Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/0/34352e3136392e3135382e302f32332d3233203d3e20323638313136.roa
File:                     34352e3136392e3135382e302f32332d3233203d3e20323638313136.roa (raw, json)
Hash identifier:          tkG9Z62S3vB23k2HLYRxlj9vl+M8TxFVdzKn1yhH8p8=
Subject key identifier:   A5:23:14:5F:E6:61:41:B6:A7:FC:A8:A5:8D:4A:93:D0:39:9C:76:8B
Certificate issuer:       /CN=E84CD4F4D98BE445EC05B340638A58497D066F35
Certificate serial:       0D41C12282F691750D8B170D66E0649558FCF97E
Authority key identifier: E8:4C:D4:F4:D9:8B:E4:45:EC:05:B3:40:63:8A:58:49:7D:06:6F:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E84CD4F4D98BE445EC05B340638A58497D066F35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/0/34352e3136392e3135382e302f32332d3233203d3e20323638313136.roa
Signing time:             Wed 08 Jul 2026 01:56:39 +0000
ROA not before:           Wed 08 Jul 2026 01:51:39 +0000
ROA not after:            Wed 07 Jul 2027 01:56:39 +0000
asID:                     268116
IP address blocks:        45.169.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/0/E84CD4F4D98BE445EC05B340638A58497D066F35.crl
                          rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/0/E84CD4F4D98BE445EC05B340638A58497D066F35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E84CD4F4D98BE445EC05B340638A58497D066F35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 04:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:41:c1:22:82:f6:91:75:0d:8b:17:0d:66:e0:64:95:58:fc:f9:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E84CD4F4D98BE445EC05B340638A58497D066F35
        Validity
            Not Before: Jul  8 01:51:39 2026 GMT
            Not After : Jul  7 01:56:39 2027 GMT
        Subject: CN=A523145FE66141B6A7FCA8A58D4A93D0399C768B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8e:c9:d3:49:6b:89:71:20:4e:b6:4b:7e:db:
                    28:4e:5a:6f:2a:54:ea:31:2e:4c:07:5a:da:66:f3:
                    fd:f2:5b:80:e8:05:ef:a0:46:a1:26:61:4b:13:b3:
                    87:6e:04:9f:3b:62:7b:95:10:af:12:d1:51:ce:89:
                    d9:90:74:ef:ec:a2:25:c6:a5:81:90:85:d4:55:fb:
                    99:78:c1:08:ca:8e:a9:42:47:e3:f2:22:02:72:2a:
                    e7:10:94:63:52:3f:11:73:1c:0d:68:97:1c:5b:63:
                    2e:82:d8:d7:bc:1b:89:96:b0:11:18:d6:a6:98:18:
                    c0:a0:ae:b8:17:50:9e:66:ac:e6:1d:60:4c:e7:55:
                    e1:ed:3d:98:8c:56:74:e4:dd:ea:51:ea:11:14:50:
                    bd:b9:91:b6:36:9a:16:d3:8e:26:9d:9c:6a:d6:f3:
                    6b:65:40:b9:85:28:cd:0a:da:0a:4d:08:60:32:fa:
                    36:6c:ce:c3:82:04:29:c2:1e:c9:f1:09:8b:e8:ea:
                    48:0a:75:32:ba:a5:dc:7d:f1:27:7e:4d:90:65:18:
                    5e:0d:8e:37:c3:be:14:70:a5:eb:76:af:79:30:2f:
                    1d:de:ad:58:3c:d8:b3:07:97:88:a4:17:fc:5c:c6:
                    38:d4:08:b6:08:a5:47:5f:32:c4:21:5a:36:91:14:
                    90:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:23:14:5F:E6:61:41:B6:A7:FC:A8:A5:8D:4A:93:D0:39:9C:76:8B
            X509v3 Authority Key Identifier:
                keyid:E8:4C:D4:F4:D9:8B:E4:45:EC:05:B3:40:63:8A:58:49:7D:06:6F:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/0/E84CD4F4D98BE445EC05B340638A58497D066F35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E84CD4F4D98BE445EC05B340638A58497D066F35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/0/34352e3136392e3135382e302f32332d3233203d3e20323638313136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:2c:5f:29:fe:8f:bc:5f:38:bc:cd:2a:f7:b2:36:32:62:82:
         9b:a1:9e:5c:33:fe:0d:01:01:11:64:a3:fd:19:3c:22:b6:f8:
         2f:ac:f1:7e:e1:8b:1c:48:f3:e3:df:ab:be:de:65:5a:8d:ab:
         02:d8:b2:0b:3c:b8:03:74:89:2b:03:81:fc:a2:fd:64:25:65:
         ac:9a:4f:ea:ab:ab:8d:48:03:b4:37:f7:d2:fb:b4:f0:d4:50:
         1f:8a:3a:4e:6d:7e:c3:17:0c:3c:96:b7:45:99:94:29:49:41:
         76:a0:e1:0c:b6:ae:54:13:91:ea:6f:3b:7f:9d:db:61:c8:6d:
         b3:ed:a7:4d:4e:aa:ea:9f:2f:b7:a3:19:2b:a9:46:b6:21:b1:
         b4:40:aa:0f:1f:eb:a1:c9:ed:32:53:3d:5e:43:16:1d:cf:22:
         34:c0:93:c5:1a:07:ec:bb:cb:3b:39:d6:78:e0:08:00:a9:6a:
         cd:09:45:1d:c3:ed:34:5b:b2:70:58:41:33:73:49:bc:33:f7:
         46:16:0b:32:3f:98:aa:39:0d:36:09:45:5b:fb:61:2d:a5:55:
         d1:e8:e7:8c:0c:4c:46:21:5d:83:76:d2:43:a5:10:8c:8b:e5:
         26:59:d9:f4:34:16:f8:30:32:27:c7:0e:c1:19:31:80:13:af:
         68:c9:ab:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:09:28 2026 by rpki-client