Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ZT5Yn1orTLpUFNViHohdEoDhAetdrM7szz9nzmuHzML/0/34352e3136312e3136372e302f32342d3234203d3e20323638343637.roa
File:                     34352e3136312e3136372e302f32342d3234203d3e20323638343637.roa (raw, json)
Hash identifier:          fWF2iDCxqkPPYO+uekEw68LDfUwBdyGvbBzp77E+X8w=
Subject key identifier:   FA:F6:A8:8B:EE:AB:1A:42:3B:28:D5:8A:DD:0D:08:E8:DF:6A:4B:1D
Certificate issuer:       /CN=A62253A262C05DA37257E32D22BDF0000285A921
Certificate serial:       4167A3AFBBA07AA36C731469084BA4DB3E78E3FB
Authority key identifier: A6:22:53:A2:62:C0:5D:A3:72:57:E3:2D:22:BD:F0:00:02:85:A9:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62253A262C05DA37257E32D22BDF0000285A921.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ZT5Yn1orTLpUFNViHohdEoDhAetdrM7szz9nzmuHzML/0/34352e3136312e3136372e302f32342d3234203d3e20323638343637.roa
Signing time:             Thu 25 Jun 2026 22:22:26 +0000
ROA not before:           Thu 25 Jun 2026 22:17:26 +0000
ROA not after:            Thu 24 Jun 2027 22:22:26 +0000
asID:                     268467
IP address blocks:        45.161.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ZT5Yn1orTLpUFNViHohdEoDhAetdrM7szz9nzmuHzML/0/A62253A262C05DA37257E32D22BDF0000285A921.crl
                          rsync://rpki-repo.registro.br/repo/7ZT5Yn1orTLpUFNViHohdEoDhAetdrM7szz9nzmuHzML/0/A62253A262C05DA37257E32D22BDF0000285A921.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62253A262C05DA37257E32D22BDF0000285A921.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 08:36:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:67:a3:af:bb:a0:7a:a3:6c:73:14:69:08:4b:a4:db:3e:78:e3:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A62253A262C05DA37257E32D22BDF0000285A921
        Validity
            Not Before: Jun 25 22:17:26 2026 GMT
            Not After : Jun 24 22:22:26 2027 GMT
        Subject: CN=FAF6A88BEEAB1A423B28D58ADD0D08E8DF6A4B1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b4:11:3c:50:87:f5:18:d3:64:01:a2:99:2a:
                    cf:21:48:c9:79:b4:91:21:e8:18:1f:de:fd:09:10:
                    b5:f1:47:07:a4:ba:3d:0a:e7:c9:b4:99:a9:c6:bd:
                    ee:60:b5:38:78:0b:76:20:b8:e9:9b:73:50:96:e4:
                    ef:ef:04:b7:60:87:ec:71:ec:f9:89:99:82:d8:7e:
                    1d:75:94:1d:47:3d:8f:33:e2:b6:39:3f:9d:29:26:
                    ed:fd:1c:af:91:92:bc:c8:86:f1:4a:d7:5f:39:fe:
                    1b:9e:cd:f5:3b:97:95:5f:f6:3b:89:1d:ed:d6:36:
                    70:2d:b1:59:a7:ae:42:b3:0e:b1:8b:38:0d:2d:96:
                    71:41:4f:20:ad:e4:5e:2a:64:1c:74:4e:40:0d:c1:
                    c7:41:5f:29:a0:8d:05:13:de:f3:78:a8:5e:68:da:
                    41:f3:52:71:dc:ed:2f:ff:11:fb:bc:8b:92:da:a7:
                    f2:6f:41:ec:0b:70:80:14:b7:62:0a:73:3f:20:a4:
                    82:0c:83:b3:3e:ee:06:9f:3e:3d:27:d6:2d:b6:d2:
                    56:76:65:0a:1d:98:8a:43:4a:14:89:6f:fa:0b:42:
                    93:4c:1b:70:2e:48:10:45:ab:aa:3e:5d:5e:e1:de:
                    e8:e2:88:e9:80:71:53:3b:d9:2b:05:d8:87:1b:34:
                    83:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F6:A8:8B:EE:AB:1A:42:3B:28:D5:8A:DD:0D:08:E8:DF:6A:4B:1D
            X509v3 Authority Key Identifier:
                keyid:A6:22:53:A2:62:C0:5D:A3:72:57:E3:2D:22:BD:F0:00:02:85:A9:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ZT5Yn1orTLpUFNViHohdEoDhAetdrM7szz9nzmuHzML/0/A62253A262C05DA37257E32D22BDF0000285A921.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62253A262C05DA37257E32D22BDF0000285A921.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ZT5Yn1orTLpUFNViHohdEoDhAetdrM7szz9nzmuHzML/0/34352e3136312e3136372e302f32342d3234203d3e20323638343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:2a:fb:a0:42:97:24:27:6d:97:96:69:9b:f5:5f:f7:08:2f:
         6f:0f:8a:74:87:e7:43:57:90:af:26:95:e4:5a:61:79:cb:03:
         be:53:20:8b:43:db:fe:55:67:5c:f6:66:65:88:a1:6f:8d:05:
         6a:68:0e:52:3b:c9:0d:35:67:30:18:03:cc:cf:d0:b4:97:ed:
         a0:b9:25:4d:56:f2:6c:ed:28:40:06:56:fd:e1:ed:6c:7b:31:
         c2:b0:1c:9e:ec:1e:cf:3c:af:07:ac:12:49:49:df:31:47:48:
         d7:1c:65:51:63:76:7a:7d:eb:09:d6:35:29:52:55:11:49:3a:
         14:3c:86:1d:a7:c1:a4:1c:95:91:53:7e:d5:27:20:a1:80:08:
         4f:cd:92:13:0e:4b:07:18:f2:71:97:65:29:a0:d3:ba:62:12:
         8a:1d:8e:00:09:7a:2c:ea:05:c2:e1:e9:eb:7b:15:59:b0:2e:
         bb:6b:f1:e2:b0:fd:5b:87:0d:a6:76:73:dc:a5:02:0f:0d:f1:
         dc:cb:cf:bb:36:66:b0:f4:9e:09:7c:e1:58:9e:b7:16:80:41:
         98:33:d5:64:0b:e2:42:69:dc:a1:29:b4:3e:6f:a8:55:9f:29:
         0a:21:0f:ac:38:a1:42:93:6a:7b:4b:04:36:b5:fa:af:6c:1f:
         c7:db:f6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:59:19 2026 by rpki-client