Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/14AAMPR1GZAyRTptTUJ2CmHNHTrGifmtDQE2wFVaR5Yi/1/34352e3137342e3138302e302f32322d3234203d3e20323638333131.roa
File:                     34352e3137342e3138302e302f32322d3234203d3e20323638333131.roa (raw, json)
Hash identifier:          PmySgLpNR+qqViGgR9VfxzeJ4+wR159wjX+IBzAGLOU=
Subject key identifier:   70:E0:4C:70:2E:81:19:F5:0C:BF:D0:B7:11:A1:A0:66:68:77:73:BF
Certificate issuer:       /CN=B1DBBA8EA92CD857019C49802F323CF13FFF24AF
Certificate serial:       0F27454D8318751B1A461C0D1E75F60E6025DA2F
Authority key identifier: B1:DB:BA:8E:A9:2C:D8:57:01:9C:49:80:2F:32:3C:F1:3F:FF:24:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1DBBA8EA92CD857019C49802F323CF13FFF24AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/14AAMPR1GZAyRTptTUJ2CmHNHTrGifmtDQE2wFVaR5Yi/1/34352e3137342e3138302e302f32322d3234203d3e20323638333131.roa
Signing time:             Wed 29 Jul 2026 11:59:37 +0000
ROA not before:           Wed 29 Jul 2026 11:54:37 +0000
ROA not after:            Wed 28 Jul 2027 11:59:37 +0000
asID:                     268311
IP address blocks:        45.174.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/14AAMPR1GZAyRTptTUJ2CmHNHTrGifmtDQE2wFVaR5Yi/1/B1DBBA8EA92CD857019C49802F323CF13FFF24AF.crl
                          rsync://rpki-repo.registro.br/repo/14AAMPR1GZAyRTptTUJ2CmHNHTrGifmtDQE2wFVaR5Yi/1/B1DBBA8EA92CD857019C49802F323CF13FFF24AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1DBBA8EA92CD857019C49802F323CF13FFF24AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 05:17:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:27:45:4d:83:18:75:1b:1a:46:1c:0d:1e:75:f6:0e:60:25:da:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1DBBA8EA92CD857019C49802F323CF13FFF24AF
        Validity
            Not Before: Jul 29 11:54:37 2026 GMT
            Not After : Jul 28 11:59:37 2027 GMT
        Subject: CN=70E04C702E8119F50CBFD0B711A1A066687773BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c7:91:26:bf:bf:c9:95:a2:3c:cd:32:2e:b3:
                    c8:6e:65:c0:e7:0d:db:a5:42:f9:b4:87:a1:96:f0:
                    40:23:dc:ba:7c:84:b8:45:cf:82:e4:59:e0:c5:03:
                    25:4c:a3:32:77:e4:d1:ef:ce:16:92:3a:bf:92:4b:
                    4d:61:7f:1a:d3:65:70:7f:4a:d7:e8:ab:f6:b4:b0:
                    03:35:86:d9:04:fb:ac:73:35:75:38:f0:c3:23:c4:
                    e9:9c:01:ca:b0:36:17:3a:ba:9a:ff:76:f4:1c:ff:
                    32:e7:62:9c:97:02:1d:0e:82:09:52:88:31:be:98:
                    05:c1:41:95:d2:77:8e:f7:13:28:36:02:79:9e:32:
                    36:a4:2d:d6:4c:dd:2f:be:8b:9b:89:d7:4d:49:6b:
                    54:e7:48:72:a4:36:f1:0e:9f:18:9b:d8:e7:d2:ff:
                    6c:6f:09:2c:1d:29:f3:fb:70:c7:74:de:a2:d6:64:
                    e6:c1:df:7d:7c:1a:11:7d:fa:2f:60:fa:e4:75:35:
                    ed:98:00:d5:6d:cc:81:36:6b:80:03:8e:27:bc:27:
                    b4:89:2c:c2:aa:11:ca:70:80:6e:d9:fa:ad:5c:7d:
                    c3:3b:e7:5c:22:eb:81:ed:3b:52:cb:50:21:db:4e:
                    19:e9:74:ce:e6:fa:c0:73:34:dd:c5:36:e8:be:c3:
                    c0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E0:4C:70:2E:81:19:F5:0C:BF:D0:B7:11:A1:A0:66:68:77:73:BF
            X509v3 Authority Key Identifier:
                keyid:B1:DB:BA:8E:A9:2C:D8:57:01:9C:49:80:2F:32:3C:F1:3F:FF:24:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/14AAMPR1GZAyRTptTUJ2CmHNHTrGifmtDQE2wFVaR5Yi/1/B1DBBA8EA92CD857019C49802F323CF13FFF24AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1DBBA8EA92CD857019C49802F323CF13FFF24AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/14AAMPR1GZAyRTptTUJ2CmHNHTrGifmtDQE2wFVaR5Yi/1/34352e3137342e3138302e302f32322d3234203d3e20323638333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:c9:e3:bd:fd:cb:d3:c0:e1:e4:be:ce:e2:e2:82:2b:9d:37:
         af:53:96:72:12:13:d1:1f:7a:ff:8d:07:37:b9:6b:a2:55:15:
         fb:68:5a:4f:d1:1b:0b:eb:f5:d3:2a:5f:0b:a7:6e:82:2e:a7:
         45:4c:d3:8a:5e:98:77:eb:48:b6:99:2e:fc:18:19:15:5c:8c:
         2c:b5:49:a7:49:b4:84:f3:f9:5d:8f:d1:70:7f:85:e6:ab:08:
         b7:3b:a2:d6:f8:f9:1f:24:ec:42:f6:0b:7e:e4:b5:11:4b:4b:
         35:62:cd:18:e8:50:0b:05:4f:c6:b0:48:36:ba:ca:28:74:53:
         6f:83:b4:a5:f9:05:6c:3f:7a:19:a7:b7:6c:f6:66:2e:89:ea:
         c7:14:13:1b:af:19:12:89:64:80:1d:fc:fb:56:e0:57:7c:71:
         93:88:da:d6:77:02:31:0d:65:65:3d:a1:fd:c1:89:b9:a9:b0:
         3a:8c:27:4c:a2:e1:fc:52:db:7b:3b:62:14:d0:ac:47:5c:f1:
         69:06:a6:9b:e4:1a:ff:d3:99:48:64:28:fc:05:f3:0a:0b:4b:
         de:20:b7:96:8e:56:2a:a5:ac:93:40:90:9b:a0:0f:8d:bd:b1:
         64:11:b7:ef:90:e9:f9:a3:a5:48:fc:41:4e:05:67:e2:88:09:
         c4:63:7d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 10:29:21 2026 by rpki-client