Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/2/34352e3138352e342e302f32342d3234203d3e20323639333535.roa
File:                     34352e3138352e342e302f32342d3234203d3e20323639333535.roa (raw, json)
Hash identifier:          quZuK+OHP67PZF23HLiMm0Re2xQRqOjjV7OFn/jRZKs=
Subject key identifier:   BF:9F:C3:52:2B:C6:D0:A3:D5:72:97:4A:F7:CE:E1:49:12:D5:2F:FD
Certificate issuer:       /CN=7191F9F31FCAE6ED1417B34857F66B4B522797BD
Certificate serial:       096373827029BDF15F8D0091236EB37360F6C15C
Authority key identifier: 71:91:F9:F3:1F:CA:E6:ED:14:17:B3:48:57:F6:6B:4B:52:27:97:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7191F9F31FCAE6ED1417B34857F66B4B522797BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/2/34352e3138352e342e302f32342d3234203d3e20323639333535.roa
Signing time:             Mon 20 Jul 2026 22:58:12 +0000
ROA not before:           Mon 20 Jul 2026 22:53:12 +0000
ROA not after:            Mon 19 Jul 2027 22:58:12 +0000
asID:                     269355
IP address blocks:        45.185.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/2/7191F9F31FCAE6ED1417B34857F66B4B522797BD.crl
                          rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/2/7191F9F31FCAE6ED1417B34857F66B4B522797BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7191F9F31FCAE6ED1417B34857F66B4B522797BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 18:23:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:63:73:82:70:29:bd:f1:5f:8d:00:91:23:6e:b3:73:60:f6:c1:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7191F9F31FCAE6ED1417B34857F66B4B522797BD
        Validity
            Not Before: Jul 20 22:53:12 2026 GMT
            Not After : Jul 19 22:58:12 2027 GMT
        Subject: CN=BF9FC3522BC6D0A3D572974AF7CEE14912D52FFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ec:eb:6d:9e:cb:76:4f:ad:47:4c:2a:ea:aa:
                    86:65:08:75:54:b8:4b:08:7a:94:71:81:58:fe:a9:
                    36:a0:67:b1:52:ce:8c:ef:11:78:c2:90:76:c3:c2:
                    d7:d8:43:2a:a8:d1:53:ac:b6:85:e8:63:82:16:3d:
                    d4:ea:02:77:81:5f:c5:f5:08:db:06:44:ab:03:a7:
                    bf:b7:9d:8b:a2:11:8f:77:00:bc:5e:3f:19:5d:cd:
                    0c:a9:12:f1:4d:67:b9:08:10:b5:23:21:14:6f:08:
                    7d:45:29:ed:66:4b:a2:70:61:a4:b8:36:0c:4e:2a:
                    dc:e6:bd:4b:ee:7f:eb:22:fe:2d:fa:11:d6:31:8a:
                    94:e8:1e:e8:da:8d:9c:5e:13:8e:8a:7f:a5:16:b6:
                    53:1c:03:c1:71:71:0a:a8:bb:a3:e2:87:13:2e:8e:
                    1a:85:03:2d:10:e9:f6:24:8d:4d:ee:dd:61:1e:6b:
                    98:28:a7:f4:5d:97:94:08:e5:5a:0a:96:74:fd:e3:
                    76:17:47:d1:41:7c:d2:d3:07:64:50:bc:eb:40:44:
                    44:fd:64:81:5e:d6:1a:19:2b:91:74:3c:58:08:00:
                    12:90:18:4b:d8:d8:7c:e9:50:44:22:38:59:b1:8f:
                    2c:9a:ae:78:93:eb:8c:24:36:39:94:36:c3:55:86:
                    6f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:9F:C3:52:2B:C6:D0:A3:D5:72:97:4A:F7:CE:E1:49:12:D5:2F:FD
            X509v3 Authority Key Identifier:
                keyid:71:91:F9:F3:1F:CA:E6:ED:14:17:B3:48:57:F6:6B:4B:52:27:97:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/2/7191F9F31FCAE6ED1417B34857F66B4B522797BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7191F9F31FCAE6ED1417B34857F66B4B522797BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/2/34352e3138352e342e302f32342d3234203d3e20323639333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:90:da:5e:89:e3:0c:a5:f0:9e:58:cd:e2:6c:4c:77:a6:11:
         3a:80:b8:08:18:31:c8:c2:04:fe:20:08:d3:f6:37:5c:14:ab:
         73:60:b2:37:56:1e:f9:4c:45:09:5e:8d:dc:bd:36:7c:d4:fa:
         30:5d:81:b6:8b:76:a7:4b:de:b2:8b:15:02:3d:ac:b4:b7:04:
         a3:b2:41:a8:54:36:5e:46:f0:7b:71:39:5e:58:d1:8d:7c:77:
         09:05:27:5b:17:7c:2e:c5:0a:a6:ea:46:f5:81:28:03:f8:2d:
         b0:ac:f3:3e:5b:ac:cd:47:a1:bb:ad:f5:76:2e:1f:14:f8:53:
         68:24:87:85:40:8b:b5:44:39:4b:af:ae:3b:eb:cc:2f:32:31:
         fd:3d:64:f6:b7:8b:7b:69:f0:2d:04:34:20:5e:f3:26:c7:37:
         c6:5e:3c:3b:f4:f4:20:fe:73:a1:ff:28:1d:82:ae:11:e3:a5:
         89:86:95:02:d4:e6:f3:98:16:78:a6:10:14:0e:8e:77:5f:ad:
         d4:7f:71:84:80:6d:b9:dc:89:db:0e:9b:61:88:35:ae:3d:5c:
         95:99:8b:fe:da:4a:a3:aa:f8:e6:df:88:7b:86:4a:d6:71:a3:
         1d:8a:f0:4f:61:3f:ce:7e:65:cd:bb:08:2b:92:b7:1e:56:37:
         2f:ba:d0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:36:05 2026 by rpki-client