Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EapKRF7pu8vofpVWMm2c9Xkuv3Cp221TMNKVEDKLyDXK/0/34352e3136382e3137362e302f32322d3232203d3e20323638303738.roa
File:                     34352e3136382e3137362e302f32322d3232203d3e20323638303738.roa (raw, json)
Hash identifier:          aycjmtyzGcXXfbvx5koxWSiNG6uqLnaXM+myrBwIu14=
Subject key identifier:   D1:29:2C:DD:C1:F1:3F:B8:9B:CE:8A:99:69:C4:A4:EF:60:91:E3:53
Certificate issuer:       /CN=A6B1E910AAB26349C803DB8D43F18023582E7DD4
Certificate serial:       5E9072DAA780064EA54A427A6FA1ADE9EF80EB57
Authority key identifier: A6:B1:E9:10:AA:B2:63:49:C8:03:DB:8D:43:F1:80:23:58:2E:7D:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6B1E910AAB26349C803DB8D43F18023582E7DD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EapKRF7pu8vofpVWMm2c9Xkuv3Cp221TMNKVEDKLyDXK/0/34352e3136382e3137362e302f32322d3232203d3e20323638303738.roa
Signing time:             Mon 15 Jun 2026 17:22:05 +0000
ROA not before:           Mon 15 Jun 2026 17:17:05 +0000
ROA not after:            Mon 14 Jun 2027 17:22:05 +0000
asID:                     268078
IP address blocks:        45.168.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EapKRF7pu8vofpVWMm2c9Xkuv3Cp221TMNKVEDKLyDXK/0/A6B1E910AAB26349C803DB8D43F18023582E7DD4.crl
                          rsync://rpki-repo.registro.br/repo/EapKRF7pu8vofpVWMm2c9Xkuv3Cp221TMNKVEDKLyDXK/0/A6B1E910AAB26349C803DB8D43F18023582E7DD4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6B1E910AAB26349C803DB8D43F18023582E7DD4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 02:13:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:90:72:da:a7:80:06:4e:a5:4a:42:7a:6f:a1:ad:e9:ef:80:eb:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6B1E910AAB26349C803DB8D43F18023582E7DD4
        Validity
            Not Before: Jun 15 17:17:05 2026 GMT
            Not After : Jun 14 17:22:05 2027 GMT
        Subject: CN=D1292CDDC1F13FB89BCE8A9969C4A4EF6091E353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:da:93:58:56:e3:f6:8d:ba:9d:af:b6:41:51:
                    7e:38:d1:56:6d:7a:a2:08:41:d5:ae:4a:5a:99:a4:
                    c5:4e:39:3b:61:44:15:99:14:46:1d:f8:61:5a:37:
                    3d:43:0d:28:f5:2b:93:35:a6:02:f5:5e:1e:ac:41:
                    82:45:24:9e:bd:fc:14:21:d2:a5:3f:8e:ad:1a:66:
                    28:90:96:07:bb:b5:54:1a:e2:2d:6e:f0:07:87:06:
                    2d:fb:13:04:11:5f:39:75:48:59:a6:a8:ac:87:8a:
                    d6:67:05:1b:ab:86:4f:07:87:3b:94:cd:f2:ea:b5:
                    73:1a:ae:fd:ac:49:28:d6:37:ca:51:4b:2b:94:8c:
                    06:83:81:29:72:2a:22:bb:46:df:28:3f:63:89:92:
                    9c:c6:71:bc:87:c8:4f:16:4a:e8:aa:fe:58:d1:07:
                    ff:53:d2:13:c5:c8:08:09:df:9b:de:8f:c6:c3:1b:
                    0b:52:a4:58:19:01:4a:a2:ac:76:7e:1e:2d:ac:10:
                    94:1d:9a:2c:89:0e:63:ff:74:09:36:24:ad:7a:1d:
                    e4:cc:6e:f5:f2:14:90:27:32:94:12:2b:8c:1c:b7:
                    aa:60:8e:5c:0a:da:88:57:2e:8f:ce:97:ad:cc:e6:
                    6c:d3:08:92:06:36:b9:d3:0b:8b:bb:ab:11:84:2f:
                    ff:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:29:2C:DD:C1:F1:3F:B8:9B:CE:8A:99:69:C4:A4:EF:60:91:E3:53
            X509v3 Authority Key Identifier:
                keyid:A6:B1:E9:10:AA:B2:63:49:C8:03:DB:8D:43:F1:80:23:58:2E:7D:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EapKRF7pu8vofpVWMm2c9Xkuv3Cp221TMNKVEDKLyDXK/0/A6B1E910AAB26349C803DB8D43F18023582E7DD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6B1E910AAB26349C803DB8D43F18023582E7DD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EapKRF7pu8vofpVWMm2c9Xkuv3Cp221TMNKVEDKLyDXK/0/34352e3136382e3137362e302f32322d3232203d3e20323638303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:cf:24:70:5d:0c:7b:a0:a5:10:56:21:d3:8e:c2:98:d5:df:
         a9:56:89:94:2f:8e:7e:c5:be:b5:9b:40:d6:73:ec:93:5c:65:
         5f:9c:63:59:ac:59:f7:90:cf:f0:3f:21:a1:b7:98:69:f6:66:
         70:76:3b:b5:50:c2:ec:bb:b7:36:8b:62:42:5a:66:6b:54:d3:
         7f:69:a0:c1:43:9c:e8:2b:53:fb:14:ae:f6:57:6c:13:a9:43:
         7c:70:6c:5b:fd:2a:aa:40:77:eb:4b:c1:d2:82:ea:15:40:aa:
         54:54:03:6b:36:2e:4b:36:2d:f7:1c:8b:66:e1:8c:e9:d0:5c:
         ab:29:19:89:dc:4b:19:c3:0d:75:f7:64:e6:e4:6f:c3:d6:f6:
         a9:73:78:77:8b:66:3d:79:8a:20:c1:04:02:99:91:ee:64:6c:
         57:63:9c:bf:1f:95:fd:1d:86:e4:d3:dc:9e:ff:5d:4b:1b:2c:
         8f:43:b9:df:08:25:f2:55:4c:23:bd:3b:fe:ff:a1:81:c3:73:
         2d:2a:ac:d4:da:0e:ac:7d:9a:ac:ed:a1:62:0d:42:6d:34:6a:
         95:f0:1b:2b:02:33:81:3f:54:69:c5:40:5d:99:d1:d6:8c:c7:
         17:44:26:88:d5:63:39:d5:2b:1b:15:cd:e7:22:bf:af:7f:e5:
         43:87:29:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 14:07:51 2026 by rpki-client