Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/34352e3136362e3138382e302f32322d3232203d3e20323637393837.roa
File:                     34352e3136362e3138382e302f32322d3232203d3e20323637393837.roa (raw, json)
Hash identifier:          TVIMofMRk693g+wRw4QGYj5cGoxsZUThxaZBWxAVc2M=
Subject key identifier:   8C:65:45:6D:A5:2F:E2:CA:B3:27:20:94:2D:79:B7:4E:EB:D4:78:85
Certificate issuer:       /CN=17D465F2E10B4AC050BBA11926B380E039F8FA2D
Certificate serial:       66F034A67C3D00BCA1942D6DB7B1F2240BEB8E9D
Authority key identifier: 17:D4:65:F2:E1:0B:4A:C0:50:BB:A1:19:26:B3:80:E0:39:F8:FA:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17D465F2E10B4AC050BBA11926B380E039F8FA2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/34352e3136362e3138382e302f32322d3232203d3e20323637393837.roa
Signing time:             Tue 23 Jun 2026 19:00:26 +0000
ROA not before:           Tue 23 Jun 2026 18:55:26 +0000
ROA not after:            Tue 22 Jun 2027 19:00:26 +0000
asID:                     267987
IP address blocks:        45.166.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/17D465F2E10B4AC050BBA11926B380E039F8FA2D.crl
                          rsync://rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/17D465F2E10B4AC050BBA11926B380E039F8FA2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17D465F2E10B4AC050BBA11926B380E039F8FA2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 18:42:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f0:34:a6:7c:3d:00:bc:a1:94:2d:6d:b7:b1:f2:24:0b:eb:8e:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17D465F2E10B4AC050BBA11926B380E039F8FA2D
        Validity
            Not Before: Jun 23 18:55:26 2026 GMT
            Not After : Jun 22 19:00:26 2027 GMT
        Subject: CN=8C65456DA52FE2CAB32720942D79B74EEBD47885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:31:a5:4e:f2:aa:70:d8:b4:e8:bc:bc:18:c0:
                    5d:ee:6b:d8:35:c1:59:cc:10:e0:3c:c7:a7:2e:f1:
                    93:a3:ff:78:f2:0b:66:d4:52:61:18:a4:e9:ab:2f:
                    64:8a:07:87:e2:ad:b7:51:5b:cd:19:7b:3c:4b:94:
                    a9:1d:22:ba:f9:0b:4a:22:68:e0:fd:00:e5:46:51:
                    49:df:ed:5f:4f:c9:51:a6:b5:d0:4a:32:b2:28:1d:
                    b7:15:5a:bc:81:c1:dc:71:14:b9:c8:c3:1e:fa:3a:
                    d4:99:40:5c:f6:18:3f:68:3d:d3:3f:71:d2:b0:56:
                    c3:08:43:6f:ae:6e:4f:59:3b:c7:4b:ae:19:97:26:
                    3a:48:92:d3:9d:54:1c:cd:44:98:bd:37:5c:4c:a5:
                    1a:ed:67:ff:d8:60:74:9f:66:73:4d:74:86:25:d4:
                    42:3f:93:53:09:71:12:db:af:90:dd:02:a3:70:1b:
                    47:45:fc:36:75:1c:17:4e:1d:ea:41:a7:24:71:24:
                    20:47:75:0e:77:5a:43:51:b0:c0:2d:cb:64:e4:65:
                    69:db:52:7c:fb:7c:80:8b:9d:3d:6b:39:8e:9c:c3:
                    b2:56:ba:2b:ce:5f:c7:10:8c:5e:83:37:27:15:1c:
                    b0:b0:63:02:af:0d:3e:95:29:35:2a:fc:c7:46:da:
                    23:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:65:45:6D:A5:2F:E2:CA:B3:27:20:94:2D:79:B7:4E:EB:D4:78:85
            X509v3 Authority Key Identifier:
                keyid:17:D4:65:F2:E1:0B:4A:C0:50:BB:A1:19:26:B3:80:E0:39:F8:FA:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/17D465F2E10B4AC050BBA11926B380E039F8FA2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17D465F2E10B4AC050BBA11926B380E039F8FA2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/34352e3136362e3138382e302f32322d3232203d3e20323637393837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:a6:b7:b6:c4:c7:90:70:b1:c3:ae:cf:3f:3f:bd:0f:d0:16:
         cb:47:cc:c7:a6:4e:ad:bd:60:46:5b:d8:3c:36:32:ea:38:70:
         8b:24:95:ce:60:04:32:4f:6e:6d:4b:72:27:d8:be:7b:28:c4:
         74:0c:6b:bf:73:fd:3d:89:70:5f:3b:94:2c:b8:78:6c:a3:16:
         70:b0:f8:df:a5:f6:e4:7f:fd:1e:63:b2:2a:c1:e7:da:15:dd:
         66:47:6e:df:83:10:41:23:fc:ed:5d:54:5e:e8:53:7f:5c:c0:
         15:bb:b9:1f:54:e8:cc:b0:35:51:ac:4e:3b:ef:17:3f:a5:56:
         75:dd:30:0f:7e:4a:43:2a:94:3e:a1:65:e7:b8:75:7c:5a:d3:
         cb:38:e0:57:de:27:a8:ef:6d:36:8a:1d:32:de:0c:bf:f7:23:
         a9:9c:e0:99:66:71:d6:96:30:49:76:06:d8:f0:44:65:b9:d5:
         c8:ac:73:b5:25:17:b5:65:77:3f:29:6b:fa:f9:a5:c8:e3:db:
         10:5c:ae:a7:1b:d8:3b:3f:04:62:ff:47:d9:bc:04:1b:b9:31:
         76:61:3a:ac:34:27:2f:79:c1:68:d3:04:d0:54:c4:50:88:29:
         a6:ab:ee:7b:2d:23:58:4c:d0:a1:30:9e:fc:b4:da:28:9b:7d:
         88:55:c0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:59:08 2026 by rpki-client