Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/34352e3136312e3234382e302f32332d3233203d3e20323638343837.roa
File:                     34352e3136312e3234382e302f32332d3233203d3e20323638343837.roa (raw, json)
Hash identifier:          0CfzeZYXOK0iJgYVsNvZAdAq5AtwlFD0Z4WaWi1dg6Q=
Subject key identifier:   4D:12:9A:77:2C:92:F2:15:50:44:88:92:63:AE:39:26:55:95:82:80
Certificate issuer:       /CN=464B947257F06B70E4456A2AACFED298FBBEE866
Certificate serial:       1FAFBAF07587C497EC60BB69AE23F50A9F3CC071
Authority key identifier: 46:4B:94:72:57:F0:6B:70:E4:45:6A:2A:AC:FE:D2:98:FB:BE:E8:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464B947257F06B70E4456A2AACFED298FBBEE866.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/34352e3136312e3234382e302f32332d3233203d3e20323638343837.roa
Signing time:             Fri 26 Jun 2026 13:54:21 +0000
ROA not before:           Fri 26 Jun 2026 13:49:21 +0000
ROA not after:            Fri 25 Jun 2027 13:54:21 +0000
asID:                     268487
IP address blocks:        45.161.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/464B947257F06B70E4456A2AACFED298FBBEE866.crl
                          rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/464B947257F06B70E4456A2AACFED298FBBEE866.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464B947257F06B70E4456A2AACFED298FBBEE866.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 11:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:af:ba:f0:75:87:c4:97:ec:60:bb:69:ae:23:f5:0a:9f:3c:c0:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464B947257F06B70E4456A2AACFED298FBBEE866
        Validity
            Not Before: Jun 26 13:49:21 2026 GMT
            Not After : Jun 25 13:54:21 2027 GMT
        Subject: CN=4D129A772C92F2155044889263AE392655958280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4e:08:d3:37:1b:19:59:9c:3e:5f:11:ad:14:
                    67:81:cd:01:a1:a6:1a:f9:db:64:6c:26:7b:73:48:
                    fb:e0:b8:b6:06:fc:c2:64:eb:6b:dc:dc:2c:80:a4:
                    bc:e6:3e:8e:79:7d:64:e2:cd:9f:79:0e:39:83:40:
                    80:a6:39:09:30:9a:ed:9f:72:61:d6:d6:50:af:aa:
                    f0:0c:26:0c:2f:16:f4:dc:85:c5:71:a4:6e:9e:eb:
                    1c:80:8e:7e:97:65:bd:b0:86:ce:f9:f4:ed:9a:3c:
                    d7:bb:c3:07:55:7e:8b:26:3c:3d:25:96:53:3f:c4:
                    43:8e:91:18:d3:4e:88:a3:4d:6f:83:b2:a3:db:e7:
                    ae:1b:c5:2c:e3:1e:b6:b5:57:91:42:f0:ee:2b:76:
                    ab:64:e2:38:7b:b1:a9:3a:81:53:dd:8c:2d:80:c4:
                    5b:40:20:4b:93:ba:22:15:0c:05:3e:ca:bd:63:ac:
                    33:42:91:65:81:ae:f2:ce:90:11:3b:29:e7:dd:17:
                    3e:95:37:01:7b:e8:f5:44:16:d9:07:4a:56:d1:d6:
                    71:51:8f:fe:34:57:e1:09:56:78:8d:b6:7c:39:a8:
                    ab:dd:ca:0d:e1:a1:49:1e:a3:49:fd:b3:f2:7b:d0:
                    2b:e4:04:45:96:59:4e:08:28:17:0d:05:a4:d9:26:
                    36:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:12:9A:77:2C:92:F2:15:50:44:88:92:63:AE:39:26:55:95:82:80
            X509v3 Authority Key Identifier:
                keyid:46:4B:94:72:57:F0:6B:70:E4:45:6A:2A:AC:FE:D2:98:FB:BE:E8:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/464B947257F06B70E4456A2AACFED298FBBEE866.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464B947257F06B70E4456A2AACFED298FBBEE866.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/34352e3136312e3234382e302f32332d3233203d3e20323638343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:62:1f:35:7b:10:84:b7:f4:71:34:d0:eb:33:66:12:9e:81:
         27:4b:de:78:11:16:87:3c:82:cc:7b:dd:ba:77:7d:da:48:e5:
         90:f7:35:53:33:81:7a:79:87:b6:c6:5b:c8:f1:d9:68:2c:74:
         04:cb:a8:84:96:ab:28:89:fb:af:c8:54:ca:56:0b:62:ad:a4:
         d8:9b:f4:34:f4:77:5a:31:b1:76:a8:42:71:3c:4c:f0:50:90:
         9c:d5:ec:72:2b:8c:82:8c:c4:66:8a:59:94:2e:24:ad:ec:33:
         4a:4e:91:75:33:2a:b2:98:b9:a1:4e:af:b8:be:a7:6a:6d:82:
         61:84:e3:6a:af:44:27:5b:d7:2b:a0:72:bf:1e:8b:6c:d6:ba:
         0e:2d:c4:d4:f3:d5:35:94:49:cb:c2:aa:57:cf:40:04:e8:62:
         d2:61:eb:25:e0:cb:3a:33:99:0e:7a:38:16:04:a5:1d:36:00:
         65:27:80:df:a5:c1:fc:de:ba:ee:38:e7:56:8c:55:17:49:48:
         e4:75:83:cd:63:b7:a0:21:1b:c8:55:88:99:7c:96:04:f6:0e:
         4b:08:64:f1:ba:b5:43:9d:48:17:91:d2:a6:a2:c2:78:52:17:
         e1:a5:8e:d3:d8:68:91:3d:bf:22:00:11:e9:36:b6:2a:7b:8f:
         d8:40:a6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:01:00 2026 by rpki-client