Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/31ru7wixY75UHR4LhNt4HFTYGfKqyUUAJoCZYBhitTa4/0/34352e3136302e31362e302f32322d3332203d3e20323638343032.roa
File:                     34352e3136302e31362e302f32322d3332203d3e20323638343032.roa (raw, json)
Hash identifier:          MLLZPt6X2w1ElX6NQ/36dB/EBkS0NiyNYR1Mjvuz6Dw=
Subject key identifier:   4B:07:16:49:C8:02:DE:78:86:71:83:A6:A4:B7:92:F7:44:FC:18:47
Certificate issuer:       /CN=67FE0B1DE6E477814DB1E42A6CDF529088A94296
Certificate serial:       7D699028ED86577FBEAE4D109C0C36A60E40CC90
Authority key identifier: 67:FE:0B:1D:E6:E4:77:81:4D:B1:E4:2A:6C:DF:52:90:88:A9:42:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67FE0B1DE6E477814DB1E42A6CDF529088A94296.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/31ru7wixY75UHR4LhNt4HFTYGfKqyUUAJoCZYBhitTa4/0/34352e3136302e31362e302f32322d3332203d3e20323638343032.roa
Signing time:             Wed 03 Jun 2026 15:21:34 +0000
ROA not before:           Wed 03 Jun 2026 15:16:34 +0000
ROA not after:            Wed 02 Jun 2027 15:21:34 +0000
asID:                     268402
IP address blocks:        45.160.16.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/31ru7wixY75UHR4LhNt4HFTYGfKqyUUAJoCZYBhitTa4/0/67FE0B1DE6E477814DB1E42A6CDF529088A94296.crl
                          rsync://rpki-repo.registro.br/repo/31ru7wixY75UHR4LhNt4HFTYGfKqyUUAJoCZYBhitTa4/0/67FE0B1DE6E477814DB1E42A6CDF529088A94296.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67FE0B1DE6E477814DB1E42A6CDF529088A94296.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 15:39:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:69:90:28:ed:86:57:7f:be:ae:4d:10:9c:0c:36:a6:0e:40:cc:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67FE0B1DE6E477814DB1E42A6CDF529088A94296
        Validity
            Not Before: Jun  3 15:16:34 2026 GMT
            Not After : Jun  2 15:21:34 2027 GMT
        Subject: CN=4B071649C802DE78867183A6A4B792F744FC1847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:66:fc:0d:d9:9a:ac:41:b1:07:1d:1d:89:86:
                    d7:43:26:e7:a0:1c:5d:b2:7a:8f:6d:43:ab:4f:07:
                    6f:4a:4f:32:d7:f7:fd:e5:c0:fd:4f:de:ac:a6:d8:
                    fd:34:00:c3:3d:fa:a5:e9:81:70:ae:9b:9e:4c:0f:
                    a7:46:01:b6:68:4a:c5:0a:ca:74:31:71:25:65:8e:
                    4c:b3:8a:4e:c2:a3:7c:ef:63:76:69:8c:6c:dc:53:
                    e3:9e:72:51:d3:5f:73:36:26:20:cb:fb:8e:b7:c5:
                    5b:44:7c:a7:9d:2c:b9:3b:c4:4e:5c:57:91:56:df:
                    22:e2:8e:26:5e:31:5b:6e:d0:35:f4:e7:43:38:bf:
                    ea:e3:be:06:a3:df:0b:86:c7:fe:49:ea:ff:3d:e9:
                    79:5d:bb:2c:22:19:6f:59:01:a5:6e:00:fb:20:dc:
                    ce:0e:de:55:98:38:55:3d:e7:ec:c3:a7:94:17:0e:
                    1e:ab:8f:52:69:ea:2b:b8:52:0a:7d:4b:01:ce:b4:
                    8e:50:ee:00:36:5d:08:31:48:3f:fd:ab:4d:fd:0f:
                    9c:5b:52:80:f4:f7:8b:76:de:74:33:5d:76:fc:30:
                    30:19:12:5d:e9:26:4c:9d:3a:5c:57:70:5d:82:df:
                    fd:bb:8e:71:b2:b1:ae:d8:e3:99:0f:b2:79:2f:bc:
                    1e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:07:16:49:C8:02:DE:78:86:71:83:A6:A4:B7:92:F7:44:FC:18:47
            X509v3 Authority Key Identifier:
                keyid:67:FE:0B:1D:E6:E4:77:81:4D:B1:E4:2A:6C:DF:52:90:88:A9:42:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/31ru7wixY75UHR4LhNt4HFTYGfKqyUUAJoCZYBhitTa4/0/67FE0B1DE6E477814DB1E42A6CDF529088A94296.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67FE0B1DE6E477814DB1E42A6CDF529088A94296.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/31ru7wixY75UHR4LhNt4HFTYGfKqyUUAJoCZYBhitTa4/0/34352e3136302e31362e302f32322d3332203d3e20323638343032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:9f:e3:e0:51:ef:1e:9b:b2:5c:fe:c4:e5:de:dc:3f:ba:8a:
         dc:e5:b5:d8:cf:d9:6c:20:fc:67:a4:ee:ca:88:ac:12:aa:c0:
         c9:e2:a1:43:a5:0c:82:de:ab:67:7c:1c:69:69:75:ed:b8:c5:
         e1:e1:57:ce:8d:53:d4:9a:1b:dd:6b:de:29:89:d1:dc:33:98:
         d0:f2:5c:b3:05:f3:8b:1d:50:89:9e:82:39:81:0d:11:7d:ef:
         04:e9:32:54:5f:05:9a:46:d0:98:76:73:7e:bf:e7:28:07:15:
         24:e2:7e:8e:c3:8c:4d:0b:a6:20:ff:6e:e9:e2:25:04:97:04:
         37:17:f3:2b:f7:48:bf:ce:af:db:74:93:5e:b9:72:b4:78:99:
         24:8e:ed:12:97:7e:2f:e5:ae:6f:58:0c:f4:da:4a:24:57:90:
         fe:91:a7:93:50:47:bd:3f:21:9f:9a:6d:5b:9a:78:41:72:5c:
         a8:6e:2a:e5:2e:8e:94:05:39:fd:e4:41:29:a7:1f:ba:61:c2:
         be:da:6f:e5:2e:f1:ea:8a:6b:49:ad:44:11:1a:07:63:23:33:
         a8:d8:df:24:f7:b3:8f:11:6c:20:f0:60:68:53:6e:e7:5a:ee:
         d8:05:b6:fb:40:60:be:5c:9d:9f:10:ea:e8:29:db:3e:4d:d0:
         cf:cc:63:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:06:39 2026 by rpki-client