Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/0/34352e3233312e3231322e302f32332d3332203d3e20323637323139.roa
File:                     34352e3233312e3231322e302f32332d3332203d3e20323637323139.roa (raw, json)
Hash identifier:          iJEzEX/42Z+4Ub4blVrQAPcISozpM2cuGhFPk3AlfOk=
Subject key identifier:   81:6C:FC:07:15:B8:91:09:C1:BD:8A:EE:2B:2D:F4:D8:61:28:33:61
Certificate issuer:       /CN=A790C4E0E3BC685DD983E6516BA2405DAA92175A
Certificate serial:       7D504EA1EAD675D6985F26D2D56A49129ACD6561
Authority key identifier: A7:90:C4:E0:E3:BC:68:5D:D9:83:E6:51:6B:A2:40:5D:AA:92:17:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A790C4E0E3BC685DD983E6516BA2405DAA92175A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/0/34352e3233312e3231322e302f32332d3332203d3e20323637323139.roa
Signing time:             Fri 20 Mar 2026 13:57:35 +0000
ROA not before:           Fri 20 Mar 2026 13:52:35 +0000
ROA not after:            Fri 19 Mar 2027 13:57:35 +0000
asID:                     267219
IP address blocks:        45.231.212.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/0/A790C4E0E3BC685DD983E6516BA2405DAA92175A.crl
                          rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/0/A790C4E0E3BC685DD983E6516BA2405DAA92175A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A790C4E0E3BC685DD983E6516BA2405DAA92175A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 19:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:50:4e:a1:ea:d6:75:d6:98:5f:26:d2:d5:6a:49:12:9a:cd:65:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A790C4E0E3BC685DD983E6516BA2405DAA92175A
        Validity
            Not Before: Mar 20 13:52:35 2026 GMT
            Not After : Mar 19 13:57:35 2027 GMT
        Subject: CN=816CFC0715B89109C1BD8AEE2B2DF4D861283361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:95:b5:cf:01:b2:3c:b6:e5:74:a7:03:2a:69:
                    9b:9b:b8:1a:ae:e6:e4:1d:df:76:a7:b9:01:d4:ca:
                    99:b2:2b:bb:f3:36:a9:ce:de:45:a3:04:0a:b8:c7:
                    07:88:f2:d5:bc:af:a6:98:3d:d9:c2:d5:45:1e:e3:
                    97:5c:34:42:1c:2e:00:dc:66:db:53:58:22:f2:0a:
                    99:61:78:05:07:73:80:3b:b7:ed:4f:b3:0a:57:fa:
                    77:17:26:b6:f6:d0:41:8b:d8:73:f1:93:a0:ea:73:
                    ff:51:6b:75:00:94:9e:4a:57:b3:d0:c3:89:97:33:
                    b5:34:6d:3c:31:22:89:a2:34:d7:7b:3f:dc:a4:9d:
                    a8:a6:29:00:24:21:a9:d0:d6:4a:55:73:9e:d5:0e:
                    fd:79:27:d6:e4:c8:20:61:36:83:56:7e:8a:9b:ac:
                    35:e9:fd:f5:0c:68:2a:dd:d4:de:a7:45:42:2e:5d:
                    e2:44:31:81:38:aa:74:11:5e:86:46:9b:9c:5d:17:
                    37:3e:db:db:d3:de:d5:85:42:77:86:4d:60:d7:dd:
                    50:e3:e0:b0:12:63:68:28:f8:99:06:6a:d0:14:45:
                    73:a4:05:2e:e7:a9:0c:28:e0:6b:1f:a4:86:5d:13:
                    7e:6d:70:13:02:8b:67:ad:b4:7b:a4:19:6f:1f:a1:
                    01:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:6C:FC:07:15:B8:91:09:C1:BD:8A:EE:2B:2D:F4:D8:61:28:33:61
            X509v3 Authority Key Identifier:
                keyid:A7:90:C4:E0:E3:BC:68:5D:D9:83:E6:51:6B:A2:40:5D:AA:92:17:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/0/A790C4E0E3BC685DD983E6516BA2405DAA92175A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A790C4E0E3BC685DD983E6516BA2405DAA92175A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/0/34352e3233312e3231322e302f32332d3332203d3e20323637323139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:37:55:b5:61:f0:1e:b1:a7:c3:57:e6:22:51:dc:b7:fe:00:
         78:1c:d7:f2:3d:15:7c:64:ce:26:7c:ae:be:e2:64:b5:a8:66:
         a5:d7:e1:f9:30:51:98:1e:42:75:53:65:50:06:f8:f1:78:8a:
         1c:ca:2a:2a:81:d5:dc:9a:d7:63:1d:97:b9:15:e0:7c:be:a0:
         7b:0a:02:f1:b0:44:0a:f3:18:0d:64:52:a0:d1:9d:89:7f:4c:
         4b:d8:cd:cd:e9:87:5f:44:93:e6:f6:98:93:23:db:95:76:fd:
         98:be:79:4e:0f:cb:bc:40:08:8c:cc:d3:8e:67:ce:fe:ea:96:
         dc:dd:06:85:15:1b:3e:43:d6:4a:78:1c:68:e1:b5:5a:77:4f:
         fb:c3:06:79:a7:30:d3:18:62:f9:67:b1:71:00:d9:0e:de:3a:
         08:fb:bb:26:e6:de:02:f3:0b:b5:02:88:d3:6a:12:a6:8d:09:
         00:10:d4:ab:f3:ac:46:e6:a3:11:e7:6d:62:d0:5b:d8:9e:21:
         5e:f4:c3:db:0a:f8:59:5a:fb:41:02:0d:67:18:60:5f:10:06:
         4e:e7:54:3c:a3:71:dc:7d:28:ca:04:b8:ad:81:e4:26:12:b0:
         f4:af:03:ca:bb:04:f6:35:e3:54:00:eb:2b:f4:3d:83:d2:99:
         7c:c7:bd:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:53:49 2026 by rpki-client