Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/34352e3136352e3136332e302f32342d3234203d3e20323637393631.roa
File:                     34352e3136352e3136332e302f32342d3234203d3e20323637393631.roa (raw, json)
Hash identifier:          H7rOz4tU1+EyJRrSCNZvva1WHVbljgUhSqiiM3Zu1j8=
Subject key identifier:   B1:62:BD:8B:F3:B2:F5:67:7D:08:99:27:B5:61:32:7E:87:03:BD:25
Certificate issuer:       /CN=A9BA768EE0C1427847F66680F17B330C7E749C51
Certificate serial:       7C6124AD80B97A50F1AEA23E672CFEFF1363ACCB
Authority key identifier: A9:BA:76:8E:E0:C1:42:78:47:F6:66:80:F1:7B:33:0C:7E:74:9C:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9BA768EE0C1427847F66680F17B330C7E749C51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/34352e3136352e3136332e302f32342d3234203d3e20323637393631.roa
Signing time:             Wed 28 Jan 2026 04:08:36 +0000
ROA not before:           Wed 28 Jan 2026 04:03:36 +0000
ROA not after:            Wed 27 Jan 2027 04:08:36 +0000
asID:                     267961
IP address blocks:        45.165.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/A9BA768EE0C1427847F66680F17B330C7E749C51.crl
                          rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/A9BA768EE0C1427847F66680F17B330C7E749C51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9BA768EE0C1427847F66680F17B330C7E749C51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 17:59:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:61:24:ad:80:b9:7a:50:f1:ae:a2:3e:67:2c:fe:ff:13:63:ac:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9BA768EE0C1427847F66680F17B330C7E749C51
        Validity
            Not Before: Jan 28 04:03:36 2026 GMT
            Not After : Jan 27 04:08:36 2027 GMT
        Subject: CN=B162BD8BF3B2F5677D089927B561327E8703BD25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:28:6a:83:9b:5e:a8:f4:aa:c8:d3:b1:fc:89:
                    c4:bb:07:28:21:c2:6d:2a:cb:b8:84:f5:52:21:75:
                    da:69:00:fd:0a:36:d9:64:c1:6c:90:7b:e6:e1:18:
                    5f:2a:a9:b7:0b:d7:0e:09:a6:21:d5:40:0c:3e:ef:
                    5f:cc:3a:13:ff:16:e7:40:a4:10:6c:e8:ef:9f:1a:
                    27:f1:6c:f4:c8:9e:3b:0f:d9:10:f9:68:ce:fb:3a:
                    2d:f8:ce:52:74:b6:eb:e6:81:34:4b:22:11:31:ea:
                    d6:9f:60:46:11:69:bc:f4:f0:2d:23:84:db:2f:ae:
                    b4:55:b8:78:f5:bb:84:f8:d0:4c:f9:73:9a:ea:5f:
                    08:fa:72:66:79:8d:ec:37:b8:2b:bc:de:a7:87:38:
                    9a:32:2e:ba:4a:3e:23:9a:b0:2b:eb:f8:72:7b:62:
                    bc:28:4a:5a:ae:33:ed:29:b5:20:67:49:1c:55:55:
                    90:78:75:35:11:98:87:3b:e8:a6:f3:e6:1f:e8:cf:
                    83:d3:c2:dc:9c:8e:bc:5c:52:f2:9c:db:16:96:1f:
                    12:41:75:cf:39:1d:4c:f2:47:4c:57:30:44:6a:7b:
                    5f:7a:60:8c:d3:40:ab:40:b6:68:13:a2:ed:a1:78:
                    68:ef:5e:9f:af:71:a0:fc:a7:09:cb:a5:8c:60:f6:
                    5a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:62:BD:8B:F3:B2:F5:67:7D:08:99:27:B5:61:32:7E:87:03:BD:25
            X509v3 Authority Key Identifier:
                keyid:A9:BA:76:8E:E0:C1:42:78:47:F6:66:80:F1:7B:33:0C:7E:74:9C:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/A9BA768EE0C1427847F66680F17B330C7E749C51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9BA768EE0C1427847F66680F17B330C7E749C51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/34352e3136352e3136332e302f32342d3234203d3e20323637393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:e4:71:56:a8:96:43:fe:2c:3b:df:89:bf:32:b2:16:45:79:
         ae:82:43:94:28:fe:27:ca:b6:a4:21:fa:d4:ee:98:8f:8c:4c:
         9a:3a:2b:ad:4c:b7:87:89:6e:d5:7c:1a:ba:14:cd:d2:b5:bf:
         44:30:9f:a5:4a:a7:78:ae:e3:0a:1c:86:26:a4:48:e6:38:69:
         11:c5:7e:52:5f:fc:8e:22:60:6c:99:44:26:bb:00:e2:bc:ef:
         ab:bf:bc:e0:a9:09:b3:0a:af:07:25:4a:33:af:ef:59:e9:13:
         9d:09:e1:f9:4e:95:71:72:2b:25:03:5c:51:d6:f3:0d:0f:5f:
         ce:2a:32:ec:31:9b:fb:3a:96:58:00:c9:6c:29:17:08:97:03:
         c5:48:c5:66:44:c1:a8:da:25:3b:49:98:4c:bc:1e:fc:91:ff:
         85:5f:d7:59:95:87:7b:28:2c:7c:ab:30:85:fb:1f:37:6f:7c:
         8c:e7:90:f5:65:c5:8e:8d:c0:55:2b:9b:74:62:5d:ee:37:a4:
         c1:3b:37:90:e6:d5:f2:8c:96:f0:cd:7b:0c:a0:fe:be:3b:94:
         4a:2d:3c:51:e0:49:79:92:0a:72:1b:3a:58:fb:ec:1a:23:9a:
         55:0f:82:2b:25:91:b8:eb:c6:58:3d:79:df:82:89:82:58:7b:
         1b:ea:6e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:49:59 2026 by rpki-client