Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/34352e3136392e3131302e302f32342d3234203d3e20323638313036.roa
File:                     34352e3136392e3131302e302f32342d3234203d3e20323638313036.roa (raw, json)
Hash identifier:          Yeiryfif+uKToR7uG7OSjvQ2ji3DJDZ5Z2auADjB5Ws=
Subject key identifier:   DF:31:94:E7:EB:EA:B5:6F:A9:48:AD:73:FC:DF:DC:10:0C:D6:6F:B8
Certificate issuer:       /CN=614F55B896D05F51FBF66A43C86D750B52415663
Certificate serial:       0D9F84C7AB2F385B5EA6220CE0D156DED0D3106B
Authority key identifier: 61:4F:55:B8:96:D0:5F:51:FB:F6:6A:43:C8:6D:75:0B:52:41:56:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/614F55B896D05F51FBF66A43C86D750B52415663.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/34352e3136392e3131302e302f32342d3234203d3e20323638313036.roa
Signing time:             Thu 02 Jul 2026 16:10:15 +0000
ROA not before:           Thu 02 Jul 2026 16:05:15 +0000
ROA not after:            Thu 01 Jul 2027 16:10:15 +0000
asID:                     268106
IP address blocks:        45.169.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/614F55B896D05F51FBF66A43C86D750B52415663.crl
                          rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/614F55B896D05F51FBF66A43C86D750B52415663.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/614F55B896D05F51FBF66A43C86D750B52415663.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 04:24:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:9f:84:c7:ab:2f:38:5b:5e:a6:22:0c:e0:d1:56:de:d0:d3:10:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614F55B896D05F51FBF66A43C86D750B52415663
        Validity
            Not Before: Jul  2 16:05:15 2026 GMT
            Not After : Jul  1 16:10:15 2027 GMT
        Subject: CN=DF3194E7EBEAB56FA948AD73FCDFDC100CD66FB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a3:13:bc:4c:da:9d:d0:b2:92:c1:09:db:50:
                    1b:32:98:ad:8b:28:45:17:df:b8:80:1e:63:d3:2e:
                    c5:6b:94:a0:2b:c8:2f:fc:09:58:12:03:67:2f:93:
                    79:79:1b:a5:a8:b5:22:4e:b1:69:44:ea:a9:9d:63:
                    3e:58:15:80:1c:fe:66:07:39:0e:db:46:8a:99:1c:
                    c1:3b:21:06:ab:eb:85:ad:73:6c:f9:98:d9:7e:69:
                    03:29:10:5c:ea:fb:2c:11:89:8d:de:8e:0d:10:22:
                    59:bc:21:a7:ac:f0:bd:05:2d:e2:55:92:96:d7:98:
                    b4:9a:82:fa:e2:36:fd:d9:ab:dc:c7:6a:80:4f:e8:
                    10:59:2f:20:0a:2e:f2:30:ef:fd:73:27:a5:9a:59:
                    46:d8:c8:47:de:c9:ad:53:4f:bb:6a:65:b5:5e:09:
                    8c:cb:10:ac:4f:f4:b4:b2:af:5e:15:d1:a4:48:cb:
                    85:37:cf:44:ec:42:ea:a7:d1:07:e6:74:2c:6c:56:
                    ab:71:1e:75:3c:73:a2:b4:fb:30:53:99:4a:8c:f1:
                    f2:79:b9:63:f1:ae:69:e3:78:9b:ef:60:30:b8:63:
                    3a:f0:d3:20:2d:74:5b:55:a8:40:ac:57:43:09:90:
                    57:95:e7:f9:5a:c6:63:c9:63:8e:37:9f:6b:3d:08:
                    1f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:31:94:E7:EB:EA:B5:6F:A9:48:AD:73:FC:DF:DC:10:0C:D6:6F:B8
            X509v3 Authority Key Identifier:
                keyid:61:4F:55:B8:96:D0:5F:51:FB:F6:6A:43:C8:6D:75:0B:52:41:56:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/614F55B896D05F51FBF66A43C86D750B52415663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/614F55B896D05F51FBF66A43C86D750B52415663.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/34352e3136392e3131302e302f32342d3234203d3e20323638313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:cb:d2:54:e0:db:88:aa:da:e1:ef:c8:0f:64:2f:9c:00:27:
         19:0d:db:42:6a:f1:c8:e5:90:f9:aa:d1:56:7d:7a:bb:be:b3:
         55:38:39:47:95:8a:d1:d0:5d:78:8c:15:a1:ad:98:01:1f:2a:
         97:11:5c:b1:b9:c1:5a:33:a2:5c:55:eb:ff:4a:e4:f7:58:5a:
         86:bd:b4:e4:9a:da:ed:80:a9:1b:80:55:c1:08:17:0f:e4:17:
         48:8e:19:35:ac:c5:e5:5d:30:d6:15:fe:b7:b5:c3:f9:58:eb:
         7a:9e:a2:12:fd:98:71:8f:c0:71:56:eb:f2:98:35:7c:7f:d9:
         ae:27:78:2f:ff:c3:3d:2b:74:cd:00:1f:15:72:6d:75:a0:e1:
         8e:1b:c3:27:f4:01:85:20:92:e6:62:64:b6:66:59:72:84:ac:
         7b:31:f6:f7:72:03:ce:64:8e:05:6c:78:7a:cc:5e:5a:f7:71:
         dd:a0:88:9f:87:0e:16:24:69:23:40:56:77:a5:08:86:2e:25:
         94:79:a2:0c:d5:51:93:01:82:ac:95:6d:8a:8f:e4:97:45:e9:
         33:cf:66:9d:4a:26:cc:06:d9:a2:b7:c7:ce:39:2e:38:14:7a:
         df:1a:da:0d:fb:f7:57:87:85:98:76:5a:b8:bc:dc:14:3d:79:
         6f:8f:7a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:55:06 2026 by rpki-client