Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F1Zo4U5ddp9meFFNXNWynR2pP4ZWBDUKUcRZsQQMbYrM/0/34352e3136362e3138302e302f32322d3332203d3e20323637393836.roa
File:                     34352e3136362e3138302e302f32322d3332203d3e20323637393836.roa (raw, json)
Hash identifier:          dXEA4iwoLSuAZW75EGz45iHJXRT9hBFAocUgtSiVDCI=
Subject key identifier:   6D:F9:21:1F:12:8F:BC:61:C2:72:D5:34:84:8D:1A:C3:75:BD:F5:83
Certificate issuer:       /CN=54AC13F155FB128EE1E54BFFA49AFA8D920396B2
Certificate serial:       70CFF0CFB9BAFC4858473D6D386EC9C05AD5A987
Authority key identifier: 54:AC:13:F1:55:FB:12:8E:E1:E5:4B:FF:A4:9A:FA:8D:92:03:96:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54AC13F155FB128EE1E54BFFA49AFA8D920396B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F1Zo4U5ddp9meFFNXNWynR2pP4ZWBDUKUcRZsQQMbYrM/0/34352e3136362e3138302e302f32322d3332203d3e20323637393836.roa
Signing time:             Tue 07 Jul 2026 15:20:08 +0000
ROA not before:           Tue 07 Jul 2026 15:15:08 +0000
ROA not after:            Tue 06 Jul 2027 15:20:08 +0000
asID:                     267986
IP address blocks:        45.166.180.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F1Zo4U5ddp9meFFNXNWynR2pP4ZWBDUKUcRZsQQMbYrM/0/54AC13F155FB128EE1E54BFFA49AFA8D920396B2.crl
                          rsync://rpki-repo.registro.br/repo/F1Zo4U5ddp9meFFNXNWynR2pP4ZWBDUKUcRZsQQMbYrM/0/54AC13F155FB128EE1E54BFFA49AFA8D920396B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54AC13F155FB128EE1E54BFFA49AFA8D920396B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 10:43:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:cf:f0:cf:b9:ba:fc:48:58:47:3d:6d:38:6e:c9:c0:5a:d5:a9:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54AC13F155FB128EE1E54BFFA49AFA8D920396B2
        Validity
            Not Before: Jul  7 15:15:08 2026 GMT
            Not After : Jul  6 15:20:08 2027 GMT
        Subject: CN=6DF9211F128FBC61C272D534848D1AC375BDF583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d6:61:f4:c4:d4:75:5f:4a:91:d7:36:e9:ce:
                    31:5d:d3:6c:28:f6:69:a4:6c:27:c2:7d:bf:c1:cf:
                    45:69:73:ea:7b:0f:7a:59:be:0f:33:9c:fb:24:6a:
                    ff:ee:58:02:be:53:41:36:6b:95:bf:97:52:2e:97:
                    4b:46:a7:38:72:95:a4:a3:28:73:fb:43:86:ab:46:
                    e5:18:5f:39:72:dd:b7:69:76:2b:1b:98:1f:12:78:
                    bb:e0:0c:f8:54:95:83:19:eb:b2:e3:27:62:bb:02:
                    bd:07:d1:71:e2:2f:bb:17:47:10:6d:a2:db:19:b9:
                    20:32:e1:66:66:ef:28:c6:58:66:2d:61:df:99:1f:
                    ad:64:d6:a2:58:d1:82:ef:36:f2:f2:31:a0:e4:39:
                    2a:f7:e3:c2:d8:80:07:88:c7:3f:07:c4:09:0b:34:
                    61:22:40:0e:1f:8f:be:f4:73:38:8a:3b:cb:61:c0:
                    ca:42:07:af:b9:1b:e9:bc:9c:1f:7e:e5:59:48:f2:
                    76:0e:c9:c3:0d:8f:98:df:02:1c:d0:9d:ab:6b:f5:
                    d8:0e:2c:4b:f5:46:c0:51:f3:07:bf:f6:6c:36:ed:
                    ac:44:5e:51:16:82:3f:ae:d4:50:80:6a:b8:39:bc:
                    70:50:be:1a:ca:18:c7:d4:48:bb:22:a7:5d:13:ab:
                    c0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F9:21:1F:12:8F:BC:61:C2:72:D5:34:84:8D:1A:C3:75:BD:F5:83
            X509v3 Authority Key Identifier:
                keyid:54:AC:13:F1:55:FB:12:8E:E1:E5:4B:FF:A4:9A:FA:8D:92:03:96:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F1Zo4U5ddp9meFFNXNWynR2pP4ZWBDUKUcRZsQQMbYrM/0/54AC13F155FB128EE1E54BFFA49AFA8D920396B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54AC13F155FB128EE1E54BFFA49AFA8D920396B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F1Zo4U5ddp9meFFNXNWynR2pP4ZWBDUKUcRZsQQMbYrM/0/34352e3136362e3138302e302f32322d3332203d3e20323637393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:90:05:1e:1b:c2:3b:df:bf:74:ed:51:dc:73:5b:5d:ad:de:
         85:11:b4:3c:02:cf:67:ba:33:d4:d5:33:10:a9:c8:ef:1b:56:
         49:e4:43:bb:a2:35:79:bc:ce:fa:72:d8:60:5a:2a:a0:4b:19:
         3e:ac:4f:83:f7:00:81:84:49:2a:f3:2d:6b:4b:30:f7:a2:d4:
         6d:5a:9a:93:e2:d6:93:28:20:ee:95:2e:7b:e5:de:b4:e0:1b:
         d6:15:22:01:a4:0c:c3:70:79:68:ea:0a:cd:83:cb:75:4d:fb:
         78:fe:12:50:50:02:35:e6:d9:5d:43:a3:05:7e:d0:86:6c:3f:
         57:ed:9d:a8:d2:ff:7b:5a:64:2a:02:90:36:8e:99:9d:09:a7:
         df:41:7f:e6:c6:6f:60:1a:72:8b:82:71:a7:14:3f:e4:20:dc:
         ea:42:0e:46:66:e6:cc:a3:78:52:0b:f3:c0:86:15:3d:14:dd:
         22:cb:51:37:fd:2f:5c:18:58:eb:b6:63:84:f6:28:d1:8d:a1:
         0d:c6:c9:34:16:ad:2d:b6:a7:ea:07:b8:dc:eb:d1:d0:05:9a:
         48:9f:9c:4e:bc:b4:36:6d:0b:54:42:b8:af:3f:8c:40:7d:13:
         5a:ec:95:63:bd:bf:58:d1:8a:96:bc:2b:6c:22:38:04:3c:8b:
         d2:b7:b6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 20:18:01 2026 by rpki-client