Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/34352e3136382e3136382e302f32322d3232203d3e20323638303737.roa
File:                     34352e3136382e3136382e302f32322d3232203d3e20323638303737.roa (raw, json)
Hash identifier:          DkLuh3tcxCmgKjOsF8Dh3tQBldpIX4JE4i3qL8lOCuI=
Subject key identifier:   A1:4D:6F:2A:52:C5:8F:48:9E:A5:FA:99:E0:D8:CF:30:10:80:11:03
Certificate issuer:       /CN=974B1286BDF6AAAF8648D23141EAB781B973C049
Certificate serial:       4066547C68EF3E177003C8EEFDDE365776614F8F
Authority key identifier: 97:4B:12:86:BD:F6:AA:AF:86:48:D2:31:41:EA:B7:81:B9:73:C0:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/974B1286BDF6AAAF8648D23141EAB781B973C049.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/34352e3136382e3136382e302f32322d3232203d3e20323638303737.roa
Signing time:             Wed 15 Jul 2026 16:38:43 +0000
ROA not before:           Wed 15 Jul 2026 16:33:43 +0000
ROA not after:            Wed 14 Jul 2027 16:38:43 +0000
asID:                     268077
IP address blocks:        45.168.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/974B1286BDF6AAAF8648D23141EAB781B973C049.crl
                          rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/974B1286BDF6AAAF8648D23141EAB781B973C049.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/974B1286BDF6AAAF8648D23141EAB781B973C049.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 04:28:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:66:54:7c:68:ef:3e:17:70:03:c8:ee:fd:de:36:57:76:61:4f:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974B1286BDF6AAAF8648D23141EAB781B973C049
        Validity
            Not Before: Jul 15 16:33:43 2026 GMT
            Not After : Jul 14 16:38:43 2027 GMT
        Subject: CN=A14D6F2A52C58F489EA5FA99E0D8CF3010801103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:28:fb:9b:f0:ac:6d:2f:8b:48:32:d3:65:c3:
                    57:28:a7:7b:af:ba:48:bd:c2:f0:11:e8:c7:b1:bd:
                    5b:14:7b:a8:74:72:9d:10:e4:fc:f4:01:c5:11:14:
                    50:e5:fe:c2:55:82:04:5b:c9:0c:ef:53:32:48:f6:
                    a1:d1:81:79:57:fd:28:1f:51:95:b9:05:a8:72:59:
                    e9:0c:d5:91:54:5b:cd:39:18:4d:41:7b:5f:e3:ac:
                    c5:ca:b9:ee:dd:ee:31:ad:7d:71:79:a8:31:64:af:
                    92:cb:d1:8c:1b:35:8d:32:06:63:af:ae:0e:f0:d7:
                    52:ff:c5:51:42:f6:64:c2:22:ba:96:8e:a0:d1:a6:
                    d2:f8:80:a3:7c:d5:30:a1:28:d5:94:29:53:5b:0f:
                    a4:5d:c1:72:1c:c1:5d:23:ad:08:cd:c5:ea:d2:90:
                    c3:f7:b8:cf:26:c3:41:42:12:9b:22:f4:8c:69:89:
                    9f:cf:2c:0c:f0:a9:fb:11:87:88:ee:99:77:59:1c:
                    35:88:a3:e1:96:69:8d:f1:99:75:05:c7:05:93:07:
                    fd:2e:f0:71:8b:09:7a:5f:29:92:61:46:ba:9e:78:
                    7e:b5:19:44:53:55:ab:8c:12:a3:51:68:fa:c5:29:
                    1c:73:cf:bd:36:a1:f3:d1:f8:24:0a:64:ca:2c:aa:
                    b0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:4D:6F:2A:52:C5:8F:48:9E:A5:FA:99:E0:D8:CF:30:10:80:11:03
            X509v3 Authority Key Identifier:
                keyid:97:4B:12:86:BD:F6:AA:AF:86:48:D2:31:41:EA:B7:81:B9:73:C0:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/974B1286BDF6AAAF8648D23141EAB781B973C049.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/974B1286BDF6AAAF8648D23141EAB781B973C049.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/34352e3136382e3136382e302f32322d3232203d3e20323638303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:2b:26:b0:4c:33:4f:a5:d3:b2:7b:aa:09:e5:a6:ea:0a:3f:
         a7:0c:2d:bf:7f:35:fc:5c:a6:21:2f:c5:18:10:ed:3b:50:cc:
         73:0b:41:14:f7:0d:74:fe:ce:50:a0:d1:0f:ba:07:06:1c:2d:
         f2:6f:6a:a8:92:dc:b7:8e:26:cd:1d:a6:63:3f:09:6c:74:83:
         18:58:b6:90:27:e2:7c:fa:9f:e0:48:27:43:f4:16:90:f6:d1:
         94:78:ba:bf:19:8a:3d:ef:51:25:57:da:19:3c:f3:5f:c5:74:
         76:28:01:29:5e:d5:45:c9:c0:00:a8:15:71:30:48:71:89:3e:
         22:1c:2a:95:18:7d:68:2d:64:46:a8:cc:f2:bc:bd:e4:89:7a:
         64:12:50:88:2f:9e:44:99:45:d3:b5:30:a6:26:da:3d:79:c2:
         c0:d6:11:e7:1c:87:0a:58:f7:0b:66:6e:69:5e:eb:bb:5f:58:
         60:bf:6e:ed:6c:ed:ec:fd:6c:99:bf:2e:91:89:b6:b5:26:0c:
         01:0b:d4:f1:f8:e1:57:45:6f:3c:e0:52:7f:d2:85:f5:fd:e5:
         f7:fc:ed:98:75:48:bf:eb:4b:82:da:39:5b:28:dd:d3:a6:58:
         f3:ac:b5:2a:48:40:98:e7:a3:45:92:77:91:83:e6:a1:66:c1:
         59:53:3c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:39:25 2026 by rpki-client