Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/34352e3136392e3131302e302f32332d3233203d3e20323638313036.roa
File:                     34352e3136392e3131302e302f32332d3233203d3e20323638313036.roa (raw, json)
Hash identifier:          QFQpas3TvcOjhi70uury0gbjZ51I+uDh0oLlSjC/YsY=
Subject key identifier:   1F:9D:EA:AB:C6:2F:A4:12:61:39:1B:0A:4D:A3:D5:F8:B9:CD:5C:7B
Certificate issuer:       /CN=614F55B896D05F51FBF66A43C86D750B52415663
Certificate serial:       0E296E66494BDC080D65474363CAB9D4C137032D
Authority key identifier: 61:4F:55:B8:96:D0:5F:51:FB:F6:6A:43:C8:6D:75:0B:52:41:56:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/614F55B896D05F51FBF66A43C86D750B52415663.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/34352e3136392e3131302e302f32332d3233203d3e20323638313036.roa
Signing time:             Thu 02 Jul 2026 16:10:16 +0000
ROA not before:           Thu 02 Jul 2026 16:05:16 +0000
ROA not after:            Thu 01 Jul 2027 16:10:16 +0000
asID:                     268106
IP address blocks:        45.169.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/614F55B896D05F51FBF66A43C86D750B52415663.crl
                          rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/614F55B896D05F51FBF66A43C86D750B52415663.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/614F55B896D05F51FBF66A43C86D750B52415663.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 04:24:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:29:6e:66:49:4b:dc:08:0d:65:47:43:63:ca:b9:d4:c1:37:03:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614F55B896D05F51FBF66A43C86D750B52415663
        Validity
            Not Before: Jul  2 16:05:16 2026 GMT
            Not After : Jul  1 16:10:16 2027 GMT
        Subject: CN=1F9DEAABC62FA41261391B0A4DA3D5F8B9CD5C7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:64:2d:3a:26:af:c7:3c:1e:8b:24:64:2a:8f:
                    3b:84:37:47:db:e9:ef:bd:54:12:9a:df:43:98:ea:
                    4f:ac:e8:e5:94:0c:3c:c3:38:c3:92:6c:5e:b4:a0:
                    62:22:d4:f5:8c:dd:07:b5:46:ad:1e:eb:52:c2:f9:
                    97:c3:eb:82:79:c3:b4:5e:08:6b:13:df:16:9b:44:
                    20:6f:38:a9:c5:4d:fc:a7:13:1d:9d:60:c1:01:95:
                    51:46:e3:ad:b2:b8:d8:be:b3:63:82:e3:d4:4c:3c:
                    5e:18:59:51:0c:c2:58:c0:91:aa:d5:a4:17:f1:a6:
                    74:26:da:20:e1:73:3d:31:34:7e:1a:5c:d6:6f:00:
                    98:a3:15:a5:25:ba:22:d9:9e:ce:af:12:a2:17:30:
                    74:2a:6a:07:63:cf:87:3f:0d:f1:b3:84:86:ac:a7:
                    09:c0:29:2f:1c:6e:f9:f9:f0:7c:84:d7:88:f7:6d:
                    53:a9:0e:f5:2e:06:6d:38:54:a6:3a:b9:4d:f5:28:
                    b6:0c:9a:46:7d:a6:7b:68:6e:dd:41:8f:25:8a:cd:
                    db:b2:d1:0f:2f:2a:b7:e9:ce:53:f7:6b:bb:8c:e8:
                    41:50:0a:b2:9e:94:a1:64:27:a8:24:c9:c7:72:ac:
                    a2:00:25:ea:10:eb:9f:9c:74:9c:27:b1:36:dd:ed:
                    70:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:9D:EA:AB:C6:2F:A4:12:61:39:1B:0A:4D:A3:D5:F8:B9:CD:5C:7B
            X509v3 Authority Key Identifier:
                keyid:61:4F:55:B8:96:D0:5F:51:FB:F6:6A:43:C8:6D:75:0B:52:41:56:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/614F55B896D05F51FBF66A43C86D750B52415663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/614F55B896D05F51FBF66A43C86D750B52415663.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/34352e3136392e3131302e302f32332d3233203d3e20323638313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:65:ad:e6:e8:8b:8d:41:8b:93:1f:11:fe:6e:95:d0:73:8c:
         f7:f6:b9:e0:2b:22:6b:d2:5f:51:42:33:56:54:26:00:a5:f7:
         a8:46:3f:be:83:1d:04:bf:d8:5c:a5:7d:c0:10:d6:03:5a:03:
         db:32:81:dd:c7:09:a6:7f:47:83:f8:55:e5:92:c4:2f:5d:32:
         ba:8a:a0:fb:f4:42:3a:a4:70:85:ab:b9:1a:ec:93:28:b7:45:
         94:43:e2:42:f7:3f:a0:f2:b1:86:40:52:ed:39:af:4c:7b:78:
         67:3b:43:64:46:46:c8:b5:72:d3:0d:9b:b5:93:10:7a:67:a4:
         ff:b3:52:9a:a5:c7:b1:f8:17:60:d5:db:32:6d:13:11:4a:6c:
         1f:1e:62:90:83:91:1b:75:72:88:18:af:83:e4:d6:34:f6:3c:
         54:b2:f8:95:5f:92:3b:20:dc:55:1c:93:5d:49:7a:43:e4:62:
         8a:38:c2:ad:dd:f7:4d:9c:fd:98:f8:e5:bc:5a:e1:51:a3:79:
         58:39:e1:4b:6a:8a:18:68:7a:d1:66:ba:e8:04:8a:fa:96:83:
         b0:23:59:f8:8f:59:9f:a2:52:21:66:17:28:03:76:6f:30:c6:
         17:5f:96:86:fc:75:2a:cc:af:bd:17:9a:e9:d3:ec:f6:41:e2:
         ce:9c:7e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:59:15 2026 by rpki-client