Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/34352e3137392e3130362e302f32332d3234203d3e20323731303234.roa
File:                     34352e3137392e3130362e302f32332d3234203d3e20323731303234.roa (raw, json)
Hash identifier:          osiibilQ0jNYXBGNxXrDrwn7Ijow/8RM78hn8YqpqtM=
Subject key identifier:   10:51:AF:5C:F1:7D:DD:72:02:E4:1F:E4:95:33:75:05:DD:87:F4:91
Certificate issuer:       /CN=66FDB876CBA2E3E1C1208045E990B39BD097EBCF
Certificate serial:       1C560C35F8C916074789F8491AE465CF5CF52D08
Authority key identifier: 66:FD:B8:76:CB:A2:E3:E1:C1:20:80:45:E9:90:B3:9B:D0:97:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/34352e3137392e3130362e302f32332d3234203d3e20323731303234.roa
Signing time:             Thu 25 Jun 2026 15:02:43 +0000
ROA not before:           Thu 25 Jun 2026 14:57:43 +0000
ROA not after:            Thu 24 Jun 2027 15:02:43 +0000
asID:                     271024
IP address blocks:        45.179.106.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.crl
                          rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 07:06:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:56:0c:35:f8:c9:16:07:47:89:f8:49:1a:e4:65:cf:5c:f5:2d:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66FDB876CBA2E3E1C1208045E990B39BD097EBCF
        Validity
            Not Before: Jun 25 14:57:43 2026 GMT
            Not After : Jun 24 15:02:43 2027 GMT
        Subject: CN=1051AF5CF17DDD7202E41FE495337505DD87F491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:49:58:7d:7b:37:ad:01:ab:ee:63:1f:da:50:
                    58:07:c4:7d:96:c0:16:aa:18:a8:78:fd:31:03:c7:
                    4f:2a:a0:b0:cf:9c:d2:b2:27:6b:37:82:8e:d8:0f:
                    23:3c:04:89:0c:c5:5f:4e:c5:db:d1:9b:84:9f:ae:
                    8a:1b:64:96:86:82:5f:e6:2a:19:0e:64:b8:d0:ae:
                    02:e2:30:22:e5:fe:99:ab:80:b5:50:7d:3e:15:54:
                    14:ff:2c:51:2a:d0:26:3e:73:4c:e6:d6:a7:ab:df:
                    d1:6e:63:6d:f4:9d:ca:49:c4:fb:47:ea:d8:ed:bb:
                    30:3e:a4:98:c6:c4:6f:2f:2b:9c:5e:9e:e2:ca:2a:
                    75:4a:8c:f8:94:7b:12:b7:c9:7c:7d:4c:84:6f:b9:
                    56:88:dd:25:ab:4d:61:83:1f:21:ae:73:f2:38:c6:
                    b9:41:f3:25:8e:4b:6d:48:52:2c:a9:dd:a7:cd:18:
                    9a:37:6c:70:50:f4:f1:51:4f:2a:23:15:fb:ca:c3:
                    b9:36:01:1d:d2:65:84:f8:ec:c7:7b:bc:f6:f2:88:
                    f7:30:2b:18:9c:e8:6a:c4:6b:e4:9e:67:a6:8c:2a:
                    a6:cb:f8:df:aa:98:0b:ed:a7:b8:13:46:c1:bf:5e:
                    1c:bd:be:7f:e1:01:cf:61:6b:f9:91:6e:72:34:98:
                    76:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:51:AF:5C:F1:7D:DD:72:02:E4:1F:E4:95:33:75:05:DD:87:F4:91
            X509v3 Authority Key Identifier:
                keyid:66:FD:B8:76:CB:A2:E3:E1:C1:20:80:45:E9:90:B3:9B:D0:97:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/34352e3137392e3130362e302f32332d3234203d3e20323731303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:03:df:66:68:3b:03:23:73:b8:fe:39:7b:ff:ba:30:13:13:
         40:8a:98:16:4f:09:4e:c1:03:1d:27:d0:e0:a4:3c:04:bd:5d:
         db:4d:d1:3c:36:c1:35:f4:cd:02:68:52:d0:bb:12:a3:dc:dd:
         b4:9d:c6:ee:19:27:10:07:68:b3:d7:a3:51:89:33:3c:17:d1:
         56:2a:be:23:ff:b3:cc:dd:78:52:5f:d6:bd:35:15:c2:34:c7:
         67:e1:dc:22:3a:15:1e:9d:b0:18:e0:b9:f0:50:31:fc:56:c1:
         d7:f3:f4:6d:38:2c:73:46:da:25:c8:54:9e:51:82:ce:36:05:
         ca:44:d5:46:98:9b:fb:70:e1:79:37:21:16:06:38:b5:9c:32:
         26:bd:9a:e9:71:e4:a7:c3:db:c5:ae:e4:38:6c:0f:ac:49:cc:
         37:81:44:8a:1f:6f:4d:c5:50:08:92:52:51:df:8f:c9:ca:b8:
         22:cb:cd:78:11:f8:d9:09:09:2f:84:0f:e8:7a:e4:ba:45:2e:
         c0:ed:7e:d3:2e:fb:1e:c2:8c:e5:af:98:cd:47:b0:03:47:a7:
         b7:cd:09:43:e5:b6:d6:6d:1e:e4:dc:63:7e:a2:cc:92:68:68:
         2c:43:55:74:4d:9f:c7:ab:d5:8b:7e:15:c0:5f:98:14:f0:3c:
         e1:c4:88:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:38:39 2026 by rpki-client