Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/34352e37312e3233362e302f32322d3233203d3e20323637363235.roa
File:                     34352e37312e3233362e302f32322d3233203d3e20323637363235.roa (raw, json)
Hash identifier:          LT5c6jnVzotps881c0JYu4XM6nY0scEavk9ztd8JFL8=
Subject key identifier:   10:7A:3D:4A:44:00:80:D6:D5:20:D5:30:64:52:8B:E4:FB:AF:B2:6E
Certificate issuer:       /CN=66D4FE79ED8A8E0D195041C335EEB1B748A12F0A
Certificate serial:       068A2BC051E54D3D6231ED4C54418F5D9F36A9AF
Authority key identifier: 66:D4:FE:79:ED:8A:8E:0D:19:50:41:C3:35:EE:B1:B7:48:A1:2F:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/34352e37312e3233362e302f32322d3233203d3e20323637363235.roa
Signing time:             Tue 17 Mar 2026 06:35:39 +0000
ROA not before:           Tue 17 Mar 2026 06:30:39 +0000
ROA not after:            Tue 16 Mar 2027 06:35:39 +0000
asID:                     267625
IP address blocks:        45.71.236.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.crl
                          rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 09:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:8a:2b:c0:51:e5:4d:3d:62:31:ed:4c:54:41:8f:5d:9f:36:a9:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66D4FE79ED8A8E0D195041C335EEB1B748A12F0A
        Validity
            Not Before: Mar 17 06:30:39 2026 GMT
            Not After : Mar 16 06:35:39 2027 GMT
        Subject: CN=107A3D4A440080D6D520D53064528BE4FBAFB26E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ee:35:97:79:9b:f2:0b:6e:cd:8b:70:f9:26:
                    cb:9a:95:68:59:4b:a7:f1:53:be:0d:2b:b7:b2:c5:
                    72:ee:bd:b0:c7:81:30:5f:21:2c:57:d5:00:6c:c4:
                    5e:1b:10:e7:d0:50:13:3e:e0:65:c1:37:c0:c7:28:
                    f4:93:06:8a:50:12:ad:3c:ef:18:24:78:a3:23:95:
                    86:7a:4a:7c:b5:9b:44:4d:c8:20:a1:ba:20:12:a5:
                    c6:42:e3:b4:4c:4e:96:9a:cc:6f:a3:06:71:45:8b:
                    85:55:e5:a1:e6:4c:a3:4a:f4:d8:b1:b9:5f:bb:67:
                    1d:f0:a9:9e:ce:b1:27:6a:55:e4:90:39:9c:74:22:
                    1d:8c:2e:87:54:21:f6:c9:3b:2c:d1:57:89:92:db:
                    4b:a1:2f:90:a9:44:8d:9f:cd:81:dd:ea:63:18:0f:
                    e2:7e:3f:68:06:6f:8f:ff:f8:7f:b2:05:03:bf:8d:
                    04:6e:78:c3:7a:cc:55:c6:ab:60:d7:37:56:84:04:
                    5c:45:ed:d1:9a:c7:32:ce:fd:c5:4c:94:ed:91:55:
                    2e:84:66:2a:94:23:43:dd:dd:d8:74:f1:47:46:4f:
                    6f:ae:c6:d4:63:f0:45:5a:87:fc:f4:62:32:96:c8:
                    80:cb:a4:24:1c:98:68:b6:ca:92:69:f8:70:d4:46:
                    8e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:7A:3D:4A:44:00:80:D6:D5:20:D5:30:64:52:8B:E4:FB:AF:B2:6E
            X509v3 Authority Key Identifier:
                keyid:66:D4:FE:79:ED:8A:8E:0D:19:50:41:C3:35:EE:B1:B7:48:A1:2F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/34352e37312e3233362e302f32322d3233203d3e20323637363235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:c8:7d:54:49:01:6e:84:81:94:de:ef:02:7d:17:0b:a5:06:
         a3:4c:51:13:06:c9:b7:80:06:f8:b2:32:8b:cc:86:4d:a9:e5:
         26:73:77:59:b7:8e:df:ef:a1:0e:ea:40:42:cd:0a:32:02:75:
         19:e0:83:b2:fa:b3:0d:c9:f5:dd:5b:7f:24:92:3a:8f:9e:7c:
         93:73:fd:21:70:3c:07:cb:26:3f:5d:ca:48:97:27:91:00:6b:
         55:2e:64:26:ad:3e:ef:89:bb:86:e9:9c:50:e4:13:e0:0e:a9:
         6c:1f:f0:fd:7b:e3:2c:d6:b8:1f:1f:28:19:14:ed:5b:53:00:
         0f:d8:8b:ec:38:b8:c4:4b:b5:93:c7:7a:2e:d4:51:91:78:af:
         22:18:81:87:06:26:d1:3c:6a:9a:f0:62:a9:92:00:8b:1e:29:
         8b:44:a3:41:42:64:3f:62:02:56:5e:d2:2b:85:f6:a5:72:5a:
         c1:db:02:84:e2:d3:53:66:ae:99:91:6f:39:61:33:a3:7b:ca:
         88:22:7b:04:06:93:47:ef:80:a6:b2:a5:b2:0b:b4:a3:d3:6d:
         66:fa:ce:cb:67:a8:c1:67:e9:31:ed:39:b1:9e:3e:c7:70:d1:
         f8:46:98:0a:03:fa:2c:61:c1:e0:64:6d:45:fc:e3:4f:e0:68:
         e4:01:58:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 14:23:24 2026 by rpki-client