Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/34352e3136362e342e302f32322d3332203d3e20323637393432.roa
File:                     34352e3136362e342e302f32322d3332203d3e20323637393432.roa (raw, json)
Hash identifier:          Ymk/OCYQfiRRey1ORjLIBlnUoEKAU+3iyG+MdZcqaFU=
Subject key identifier:   29:33:7C:CD:38:90:34:17:49:33:07:DC:4A:27:94:90:54:2A:64:56
Certificate issuer:       /CN=161452576542127A122731E3B02950CF87014D33
Certificate serial:       043787F2A9384ECBFFDA2B69193145C35BF3B75D
Authority key identifier: 16:14:52:57:65:42:12:7A:12:27:31:E3:B0:29:50:CF:87:01:4D:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/161452576542127A122731E3B02950CF87014D33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/34352e3136362e342e302f32322d3332203d3e20323637393432.roa
Signing time:             Mon 03 Aug 2026 20:33:05 +0000
ROA not before:           Mon 03 Aug 2026 20:28:05 +0000
ROA not after:            Mon 02 Aug 2027 20:33:05 +0000
asID:                     267942
IP address blocks:        45.166.4.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/161452576542127A122731E3B02950CF87014D33.crl
                          rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/161452576542127A122731E3B02950CF87014D33.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/161452576542127A122731E3B02950CF87014D33.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 03:44:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:37:87:f2:a9:38:4e:cb:ff:da:2b:69:19:31:45:c3:5b:f3:b7:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=161452576542127A122731E3B02950CF87014D33
        Validity
            Not Before: Aug  3 20:28:05 2026 GMT
            Not After : Aug  2 20:33:05 2027 GMT
        Subject: CN=29337CCD38903417493307DC4A279490542A6456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c2:46:9b:6c:f7:8c:8f:ba:8f:84:17:a4:26:
                    e3:e3:da:98:3b:b1:42:d2:68:74:c2:dc:50:66:78:
                    56:18:46:d5:26:b8:4c:e6:f0:da:06:fe:df:92:da:
                    19:5f:61:9d:3d:9f:03:a4:2a:f9:3d:84:40:eb:3d:
                    94:44:0c:5f:79:4c:ab:2b:dd:8f:63:dc:84:71:7b:
                    5b:71:a0:92:d5:9e:29:42:b1:95:94:87:6d:a9:3f:
                    96:65:0a:85:27:00:45:69:3b:60:3b:73:cc:02:29:
                    ef:24:98:d0:a8:47:1a:b1:2f:19:46:c0:19:45:dc:
                    5d:fe:49:4a:9d:d2:a0:16:8b:94:e0:8a:5d:32:8e:
                    1a:e4:cf:3a:29:17:85:9c:a4:13:83:5d:64:43:9b:
                    27:de:56:fe:d7:c0:d8:83:06:21:27:b9:87:41:71:
                    e7:58:b2:b8:88:69:d6:c4:97:0d:04:02:05:4c:ef:
                    8c:a0:97:36:1e:bf:9a:28:0f:17:ee:0a:ed:7f:95:
                    ee:68:18:70:2d:d9:5a:9b:0b:e0:3a:c7:63:05:c9:
                    9d:d8:51:d1:69:a9:8c:35:7c:ee:d4:4e:f6:f9:ad:
                    e7:bb:62:76:a3:6b:76:5b:53:23:35:08:7a:1d:c4:
                    d4:af:2a:41:70:bd:69:c9:91:49:a9:4f:b5:f8:8d:
                    de:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:33:7C:CD:38:90:34:17:49:33:07:DC:4A:27:94:90:54:2A:64:56
            X509v3 Authority Key Identifier:
                keyid:16:14:52:57:65:42:12:7A:12:27:31:E3:B0:29:50:CF:87:01:4D:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/161452576542127A122731E3B02950CF87014D33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/161452576542127A122731E3B02950CF87014D33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/34352e3136362e342e302f32322d3332203d3e20323637393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:fa:95:bc:9b:11:ac:37:06:b0:4a:76:68:b6:6c:7a:af:b4:
         b7:ca:20:01:db:ac:37:bb:6c:23:c9:d0:52:23:a9:71:84:dc:
         ae:26:b9:c0:72:94:a7:ee:a5:b6:2c:7e:a8:1a:7f:ed:96:d2:
         86:38:28:76:5b:a5:54:cf:4d:05:07:18:6a:60:38:19:72:e6:
         47:f2:21:c4:f4:f4:f5:58:e5:40:71:61:c5:7b:7b:df:be:10:
         c4:2b:c7:fc:c8:53:36:f0:11:4a:79:0e:06:f2:b4:81:ba:67:
         5f:c2:28:45:27:c4:63:5e:73:6d:5b:1b:3c:92:b2:f4:1b:61:
         48:33:58:bd:4c:ba:3e:4a:6f:17:fa:f6:c4:eb:36:46:ec:d0:
         8e:32:f4:76:1a:53:be:ee:d8:c0:59:b7:6a:a2:5f:cd:83:54:
         78:a3:be:88:de:97:da:90:0d:3e:a2:15:d3:4a:cc:67:18:b3:
         9f:15:78:81:0d:a5:18:22:7b:b8:ec:34:33:e9:cf:1d:6c:c3:
         e6:71:12:de:26:ad:ac:51:05:4a:64:9a:24:15:da:ba:77:f0:
         c0:d1:14:61:4c:98:78:e5:9f:96:ce:90:a2:88:69:c9:1c:39:
         89:1a:ae:03:c5:49:4b:43:01:e1:a8:02:f9:c0:0d:12:ce:53:
         3d:8d:a3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 09:13:17 2026 by rpki-client