Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/34352e3136362e3139312e302f32342d3234203d3e20323637393837.roa
File:                     34352e3136362e3139312e302f32342d3234203d3e20323637393837.roa (raw, json)
Hash identifier:          F83WzLfA9Qek9oG+7+QH/HqHlLFjm1k7GMpF4FfCBgk=
Subject key identifier:   E7:16:5D:40:0D:84:D6:8C:93:C7:07:BE:D8:BE:07:BE:30:D2:17:CC
Certificate issuer:       /CN=17D465F2E10B4AC050BBA11926B380E039F8FA2D
Certificate serial:       663E44D34B3E2CD7A8B6DB7667763D9AAC0DCCCC
Authority key identifier: 17:D4:65:F2:E1:0B:4A:C0:50:BB:A1:19:26:B3:80:E0:39:F8:FA:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17D465F2E10B4AC050BBA11926B380E039F8FA2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/34352e3136362e3139312e302f32342d3234203d3e20323637393837.roa
Signing time:             Tue 23 Jun 2026 19:00:26 +0000
ROA not before:           Tue 23 Jun 2026 18:55:26 +0000
ROA not after:            Tue 22 Jun 2027 19:00:26 +0000
asID:                     267987
IP address blocks:        45.166.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/17D465F2E10B4AC050BBA11926B380E039F8FA2D.crl
                          rsync://rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/17D465F2E10B4AC050BBA11926B380E039F8FA2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17D465F2E10B4AC050BBA11926B380E039F8FA2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 18:42:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:3e:44:d3:4b:3e:2c:d7:a8:b6:db:76:67:76:3d:9a:ac:0d:cc:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17D465F2E10B4AC050BBA11926B380E039F8FA2D
        Validity
            Not Before: Jun 23 18:55:26 2026 GMT
            Not After : Jun 22 19:00:26 2027 GMT
        Subject: CN=E7165D400D84D68C93C707BED8BE07BE30D217CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9a:94:47:64:dd:91:ba:a4:07:12:e3:3f:9b:
                    c4:86:20:62:a1:fc:13:cb:0a:50:49:d5:f1:b0:7a:
                    89:c8:5b:db:df:42:21:1a:65:08:8d:e8:52:92:fd:
                    6e:5c:7d:62:ba:21:06:aa:90:3b:ee:8b:b5:89:66:
                    51:d5:98:50:25:8c:8f:7a:c7:df:95:50:4f:de:0e:
                    2a:ad:88:7e:74:e4:e4:78:cd:22:8b:04:b1:0b:39:
                    cd:1b:0d:1c:2c:05:53:0d:3d:24:ce:4c:ec:67:e3:
                    6e:06:8e:05:be:b4:87:f6:c4:3e:2d:52:19:36:6c:
                    51:b4:34:67:39:8f:34:b7:70:ea:11:25:65:c1:0c:
                    1a:85:a9:e7:2c:e8:a7:07:15:47:36:48:f6:24:e8:
                    b7:d9:74:9e:47:7e:37:ea:ac:31:61:b4:20:2b:4d:
                    42:d5:4e:99:1c:77:31:d8:69:15:31:ee:82:af:24:
                    bf:6f:1b:02:34:5b:f3:4f:59:90:6f:79:93:36:ff:
                    75:3d:c6:62:9d:02:46:74:0a:c1:82:24:aa:49:61:
                    6a:ad:4a:dc:b3:44:7f:b3:27:95:56:56:8e:90:de:
                    56:65:f8:a2:19:55:ab:6a:7b:39:f6:90:6a:22:92:
                    43:70:a3:b6:22:39:d8:73:ff:14:09:cc:63:99:12:
                    4d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:16:5D:40:0D:84:D6:8C:93:C7:07:BE:D8:BE:07:BE:30:D2:17:CC
            X509v3 Authority Key Identifier:
                keyid:17:D4:65:F2:E1:0B:4A:C0:50:BB:A1:19:26:B3:80:E0:39:F8:FA:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/17D465F2E10B4AC050BBA11926B380E039F8FA2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17D465F2E10B4AC050BBA11926B380E039F8FA2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/34352e3136362e3139312e302f32342d3234203d3e20323637393837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:28:c5:cb:1c:2e:8b:67:8b:14:a3:85:29:30:22:4a:63:6d:
         d2:df:3b:80:42:e9:85:b6:a7:97:24:87:39:5c:ea:3e:3c:69:
         6e:dc:0e:bb:44:2e:39:5a:4c:c1:56:0d:b0:75:c7:b2:8a:e5:
         49:ec:3f:c5:64:9d:23:f1:87:73:f2:19:61:b6:6f:d5:1e:7c:
         b9:4a:01:19:4d:10:37:71:2f:a0:52:3a:23:63:c6:4e:4d:94:
         79:b8:68:3c:6f:fc:4a:cf:87:17:26:1b:03:94:78:ef:fc:ac:
         6c:4d:2f:cf:33:a0:11:b7:2d:2d:85:94:b2:44:e7:89:30:87:
         d7:44:8c:15:3f:9a:2a:3a:fd:f3:78:e2:38:9a:b0:84:21:f6:
         bb:4e:fb:58:fe:96:2d:34:bb:75:78:c6:af:41:0e:62:4a:63:
         04:ba:52:67:08:db:77:86:d7:03:ae:0c:9c:8d:ed:d6:76:a0:
         a7:82:98:4e:65:9a:a1:db:6d:ca:7c:ec:f2:41:65:0f:09:4d:
         0b:8d:4e:e2:e9:f9:2f:34:4b:d3:8e:0a:e1:dd:a1:5d:2e:cf:
         d2:47:c7:31:d9:19:a9:51:a6:73:30:40:9f:36:16:9a:03:be:
         ef:f2:3b:34:a1:f1:9a:07:f1:e0:44:c9:ea:8b:ef:45:8b:e6:
         cd:ed:24:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:59:17 2026 by rpki-client