:78:1a:52:f6:44:
         9c:2f:25:77:81:a3:7f:0c:b6:3d:26:ce:6f:f6:92:40:82:b0:
         89:0b:23:6d:ad:2f:1e:42:10:cf:e5:8b:f1:93:ca:b2:96:29:
         c2:5e:98:5a:ba:5b:be:6e:6e:ce:c6:a2:e0:3a:1d:df:ff:1b:
         b4:d0:f0:ad:bd:3c:5c:f9:3e:23:f4:b7:e0:13:e7:2f:6d:22:
         7d:10:84:32:78:4b:07:29:9d:2f:f9:63:ed:97:4f:67:1c:36:
         de:37:ba:91:eb:38:91:b6:ab:d8:9c:bf:21:19:05:7a:20:98:
         d7:68:b1:4a:49:ce:ea:e2:c1:3a:d3:b1:c7:cc:c3:b3:b4:0c:
         42:42:2c:7b:bf:a9:ca:31:12:b2:29:44:fc:1f:de:33:0f:11:
         0d:94:8c:a9:fb:b1:c2:e4:d4:46:b6:e2:0a:94:31:e5:8a:2f:
         78:5a:08:16:92:92:94:26:aa:46:7a:6a:4c:1f:e2:6f:93:47:
         69:b2:5f:34:0c:ed:bc:04:1d:30:c4:f7:19:1d:75:c8:fd:34:
         cf:c2:76:d3:1e:7e:e9:ad:bc:da:45:8c:8d:1c:3d:b7:59:d0:
         1e:c5:80:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 09:06:20 2026 by rpki-client