Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/34352e3136392e3136302e302f32342d3234203d3e20323638373037.roa
File:                     34352e3136392e3136302e302f32342d3234203d3e20323638373037.roa (raw, json)
Hash identifier:          /tj9DSXjj9AUbJhEizhrNxTlMrHJjiIOfUtYqdbzJnI=
Subject key identifier:   E7:91:22:08:AC:C7:13:C4:50:0E:7A:A2:95:8E:12:48:92:E9:DB:55
Certificate issuer:       /CN=C35549FD881F7AAE59D817159EC9B19049B93616
Certificate serial:       31C5B97607118D93645B70E77EB5D1DADF3DF69B
Authority key identifier: C3:55:49:FD:88:1F:7A:AE:59:D8:17:15:9E:C9:B1:90:49:B9:36:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35549FD881F7AAE59D817159EC9B19049B93616.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/34352e3136392e3136302e302f32342d3234203d3e20323638373037.roa
Signing time:             Sun 06 Sep 2026 20:12:57 +0000
ROA not before:           Sun 06 Sep 2026 20:07:57 +0000
ROA not after:            Sun 05 Sep 2027 20:12:57 +0000
asID:                     268707
IP address blocks:        45.169.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/C35549FD881F7AAE59D817159EC9B19049B93616.crl
                          rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/C35549FD881F7AAE59D817159EC9B19049B93616.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35549FD881F7AAE59D817159EC9B19049B93616.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Sep 2026 10:16:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c5:b9:76:07:11:8d:93:64:5b:70:e7:7e:b5:d1:da:df:3d:f6:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C35549FD881F7AAE59D817159EC9B19049B93616
        Validity
            Not Before: Sep  6 20:07:57 2026 GMT
            Not After : Sep  5 20:12:57 2027 GMT
        Subject: CN=E7912208ACC713C4500E7AA2958E124892E9DB55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a4:4c:ae:88:c6:08:a2:a7:ff:18:f8:df:1c:
                    38:6a:46:62:69:ed:00:5a:96:c9:86:40:52:62:7b:
                    43:8e:14:21:e7:0b:0d:83:fc:10:42:d1:8e:79:5b:
                    bf:2f:1e:b1:ff:d4:a9:72:eb:1d:03:cb:71:c9:2e:
                    40:73:1b:2c:b9:c1:1a:38:25:45:05:a6:8b:e2:02:
                    8c:a8:b5:01:ef:e5:4d:f8:3f:38:59:a3:af:3f:91:
                    30:0d:99:55:20:a7:b0:27:58:3d:a4:f7:e0:57:58:
                    dc:dd:26:0f:b7:9e:f9:66:4f:2c:68:8c:80:db:a7:
                    92:7d:bd:9b:ee:c3:e8:14:46:fb:a6:09:9b:f0:f0:
                    76:dc:7a:16:28:d9:0f:bc:0c:1e:4c:e0:57:e5:b2:
                    b1:98:70:08:b0:c2:22:0f:ac:fb:ff:6a:3e:49:6d:
                    8b:af:be:89:f2:36:3f:58:38:91:d6:55:f8:84:de:
                    61:7f:b0:47:7c:fb:24:d3:25:2a:5c:12:05:0c:aa:
                    82:99:00:fd:fd:ed:66:e3:e2:1f:a8:a0:71:f1:b9:
                    2c:90:9f:de:45:36:f3:46:76:14:14:21:fd:56:77:
                    eb:9c:eb:5b:34:f4:d9:22:40:e3:f8:51:e3:ce:da:
                    5f:da:97:a8:0d:86:d3:03:2a:27:a4:83:bb:70:5a:
                    a0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:91:22:08:AC:C7:13:C4:50:0E:7A:A2:95:8E:12:48:92:E9:DB:55
            X509v3 Authority Key Identifier:
                keyid:C3:55:49:FD:88:1F:7A:AE:59:D8:17:15:9E:C9:B1:90:49:B9:36:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/C35549FD881F7AAE59D817159EC9B19049B93616.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35549FD881F7AAE59D817159EC9B19049B93616.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/34352e3136392e3136302e302f32342d3234203d3e20323638373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:de:0e:3c:53:83:56:d4:8e:a6:23:24:95:e0:74:0d:51:bb:
         33:58:37:31:8b:56:1a:6f:a8:0f:29:18:7b:c4:d9:8e:55:52:
         0f:fc:6d:db:56:74:f5:38:84:7d:1d:3c:04:86:36:4d:ad:9f:
         63:ff:70:02:d1:bc:d3:60:72:71:9a:34:b6:1e:5d:a6:5b:96:
         f7:1e:b4:2a:72:cb:9b:85:6d:79:45:0f:82:c2:0b:54:57:d5:
         25:3c:14:29:81:64:a5:31:6d:89:95:fe:02:60:5f:9c:5e:96:
         4c:f3:04:73:d1:dc:52:37:87:db:3d:60:65:20:dc:f3:9e:b2:
         9a:ce:f5:fd:93:bd:6f:61:16:e8:b3:05:13:8f:ad:18:7f:bb:
         cd:0e:75:d5:5b:cd:ee:65:ca:b0:f3:16:84:12:d5:fa:9b:a0:
         29:09:88:ca:31:49:e7:ac:e5:1d:2b:d9:cf:dc:74:2d:7f:ea:
         cc:c7:32:16:9a:2d:f8:6b:69:f0:85:c2:fd:6c:41:a7:c7:f2:
         3b:14:1c:2e:b9:09:70:9f:4f:5c:f3:25:ff:54:c6:98:a5:04:
         b4:60:b4:3c:e5:4d:c4:d5:80:d0:f4:01:df:89:0b:5f:b8:00:
         44:b2:5a:2e:af:69:5b:26:f7:b6:60:17:ba:f3:f2:53:af:93:
         79:31:60:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:15:37 2026 by rpki-client