Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/34352e3137382e3136382e302f32332d3233203d3e20323639303431.roa
File:                     34352e3137382e3136382e302f32332d3233203d3e20323639303431.roa (raw, json)
Hash identifier:          a+/1Td5DIiJV8VVUqxAy0YBebZlXaFSInbYaZhrSvXs=
Subject key identifier:   E6:44:1A:7C:CB:3C:41:C7:8B:EA:5B:7B:70:0C:FD:F2:3F:06:C6:9F
Certificate issuer:       /CN=E6F5848D2F1E7564C1201124AD1D8A679DADCDD5
Certificate serial:       6625B62D0B67348FFF0A636FD0C059848B7267B9
Authority key identifier: E6:F5:84:8D:2F:1E:75:64:C1:20:11:24:AD:1D:8A:67:9D:AD:CD:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6F5848D2F1E7564C1201124AD1D8A679DADCDD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/34352e3137382e3136382e302f32332d3233203d3e20323639303431.roa
Signing time:             Wed 19 Aug 2026 22:06:31 +0000
ROA not before:           Wed 19 Aug 2026 22:01:31 +0000
ROA not after:            Wed 18 Aug 2027 22:06:31 +0000
asID:                     269041
IP address blocks:        45.178.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/E6F5848D2F1E7564C1201124AD1D8A679DADCDD5.crl
                          rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/E6F5848D2F1E7564C1201124AD1D8A679DADCDD5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6F5848D2F1E7564C1201124AD1D8A679DADCDD5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 19:41:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:25:b6:2d:0b:67:34:8f:ff:0a:63:6f:d0:c0:59:84:8b:72:67:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6F5848D2F1E7564C1201124AD1D8A679DADCDD5
        Validity
            Not Before: Aug 19 22:01:31 2026 GMT
            Not After : Aug 18 22:06:31 2027 GMT
        Subject: CN=E6441A7CCB3C41C78BEA5B7B700CFDF23F06C69F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3d:14:3b:75:b1:25:45:3e:3a:79:51:b9:8d:
                    fe:27:6e:1d:fe:84:89:af:93:26:50:ab:07:d5:4a:
                    dc:6b:31:cd:f0:1c:92:72:b5:d3:ac:7a:b1:72:03:
                    62:e5:1d:6d:2d:ae:1d:f4:8d:c0:63:a4:bf:5c:1f:
                    76:9e:2e:a5:c7:02:35:6e:95:34:03:cd:28:75:00:
                    ae:b0:4c:3e:9c:1c:1c:13:93:b6:9f:ea:66:0e:46:
                    ab:35:98:4b:e8:d1:65:27:b3:e4:9a:1a:38:5c:1f:
                    c0:19:76:0c:07:86:e6:46:ea:e2:0c:63:06:f4:bb:
                    36:0a:96:92:0f:bf:58:4a:71:a9:a4:16:90:0f:cd:
                    50:15:f9:a4:f7:a0:2d:e8:69:45:56:9a:e9:6e:8e:
                    af:96:12:bb:c6:96:79:86:15:00:f5:a9:90:f2:e2:
                    6a:08:cb:da:6e:05:40:77:9c:17:02:7a:f5:c7:ac:
                    94:63:29:80:4e:6d:de:e1:43:9b:5d:f3:b7:1f:da:
                    75:c8:00:ab:bb:4f:f4:66:10:4a:8b:8a:69:d9:a1:
                    7d:66:ab:d4:75:5f:4e:d3:eb:33:7c:dc:c3:93:c5:
                    b7:1f:11:75:67:7a:1d:97:2b:aa:2e:e1:98:c7:fa:
                    bc:e1:33:21:72:6f:06:39:02:be:ca:0d:06:65:ce:
                    04:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:44:1A:7C:CB:3C:41:C7:8B:EA:5B:7B:70:0C:FD:F2:3F:06:C6:9F
            X509v3 Authority Key Identifier:
                keyid:E6:F5:84:8D:2F:1E:75:64:C1:20:11:24:AD:1D:8A:67:9D:AD:CD:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/E6F5848D2F1E7564C1201124AD1D8A679DADCDD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6F5848D2F1E7564C1201124AD1D8A679DADCDD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/34352e3137382e3136382e302f32332d3233203d3e20323639303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:32:c1:6a:db:a9:db:03:45:0b:dc:84:a1:8e:5b:bd:1b:98:
         f5:0b:dd:c6:4a:78:52:86:82:93:5c:98:18:6d:53:9d:90:6f:
         b1:5d:7f:c2:2e:04:25:19:16:ca:1e:05:c5:ff:7a:7b:7e:3b:
         e9:9e:f5:7e:cb:1b:27:b1:44:24:55:ed:b5:63:dd:4d:5c:0f:
         24:ee:cb:f4:a8:58:8c:e0:49:6a:68:4b:16:74:2f:31:dc:03:
         d7:56:ca:a3:d2:f2:f7:60:7d:92:db:a8:7a:d9:3a:e9:1a:71:
         00:64:ee:4a:89:b3:0e:63:e7:0c:d0:b7:8b:94:19:1c:da:73:
         f3:e3:62:66:56:66:90:77:41:3a:db:94:7c:3d:8a:32:ad:ce:
         f4:6d:4e:3d:40:50:3b:a1:23:d7:f5:61:97:e1:0e:b8:29:45:
         2e:dc:14:65:bc:75:3b:8b:67:75:ea:38:41:fd:49:87:87:6f:
         68:d8:06:dd:72:50:43:5a:fd:a2:c8:61:da:a2:ff:e8:f7:18:
         4c:ae:0e:99:ac:25:6a:cc:b0:06:fa:b0:6a:f0:98:39:26:7b:
         ab:5d:87:c7:72:3c:1c:3a:03:bf:1d:92:25:cd:6b:8f:a7:c5:
         b9:4e:82:59:b6:60:1d:2c:1b:da:db:48:e1:7d:43:de:61:83:
         18:d3:23:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 21:01:44 2026 by rpki-client