Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/0/34352e3136392e3135362e302f32322d3232203d3e20323638313136.roa
File:                     34352e3136392e3135362e302f32322d3232203d3e20323638313136.roa (raw, json)
Hash identifier:          NeYgmkFLWL0psuM8sRsD2JEzqtC8h/dURPmByY4aJHI=
Subject key identifier:   6F:2F:C7:DC:90:05:DB:34:34:9B:AF:B2:6D:57:03:5E:F9:B8:B1:4C
Certificate issuer:       /CN=E84CD4F4D98BE445EC05B340638A58497D066F35
Certificate serial:       21C1E291E52C4EEE24C42456B2850D536483B7DB
Authority key identifier: E8:4C:D4:F4:D9:8B:E4:45:EC:05:B3:40:63:8A:58:49:7D:06:6F:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E84CD4F4D98BE445EC05B340638A58497D066F35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/0/34352e3136392e3135362e302f32322d3232203d3e20323638313136.roa
Signing time:             Wed 08 Jul 2026 01:56:39 +0000
ROA not before:           Wed 08 Jul 2026 01:51:39 +0000
ROA not after:            Wed 07 Jul 2027 01:56:39 +0000
asID:                     268116
IP address blocks:        45.169.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/0/E84CD4F4D98BE445EC05B340638A58497D066F35.crl
                          rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/0/E84CD4F4D98BE445EC05B340638A58497D066F35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E84CD4F4D98BE445EC05B340638A58497D066F35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 04:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:c1:e2:91:e5:2c:4e:ee:24:c4:24:56:b2:85:0d:53:64:83:b7:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E84CD4F4D98BE445EC05B340638A58497D066F35
        Validity
            Not Before: Jul  8 01:51:39 2026 GMT
            Not After : Jul  7 01:56:39 2027 GMT
        Subject: CN=6F2FC7DC9005DB34349BAFB26D57035EF9B8B14C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d8:71:9b:5c:81:64:5d:15:03:d7:85:98:bd:
                    bd:82:01:2d:b1:ee:90:e7:52:1c:ca:46:54:d8:a8:
                    89:9f:01:96:22:70:4f:67:f2:77:9e:b1:3a:67:d2:
                    a1:8b:81:99:09:2b:77:be:ea:af:0f:d7:3c:fd:29:
                    49:79:d8:91:5b:d7:1d:6f:bb:5a:e6:0f:93:04:6b:
                    56:40:14:8f:0c:14:e3:17:80:58:15:00:c8:82:99:
                    ae:92:6d:79:45:fb:15:e5:1f:b7:91:9e:bc:63:b5:
                    c6:09:84:02:04:06:27:d3:c6:2d:5a:3b:94:43:1d:
                    f9:ce:b8:2f:24:5e:77:aa:8e:2b:5a:f9:9e:2f:27:
                    46:89:ff:60:ed:4e:72:b5:9f:b5:2b:c8:ad:07:7c:
                    a4:b9:10:48:b6:e6:13:6a:3e:d7:64:7c:00:6d:b8:
                    d8:83:6f:2a:95:53:53:83:b4:ce:44:e2:de:8c:61:
                    97:9b:7b:74:c2:9b:d8:c4:6d:02:6e:48:ee:19:fb:
                    16:32:7e:07:24:ad:ca:77:cd:44:10:e0:16:6a:a2:
                    20:e2:e9:53:59:08:55:d6:af:1d:6c:0d:92:e5:04:
                    06:ca:8b:64:ea:f3:f3:8b:db:95:78:f3:6a:54:d1:
                    3e:66:05:b1:1d:0a:9a:41:c0:18:7a:1c:67:06:e6:
                    c7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:2F:C7:DC:90:05:DB:34:34:9B:AF:B2:6D:57:03:5E:F9:B8:B1:4C
            X509v3 Authority Key Identifier:
                keyid:E8:4C:D4:F4:D9:8B:E4:45:EC:05:B3:40:63:8A:58:49:7D:06:6F:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/0/E84CD4F4D98BE445EC05B340638A58497D066F35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E84CD4F4D98BE445EC05B340638A58497D066F35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/0/34352e3136392e3135362e302f32322d3232203d3e20323638313136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:42:db:c0:19:97:d1:95:19:eb:db:77:98:e9:ed:b3:a8:4f:
         f4:46:7b:15:31:73:a0:4b:5b:b5:80:e4:a9:f3:a6:15:0b:ae:
         41:f5:8c:6d:96:5c:ae:fc:9c:a7:41:09:18:42:6c:c6:b8:4a:
         b7:e0:55:3a:e4:34:28:8a:fe:11:18:70:39:88:80:43:a3:2c:
         3d:4d:7b:d9:63:75:17:41:ae:20:96:b5:b1:db:d7:75:71:1c:
         d8:1c:9c:aa:64:74:f2:38:8c:22:24:b1:bc:64:23:72:bf:5c:
         c7:15:3e:3b:55:5d:82:4a:16:c7:58:2e:79:24:49:77:61:07:
         cd:69:38:79:2b:45:60:f4:c3:cf:94:c9:6d:85:32:a8:da:9e:
         f0:49:91:9a:d3:fd:eb:85:80:00:af:5b:c4:cf:74:40:f2:71:
         33:e3:3e:c6:74:b2:ee:cd:cb:b7:60:58:b7:4a:ea:56:e5:c9:
         1b:88:12:e9:3d:82:27:4f:db:d3:7b:84:26:b4:a0:0d:d0:18:
         3a:68:88:44:30:37:fd:cf:ca:b4:4a:7c:cd:ed:a6:5c:14:8a:
         94:86:8f:24:80:d8:39:aa:81:b7:c6:63:ea:a3:01:21:41:32:
         fd:3c:4e:6f:57:2b:c1:58:a6:8a:4c:bc:b6:69:f7:77:ac:50:
         f0:d9:16:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:09:23 2026 by rpki-client