Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/34352e3233382e3136342e302f32322d3234203d3e203238313436.roa
File:                     34352e3233382e3136342e302f32322d3234203d3e203238313436.roa (raw, json)
Hash identifier:          QxntTXfWLFKQVz3rf9uttRPC5bORigkszsFY2khyzoE=
Subject key identifier:   88:7C:8E:33:50:4E:16:A7:1D:87:F0:27:F0:DD:DA:5A:E9:D0:3D:1C
Certificate issuer:       /CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
Certificate serial:       65A1C1160C1E278859522B36620700E9FE65F7E2
Authority key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/34352e3233382e3136342e302f32322d3234203d3e203238313436.roa
Signing time:             Mon 13 Apr 2026 13:48:37 +0000
ROA not before:           Mon 13 Apr 2026 13:43:37 +0000
ROA not after:            Mon 12 Apr 2027 13:48:37 +0000
asID:                     28146
IP address blocks:        45.238.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 05:41:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:a1:c1:16:0c:1e:27:88:59:52:2b:36:62:07:00:e9:fe:65:f7:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
        Validity
            Not Before: Apr 13 13:43:37 2026 GMT
            Not After : Apr 12 13:48:37 2027 GMT
        Subject: CN=887C8E33504E16A71D87F027F0DDDA5AE9D03D1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f5:52:a8:ee:ad:fc:53:e9:4a:06:6a:ac:18:
                    fb:e1:5f:c0:97:c2:0c:23:2e:df:41:c1:c7:75:ea:
                    95:97:7e:5e:73:8b:99:ec:b0:f1:27:99:10:aa:fe:
                    2c:c2:5a:ae:ba:79:07:8b:2d:e7:f5:f4:15:28:26:
                    b0:92:0d:2b:b9:a4:c9:cb:e3:b4:cd:51:66:be:3e:
                    41:ad:ac:6d:f9:98:15:b6:87:0f:d0:c6:7a:a5:d9:
                    49:c8:ea:95:9b:d9:b0:f1:5b:6f:c3:50:a6:d0:04:
                    98:a5:d2:b9:cf:0f:6b:c0:a1:71:c2:64:47:81:fe:
                    c6:5a:7f:0a:6f:21:f4:8d:b0:6b:c0:b6:6d:7d:b6:
                    c5:08:d9:57:01:c9:26:57:7c:85:2e:6b:01:ac:91:
                    59:68:3e:ce:3f:6f:87:60:5c:0d:ab:6d:cb:38:17:
                    16:3e:5c:ba:ec:23:6b:15:04:6a:76:bf:d0:ed:68:
                    e8:60:31:e6:0f:e2:5e:02:2e:d7:f8:2a:62:54:3a:
                    9f:eb:f6:8d:7b:81:c1:5b:19:b4:21:66:f3:42:be:
                    20:46:ab:d6:bd:c4:5c:5d:83:31:aa:78:42:77:9c:
                    f6:4c:e4:f2:16:b3:e3:ad:b5:3b:73:83:4c:e4:b5:
                    11:3b:d7:8d:68:e3:d8:4b:2e:ab:69:4a:02:71:f1:
                    b5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:7C:8E:33:50:4E:16:A7:1D:87:F0:27:F0:DD:DA:5A:E9:D0:3D:1C
            X509v3 Authority Key Identifier:
                keyid:7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/34352e3233382e3136342e302f32322d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:d5:df:71:85:97:88:9b:14:a0:59:dd:52:fe:73:50:ee:41:
         05:a4:ee:48:1b:36:37:a3:15:ea:03:d1:c2:91:57:28:2c:f1:
         33:fd:22:26:ff:cc:3a:2b:bc:11:34:3e:a5:7f:8f:e5:ab:5b:
         4d:8a:ca:f5:51:af:c1:15:f9:1b:f9:af:d4:54:5e:5c:f3:03:
         f4:68:29:9d:7a:5d:91:1b:98:32:82:05:d6:2e:e5:0e:82:39:
         c6:2a:52:3f:d1:15:db:b0:8f:7d:86:26:2a:a6:94:d8:fa:43:
         c6:53:d5:1b:04:0a:c4:c3:32:c1:4b:68:db:2a:ee:28:01:65:
         4e:fe:48:e0:c9:9e:c1:b8:97:b1:08:a3:4a:80:91:ad:bc:f0:
         23:25:e1:1c:c3:77:06:ac:1d:69:2e:27:2f:24:3f:ee:95:07:
         f8:11:29:30:31:7a:29:9f:81:0d:d6:ae:3c:fa:3e:2e:c0:90:
         a2:ab:b8:c2:37:b7:27:2d:f3:64:1a:d2:6a:71:25:ee:31:67:
         6f:e2:f6:73:97:c9:ac:43:9e:a9:24:85:01:26:b2:99:99:e4:
         a3:fb:cf:98:71:10:c0:24:a3:fe:43:f1:4f:8c:df:52:9b:a9:
         0b:26:41:34:c2:b7:40:43:dd:1f:96:4b:c0:b2:60:01:be:7c:
         b6:14:aa:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:35:47 2026 by rpki-client