Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/34352e3136372e32382e302f32322d3234203d3e20323637393832.roa
File:                     34352e3136372e32382e302f32322d3234203d3e20323637393832.roa (raw, json)
Hash identifier:          8/VmCFkP7rVtzUqkRvtGVgstGF/aytsFpQFdq0/6DbU=
Subject key identifier:   81:7B:4F:CD:D6:3E:5A:6D:31:87:33:93:F1:7D:3C:E6:23:94:95:37
Certificate issuer:       /CN=296992941BF10D571CBDC8A16F88FF51FAD9B52C
Certificate serial:       162AE8FED4DF0C3D3B636917AE4A6F0951B2CE9F
Authority key identifier: 29:69:92:94:1B:F1:0D:57:1C:BD:C8:A1:6F:88:FF:51:FA:D9:B5:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296992941BF10D571CBDC8A16F88FF51FAD9B52C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/34352e3136372e32382e302f32322d3234203d3e20323637393832.roa
Signing time:             Fri 31 Jul 2026 12:10:44 +0000
ROA not before:           Fri 31 Jul 2026 12:05:44 +0000
ROA not after:            Fri 30 Jul 2027 12:10:44 +0000
asID:                     267982
IP address blocks:        45.167.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.crl
                          rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296992941BF10D571CBDC8A16F88FF51FAD9B52C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 06:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:2a:e8:fe:d4:df:0c:3d:3b:63:69:17:ae:4a:6f:09:51:b2:ce:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296992941BF10D571CBDC8A16F88FF51FAD9B52C
        Validity
            Not Before: Jul 31 12:05:44 2026 GMT
            Not After : Jul 30 12:10:44 2027 GMT
        Subject: CN=817B4FCDD63E5A6D31873393F17D3CE623949537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:30:ef:c4:25:6e:63:6a:7b:6d:2d:26:ba:1b:
                    af:7b:58:73:a7:54:2b:d3:6f:9a:d0:88:00:c2:b9:
                    24:f4:b8:8b:06:5d:dc:8f:4c:2a:6f:20:b2:22:7c:
                    72:64:22:f8:7b:53:0e:85:1b:3e:c5:5b:68:d2:0e:
                    ac:e9:bb:cf:ae:bc:18:51:78:5d:d5:38:a8:9c:9f:
                    34:80:7c:b9:9c:26:33:f4:42:5b:af:88:6c:db:cd:
                    96:30:d7:b2:41:5b:7b:e1:5b:1e:7d:09:78:b7:80:
                    ff:53:58:b1:14:68:4f:6d:2d:e2:55:34:61:0a:64:
                    ad:30:0e:a3:f6:a6:ff:57:f3:ec:6d:b9:57:7e:34:
                    6b:34:f6:61:72:38:c1:cd:ec:2e:f5:58:68:0e:bb:
                    c5:16:6b:09:9f:24:3f:a8:92:d8:77:b9:e9:e2:a3:
                    95:6a:c9:4b:05:03:1b:09:69:88:28:19:e7:7d:ac:
                    c5:21:8f:82:47:9f:2c:01:c5:f9:db:61:51:c2:a3:
                    7d:67:42:89:58:26:43:ed:d9:cf:f5:fa:f2:62:b7:
                    14:36:8c:5f:24:d6:f6:78:35:b4:3b:c6:b6:6c:2b:
                    4d:30:f5:8b:2c:7a:9e:26:29:23:9b:56:74:b6:6d:
                    46:f3:8e:2d:9f:14:9b:cd:9a:10:b8:86:45:e3:2a:
                    f0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:7B:4F:CD:D6:3E:5A:6D:31:87:33:93:F1:7D:3C:E6:23:94:95:37
            X509v3 Authority Key Identifier:
                keyid:29:69:92:94:1B:F1:0D:57:1C:BD:C8:A1:6F:88:FF:51:FA:D9:B5:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296992941BF10D571CBDC8A16F88FF51FAD9B52C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/34352e3136372e32382e302f32322d3234203d3e20323637393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:36:3a:85:5b:29:1f:1f:00:a6:fb:2a:d0:07:09:91:aa:68:
         6b:90:68:b1:0f:ab:e0:fb:eb:86:53:3b:dd:7f:ef:a8:11:cd:
         07:7a:39:f5:a5:b7:b7:2f:e4:3f:1b:3c:68:4e:59:94:3c:f5:
         09:a6:8b:40:31:43:15:4d:f4:ce:6a:ae:37:6f:0a:82:da:2c:
         92:09:28:0b:42:fc:7a:d1:fb:60:a7:bb:7f:32:a6:f0:12:e2:
         f7:6c:66:a7:c9:9c:97:a9:a1:28:05:47:04:87:c9:33:c3:00:
         06:6c:c0:e8:b8:c9:65:dc:3c:eb:4e:c1:ba:54:45:dc:8b:82:
         ce:16:d6:e1:73:ae:f0:5c:45:00:05:c2:8b:86:60:b4:7c:f2:
         aa:c0:a5:67:a2:b1:7f:51:ed:14:6d:40:a7:4f:b9:4c:a3:38:
         d5:53:54:c1:51:d8:b9:6d:29:c6:0c:fe:50:26:40:fd:60:80:
         01:a8:92:63:54:04:92:60:d1:0f:8f:49:26:5e:35:92:71:5a:
         f1:d0:cf:93:32:1a:a6:fb:2e:cc:6e:9e:c2:54:e5:e0:b0:5c:
         90:4c:3d:97:4f:15:e2:66:3c:18:f6:b5:4a:da:06:98:8c:4f:
         d1:6c:7a:e6:ab:44:db:8f:67:90:b1:49:1d:45:df:1a:c1:f5:
         f6:80:36:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:09:25 2026 by rpki-client