Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/0/34352e3136312e3234342e302f32322d3232203d3e20323638343834.roa
File:                     34352e3136312e3234342e302f32322d3232203d3e20323638343834.roa (raw, json)
Hash identifier:          ZRPvmQacQj+hSMSR4/7ECx3F3VEjOurB3MPZ1LFPz68=
Subject key identifier:   39:7F:06:CD:11:62:F5:BA:68:CF:90:8E:B0:25:0F:91:5F:19:2E:BC
Certificate issuer:       /CN=47A396325DF9EBD8DDDCB2149F0084823FA67B1E
Certificate serial:       67E56C29903BE5E3D5AFAF9B5F236172785EE904
Authority key identifier: 47:A3:96:32:5D:F9:EB:D8:DD:DC:B2:14:9F:00:84:82:3F:A6:7B:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A396325DF9EBD8DDDCB2149F0084823FA67B1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/0/34352e3136312e3234342e302f32322d3232203d3e20323638343834.roa
Signing time:             Tue 23 Jun 2026 01:23:38 +0000
ROA not before:           Tue 23 Jun 2026 01:18:38 +0000
ROA not after:            Tue 22 Jun 2027 01:23:38 +0000
asID:                     268484
IP address blocks:        45.161.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/0/47A396325DF9EBD8DDDCB2149F0084823FA67B1E.crl
                          rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/0/47A396325DF9EBD8DDDCB2149F0084823FA67B1E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A396325DF9EBD8DDDCB2149F0084823FA67B1E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 05:44:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:e5:6c:29:90:3b:e5:e3:d5:af:af:9b:5f:23:61:72:78:5e:e9:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A396325DF9EBD8DDDCB2149F0084823FA67B1E
        Validity
            Not Before: Jun 23 01:18:38 2026 GMT
            Not After : Jun 22 01:23:38 2027 GMT
        Subject: CN=397F06CD1162F5BA68CF908EB0250F915F192EBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:68:26:0b:51:b1:8e:e0:a4:d1:71:e6:7f:04:
                    d8:7d:90:ef:01:20:58:64:ea:b9:50:56:dd:29:28:
                    c2:7c:a9:0e:b4:cb:4b:02:51:9e:7e:9c:da:51:b4:
                    84:c8:12:82:26:48:4d:3d:39:b2:09:0e:57:d0:fe:
                    71:31:aa:0f:a4:41:08:71:99:bf:36:66:93:08:d5:
                    b0:b7:45:5e:94:00:c6:1c:a3:65:35:04:6c:2f:e7:
                    ea:61:55:3a:cc:49:18:cc:4b:d6:cb:4c:47:a4:e3:
                    40:6b:6b:22:79:22:2b:91:74:2d:ce:36:7f:28:1f:
                    6b:7d:8e:30:dd:65:b8:c3:d8:ce:37:f9:99:5c:05:
                    30:3b:ad:38:a3:38:f2:a0:ef:63:03:9f:69:7f:b9:
                    8c:39:89:72:81:47:9b:2a:9a:d9:d5:1d:7f:ea:68:
                    f9:88:0c:5a:df:b4:21:70:78:47:12:e5:be:bf:38:
                    e4:0c:f7:9b:4b:c1:20:a1:cc:d8:cb:e8:50:f2:44:
                    08:34:a3:c9:6c:e6:ad:11:76:32:5d:7c:ae:8e:c7:
                    f4:09:1b:fa:12:90:87:4b:b4:27:71:b5:df:37:ed:
                    17:3a:cf:a8:6f:04:2e:bd:83:ee:ba:8f:f5:95:b5:
                    25:da:8e:dc:e9:b7:96:02:2d:bc:71:66:02:df:e3:
                    af:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:7F:06:CD:11:62:F5:BA:68:CF:90:8E:B0:25:0F:91:5F:19:2E:BC
            X509v3 Authority Key Identifier:
                keyid:47:A3:96:32:5D:F9:EB:D8:DD:DC:B2:14:9F:00:84:82:3F:A6:7B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/0/47A396325DF9EBD8DDDCB2149F0084823FA67B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A396325DF9EBD8DDDCB2149F0084823FA67B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/0/34352e3136312e3234342e302f32322d3232203d3e20323638343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:b2:d1:47:e4:e1:ac:8f:11:6e:0a:97:c0:6a:1a:48:9a:3d:
         f6:e1:2e:ba:14:a7:f0:e2:74:aa:e9:1b:cd:74:46:a0:84:41:
         99:4b:e2:85:9b:2d:a6:46:85:82:93:58:99:ec:cd:60:bb:9b:
         7a:70:f2:17:03:a8:36:f1:7e:ee:59:6c:35:fb:2f:73:22:ab:
         a1:b7:f4:7a:a5:8d:41:bf:4e:28:cd:cf:5e:d1:28:53:67:ed:
         b2:28:e4:b9:e2:33:f5:d2:9f:24:d9:ab:d1:2c:63:a1:f9:93:
         02:4e:9e:87:65:ac:ff:c0:e4:12:31:16:5a:26:8f:48:c9:73:
         1a:a3:27:6d:f9:95:0c:87:b7:95:88:4e:c8:42:3f:5d:cd:13:
         a8:3b:83:5f:f6:68:f5:1e:af:92:ea:88:c3:79:fc:d3:6b:a9:
         56:69:b4:77:65:fe:5a:a2:c6:c6:66:07:fe:13:29:ef:ca:98:
         74:3c:d6:29:e0:28:31:d3:97:57:8b:25:c5:70:fe:74:9b:1a:
         da:b7:7b:50:ff:cc:81:5c:25:4d:37:15:4c:f9:c5:26:03:9a:
         f7:96:85:88:07:ac:a4:bc:91:9a:20:6d:cd:e4:13:95:c8:e7:
         ea:59:0a:bf:d5:56:c6:1e:72:0b:67:bc:43:ea:63:5a:b2:0a:
         0f:18:95:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:09:26 2026 by rpki-client