Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSBBkuDdvZ8xEUHcaa4bfR6SXqNSjxBRiNcZYsWQFHxy/0/34352e3136362e36392e302f32342d3234203d3e20323637393533.roa
File:                     34352e3136362e36392e302f32342d3234203d3e20323637393533.roa (raw, json)
Hash identifier:          8CSPyGyW/qxbnCbqnUHIpLSj38eEWyqmGemc/OL3K98=
Subject key identifier:   75:E4:EA:F3:71:68:46:2B:C5:E0:DA:20:E2:F9:4D:99:B5:CC:C8:E7
Certificate issuer:       /CN=8C3CF48C6EF2802E55ED0B0F89D3CA5720D72BE0
Certificate serial:       02F9174BB6B48DBA97C36B3286FF85C006646C9D
Authority key identifier: 8C:3C:F4:8C:6E:F2:80:2E:55:ED:0B:0F:89:D3:CA:57:20:D7:2B:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C3CF48C6EF2802E55ED0B0F89D3CA5720D72BE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSBBkuDdvZ8xEUHcaa4bfR6SXqNSjxBRiNcZYsWQFHxy/0/34352e3136362e36392e302f32342d3234203d3e20323637393533.roa
Signing time:             Wed 13 May 2026 14:25:19 +0000
ROA not before:           Wed 13 May 2026 14:20:19 +0000
ROA not after:            Wed 12 May 2027 14:25:19 +0000
asID:                     267953
IP address blocks:        45.166.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BSBBkuDdvZ8xEUHcaa4bfR6SXqNSjxBRiNcZYsWQFHxy/0/8C3CF48C6EF2802E55ED0B0F89D3CA5720D72BE0.crl
                          rsync://rpki-repo.registro.br/repo/BSBBkuDdvZ8xEUHcaa4bfR6SXqNSjxBRiNcZYsWQFHxy/0/8C3CF48C6EF2802E55ED0B0F89D3CA5720D72BE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C3CF48C6EF2802E55ED0B0F89D3CA5720D72BE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jun 2026 18:49:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f9:17:4b:b6:b4:8d:ba:97:c3:6b:32:86:ff:85:c0:06:64:6c:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C3CF48C6EF2802E55ED0B0F89D3CA5720D72BE0
        Validity
            Not Before: May 13 14:20:19 2026 GMT
            Not After : May 12 14:25:19 2027 GMT
        Subject: CN=75E4EAF37168462BC5E0DA20E2F94D99B5CCC8E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:54:9d:9e:be:22:91:a4:85:ee:14:fd:02:96:
                    22:bd:eb:0e:5d:b6:25:64:e7:84:d1:d2:d6:d4:41:
                    0a:ea:56:a9:11:91:5e:c5:90:5e:d0:34:d6:ce:2d:
                    53:de:85:a4:2f:93:d5:06:bc:f2:3d:a5:62:06:39:
                    ee:e3:90:c1:11:9b:e2:b9:cf:6f:26:33:f6:a1:11:
                    ab:dc:3f:e1:fb:82:c1:04:94:0f:64:c2:3c:1a:90:
                    23:c1:00:b0:17:1e:ad:86:e0:fc:fe:15:73:de:e3:
                    0e:ff:77:c2:bd:82:09:9f:34:ad:80:a2:31:4c:f9:
                    50:48:ff:5c:46:c2:cd:93:7b:c8:37:fa:cc:07:bc:
                    2f:7c:ad:d5:3a:1b:23:85:f9:6b:09:b7:8e:69:c4:
                    07:d9:c6:58:31:17:6c:64:43:1f:ea:2f:48:56:c5:
                    ca:ce:80:96:b5:83:1b:b5:cd:14:cc:33:20:3d:e1:
                    f0:ec:73:38:54:1e:9a:c8:bc:3e:16:d9:8c:59:05:
                    d6:e3:07:08:c8:0f:0e:b4:88:af:1c:9b:7a:5e:d2:
                    01:02:71:b6:37:2d:b5:be:ae:37:d8:3c:b8:be:b0:
                    85:93:01:87:d4:dc:00:b5:d4:6e:7b:87:b2:d4:05:
                    6b:75:ea:7f:84:e3:64:96:03:77:70:40:e0:62:6a:
                    1f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E4:EA:F3:71:68:46:2B:C5:E0:DA:20:E2:F9:4D:99:B5:CC:C8:E7
            X509v3 Authority Key Identifier:
                keyid:8C:3C:F4:8C:6E:F2:80:2E:55:ED:0B:0F:89:D3:CA:57:20:D7:2B:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSBBkuDdvZ8xEUHcaa4bfR6SXqNSjxBRiNcZYsWQFHxy/0/8C3CF48C6EF2802E55ED0B0F89D3CA5720D72BE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C3CF48C6EF2802E55ED0B0F89D3CA5720D72BE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSBBkuDdvZ8xEUHcaa4bfR6SXqNSjxBRiNcZYsWQFHxy/0/34352e3136362e36392e302f32342d3234203d3e20323637393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:d1:ad:5f:86:ff:5f:71:4a:c2:0c:52:b6:4f:fa:bb:8d:b4:
         9c:3e:7f:61:ec:ea:3d:6f:98:e6:7d:c8:8b:d3:0c:fc:a9:7f:
         73:bd:28:df:d1:fd:5d:70:25:ab:4b:10:f2:1e:a6:7d:b9:c0:
         f3:d8:52:f7:43:38:20:6c:43:fc:d2:1a:fe:26:26:67:1b:e0:
         e1:38:fc:c5:27:36:eb:32:dd:5f:53:bf:e5:79:f6:b3:b6:42:
         36:11:3a:0f:cb:1f:9b:29:ca:27:1f:f4:93:f9:0e:83:78:f0:
         67:af:63:d8:3c:c0:23:0c:54:32:0a:a9:27:e4:3c:35:69:a8:
         f0:f5:d4:6a:73:82:23:6a:fe:9b:1a:26:e4:2d:5a:41:d2:44:
         02:e9:93:e0:85:72:69:51:ca:a7:e0:77:34:2d:6a:f6:58:a6:
         f2:72:36:06:87:8c:fd:70:5e:34:1e:3c:65:ef:50:48:bd:88:
         c5:78:74:b7:d4:91:dd:dd:16:c5:29:ea:25:e0:0e:4b:1b:cc:
         16:35:4b:2a:b1:20:f6:e4:74:be:fb:33:c7:ad:67:b3:27:64:
         19:e3:a0:f6:f9:32:86:a3:c5:03:57:e0:a3:41:aa:ab:cc:39:
         49:4a:18:67:ed:ca:3e:19:74:c7:80:15:e7:d8:3a:f0:f8:92:
         ec:68:6e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 06:28:38 2026 by rpki-client