Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/A2EVMrt1NWZHKPbatdpcMcFhX9yStoozw6N66Gjqbq68/0/34352e3136362e3132382e302f32322d3332203d3e20323637393537.roa
File:                     34352e3136362e3132382e302f32322d3332203d3e20323637393537.roa (raw, json)
Hash identifier:          JFvkecQHQyxxXXNuyYJmsHehKxnCCbRuIlEkWvq1ds4=
Subject key identifier:   44:62:45:4C:1C:ED:1A:FC:CA:C7:1D:6A:6D:EE:93:2A:F3:1C:74:40
Certificate issuer:       /CN=9DF1D5C3A296E11034EB74E97DA44FE1819480D9
Certificate serial:       25E776C3E92DAFF65752D3C84BAE153C6666F0C8
Authority key identifier: 9D:F1:D5:C3:A2:96:E1:10:34:EB:74:E9:7D:A4:4F:E1:81:94:80:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DF1D5C3A296E11034EB74E97DA44FE1819480D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2EVMrt1NWZHKPbatdpcMcFhX9yStoozw6N66Gjqbq68/0/34352e3136362e3132382e302f32322d3332203d3e20323637393537.roa
Signing time:             Mon 03 Aug 2026 17:07:00 +0000
ROA not before:           Mon 03 Aug 2026 17:02:00 +0000
ROA not after:            Mon 02 Aug 2027 17:07:00 +0000
asID:                     267957
IP address blocks:        45.166.128.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2EVMrt1NWZHKPbatdpcMcFhX9yStoozw6N66Gjqbq68/0/9DF1D5C3A296E11034EB74E97DA44FE1819480D9.crl
                          rsync://rpki-repo.registro.br/repo/A2EVMrt1NWZHKPbatdpcMcFhX9yStoozw6N66Gjqbq68/0/9DF1D5C3A296E11034EB74E97DA44FE1819480D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DF1D5C3A296E11034EB74E97DA44FE1819480D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 23:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:e7:76:c3:e9:2d:af:f6:57:52:d3:c8:4b:ae:15:3c:66:66:f0:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DF1D5C3A296E11034EB74E97DA44FE1819480D9
        Validity
            Not Before: Aug  3 17:02:00 2026 GMT
            Not After : Aug  2 17:07:00 2027 GMT
        Subject: CN=4462454C1CED1AFCCAC71D6A6DEE932AF31C7440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:52:8f:aa:a8:40:cd:fb:4f:c4:41:4a:5e:94:
                    04:90:34:78:10:5e:75:a4:6d:a6:6a:1f:45:dd:47:
                    e0:28:9a:82:6e:1b:88:cf:0f:84:cd:62:90:dc:6b:
                    5a:8c:9a:51:ec:9a:73:6f:46:e2:d6:ab:90:70:05:
                    8d:d3:84:85:03:3f:1b:aa:59:79:03:e0:db:62:a6:
                    c3:24:3f:b3:fe:fd:26:aa:53:6c:4d:4d:a1:c0:c1:
                    36:45:ca:87:d6:d7:8f:47:34:1a:1c:1b:bf:07:5b:
                    32:33:f2:67:d4:50:b1:08:5a:bb:a0:c2:f6:2a:21:
                    39:82:99:cd:d0:05:d2:2e:06:ee:9d:29:5b:9c:88:
                    d1:ee:6f:4d:ee:b5:c8:81:08:53:a4:b9:f7:d8:64:
                    a7:e5:b0:ef:98:80:af:49:e4:2c:e8:af:0b:23:37:
                    85:2f:61:0c:de:44:52:71:dc:36:bc:91:55:df:45:
                    75:27:23:da:df:59:56:96:56:a2:3a:08:18:78:a4:
                    62:c7:bf:75:fc:42:0e:92:1e:9f:88:55:a3:dd:23:
                    bd:fc:1d:66:8a:99:96:33:84:22:e8:8e:b8:ee:02:
                    e9:50:ec:4d:12:4b:59:b3:13:88:11:a4:4f:55:22:
                    96:2a:4a:9f:f4:21:56:03:10:8a:07:7c:56:1c:5b:
                    a8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:62:45:4C:1C:ED:1A:FC:CA:C7:1D:6A:6D:EE:93:2A:F3:1C:74:40
            X509v3 Authority Key Identifier:
                keyid:9D:F1:D5:C3:A2:96:E1:10:34:EB:74:E9:7D:A4:4F:E1:81:94:80:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2EVMrt1NWZHKPbatdpcMcFhX9yStoozw6N66Gjqbq68/0/9DF1D5C3A296E11034EB74E97DA44FE1819480D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DF1D5C3A296E11034EB74E97DA44FE1819480D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2EVMrt1NWZHKPbatdpcMcFhX9yStoozw6N66Gjqbq68/0/34352e3136362e3132382e302f32322d3332203d3e20323637393537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:10:e4:18:55:73:67:54:37:83:b4:eb:14:c9:12:82:79:84:
         dd:bd:b8:62:8e:11:01:1f:d3:f1:f7:b5:10:85:2f:c5:ed:65:
         59:a5:85:42:57:2d:19:03:6f:5f:95:a0:8e:ed:cc:0d:da:73:
         47:9a:2b:70:04:59:21:63:30:f5:98:28:af:61:53:00:28:4d:
         b2:13:84:59:22:1d:40:bd:4f:e2:d6:95:76:a8:e4:3d:a3:2f:
         d1:c3:6c:86:65:48:ab:55:94:e6:91:01:61:8c:32:a0:22:fb:
         5e:83:ca:32:0a:8f:24:40:9c:f9:c0:3c:7e:78:40:34:da:76:
         3a:3b:2a:00:34:13:d1:28:7b:d3:b3:8d:9a:69:03:1a:0c:a0:
         37:c4:73:c6:b2:dd:9f:d0:64:23:ca:83:66:39:a5:f7:82:f5:
         40:30:13:cc:11:eb:a0:28:c4:c0:a8:ba:ae:aa:a8:be:6e:96:
         26:e2:47:8a:08:bb:b4:ae:00:c7:0c:a0:dc:2d:69:b6:95:86:
         43:b7:c7:5a:33:d2:72:68:39:f4:37:c4:ba:99:3d:ad:bf:55:
         4c:f3:97:4f:da:ee:aa:c8:86:30:5b:c6:25:02:31:f3:39:11:
         14:9d:eb:49:f3:db:66:48:2e:0f:91:b9:36:ed:51:51:9b:3b:
         42:ee:cf:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 08:51:42 2026 by rpki-client