Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/34352e3136362e36362e302f32342d3234203d3e20323637393436.roa
File:                     34352e3136362e36362e302f32342d3234203d3e20323637393436.roa (raw, json)
Hash identifier:          J1JabBzErIcFP23ll4Hvzr8T6KClkguLhK6kfoSKMNw=
Subject key identifier:   8D:9F:15:89:E7:8A:8A:FD:21:24:3A:82:44:AA:15:B8:61:70:55:2A
Certificate issuer:       /CN=C164F89CAD164E696F5070A43F5B84BA8C3F610A
Certificate serial:       2442DD9DD957895AB978E575A564D6927CE153A7
Authority key identifier: C1:64:F8:9C:AD:16:4E:69:6F:50:70:A4:3F:5B:84:BA:8C:3F:61:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C164F89CAD164E696F5070A43F5B84BA8C3F610A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/34352e3136362e36362e302f32342d3234203d3e20323637393436.roa
Signing time:             Thu 23 Apr 2026 18:31:41 +0000
ROA not before:           Thu 23 Apr 2026 18:26:41 +0000
ROA not after:            Thu 22 Apr 2027 18:31:41 +0000
asID:                     267946
IP address blocks:        45.166.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/C164F89CAD164E696F5070A43F5B84BA8C3F610A.crl
                          rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/C164F89CAD164E696F5070A43F5B84BA8C3F610A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C164F89CAD164E696F5070A43F5B84BA8C3F610A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 06:52:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:42:dd:9d:d9:57:89:5a:b9:78:e5:75:a5:64:d6:92:7c:e1:53:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C164F89CAD164E696F5070A43F5B84BA8C3F610A
        Validity
            Not Before: Apr 23 18:26:41 2026 GMT
            Not After : Apr 22 18:31:41 2027 GMT
        Subject: CN=8D9F1589E78A8AFD21243A8244AA15B86170552A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ab:51:00:59:47:3c:0f:07:2a:7f:47:81:6f:
                    92:e7:1e:0d:03:08:cd:58:b8:77:59:f4:ef:cb:f9:
                    7c:bf:9d:11:d2:33:df:d7:d8:08:38:7b:53:73:92:
                    67:6f:47:48:e9:f9:57:bb:d0:c2:c8:9b:6a:9b:2b:
                    72:06:2b:98:b6:09:11:19:1b:35:3f:ef:57:db:7e:
                    9f:ac:44:1c:a2:e4:76:60:91:7a:e5:2d:b4:0e:e5:
                    ed:66:80:26:c0:d3:3e:8c:b9:d3:15:c1:4a:98:43:
                    18:2d:2c:13:4e:93:09:16:cd:df:15:35:0f:bb:2d:
                    95:db:17:a7:b6:95:a4:f6:04:52:05:ad:33:f8:00:
                    e2:e4:1f:aa:b3:b5:a6:53:66:fd:94:b3:56:47:2b:
                    05:19:de:5f:57:93:fb:77:44:12:94:32:e2:9e:b6:
                    8c:3c:3f:96:28:45:cc:85:6e:e6:83:3a:e9:e6:26:
                    16:e4:40:ae:a8:7a:25:8e:3c:68:91:76:ca:26:54:
                    bc:a2:a9:72:2f:7b:88:f1:96:22:25:2e:ef:2b:9c:
                    08:bf:e7:38:1e:e0:c4:2e:8a:19:0f:e9:f2:40:35:
                    80:21:d7:d6:e2:50:d3:f7:f7:47:1a:dd:ab:55:c4:
                    ac:75:40:a2:74:72:f6:f3:35:98:76:70:15:05:3c:
                    43:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:9F:15:89:E7:8A:8A:FD:21:24:3A:82:44:AA:15:B8:61:70:55:2A
            X509v3 Authority Key Identifier:
                keyid:C1:64:F8:9C:AD:16:4E:69:6F:50:70:A4:3F:5B:84:BA:8C:3F:61:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/C164F89CAD164E696F5070A43F5B84BA8C3F610A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C164F89CAD164E696F5070A43F5B84BA8C3F610A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/34352e3136362e36362e302f32342d3234203d3e20323637393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:3b:5a:88:95:28:78:21:bc:80:46:b7:d0:ef:de:cf:d6:21:
         96:bc:f5:31:df:46:39:67:fb:ec:e8:09:7f:24:1c:55:4a:ab:
         95:4d:41:85:f4:66:68:17:c5:54:57:2d:e4:33:70:a4:f9:a8:
         12:1e:7d:34:9f:1c:88:95:d3:d9:52:1a:f0:0d:8a:5e:72:f4:
         07:15:3d:5b:7c:69:0e:91:62:42:c2:5f:70:8c:23:2c:f1:9d:
         42:cd:f0:f6:72:5b:9a:49:dc:38:5f:44:8f:99:f0:57:c4:76:
         ec:74:af:b7:86:b2:2f:ea:f5:95:cc:14:7a:dc:68:02:59:b7:
         48:25:4c:b5:31:67:2a:d1:95:f4:d2:c8:54:d2:8c:7a:29:42:
         11:5e:f4:4f:60:13:e9:9c:bd:ff:a6:c8:d6:f3:83:2b:e0:56:
         56:2f:81:2d:12:69:a6:34:81:e3:20:32:3d:ae:96:d9:85:10:
         59:70:09:e1:10:6f:10:32:f3:d8:eb:03:33:57:ef:27:ed:39:
         f9:0a:07:92:e0:fb:0d:f5:92:b6:36:fd:8a:90:aa:00:43:d2:
         b4:0c:f8:c0:87:06:9c:51:a3:3a:64:3f:bf:98:b5:38:77:33:
         07:1a:61:ab:65:39:73:3b:0d:cb:ae:25:4d:59:7d:6f:24:b7:
         f6:7d:68:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:39:19 2026 by rpki-client