Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/34352e3233352e3234382e302f32322d3332203d3e20323638323136.roa
File:                     34352e3233352e3234382e302f32322d3332203d3e20323638323136.roa (raw, json)
Hash identifier:          NhpHPFi+OTYkfGcG2DXqIAoc6GSYR8JB/7fSyEGAsVo=
Subject key identifier:   F5:6D:29:22:71:D8:28:FB:14:AC:39:F7:0A:62:86:9E:4D:72:10:1D
Certificate issuer:       /CN=840D1670E8E866121A8ABE057D88ABA7100141AA
Certificate serial:       7186FFB8DB82C41827190B3DF50E014008715FD3
Authority key identifier: 84:0D:16:70:E8:E8:66:12:1A:8A:BE:05:7D:88:AB:A7:10:01:41:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/840D1670E8E866121A8ABE057D88ABA7100141AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/34352e3233352e3234382e302f32322d3332203d3e20323638323136.roa
Signing time:             Thu 07 May 2026 13:59:52 +0000
ROA not before:           Thu 07 May 2026 13:54:52 +0000
ROA not after:            Thu 06 May 2027 13:59:52 +0000
asID:                     268216
IP address blocks:        45.235.248.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/840D1670E8E866121A8ABE057D88ABA7100141AA.crl
                          rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/840D1670E8E866121A8ABE057D88ABA7100141AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/840D1670E8E866121A8ABE057D88ABA7100141AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 01:55:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:86:ff:b8:db:82:c4:18:27:19:0b:3d:f5:0e:01:40:08:71:5f:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=840D1670E8E866121A8ABE057D88ABA7100141AA
        Validity
            Not Before: May  7 13:54:52 2026 GMT
            Not After : May  6 13:59:52 2027 GMT
        Subject: CN=F56D292271D828FB14AC39F70A62869E4D72101D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:79:55:61:68:80:0c:19:5c:51:71:1e:c0:91:
                    b2:af:cb:f4:e7:6d:e9:5c:2d:dd:0d:c3:b8:03:b6:
                    dd:74:23:64:c2:fe:35:31:ab:66:2b:f1:8b:e8:0f:
                    80:9e:13:7f:39:0e:5f:59:38:ce:55:38:fa:0e:c9:
                    79:df:0d:9f:d5:62:a5:71:cf:44:14:84:11:93:84:
                    8d:3a:a0:ca:1e:a1:42:a9:28:68:08:35:08:27:13:
                    ea:a6:4d:5e:b3:86:1e:38:95:d1:e3:2a:58:b0:85:
                    03:d9:36:a5:c5:50:b7:ae:9e:e2:d0:a5:e0:ef:94:
                    19:a4:3a:70:3a:54:75:2f:db:1c:9f:95:df:94:96:
                    f2:b4:25:58:72:63:85:6d:a9:3e:66:09:2b:ef:c7:
                    a2:71:5d:b9:b0:0f:a4:7d:2e:c2:24:e9:36:33:ec:
                    d1:8a:24:af:65:21:6c:fa:ca:2b:8f:e3:cd:d1:a8:
                    da:d7:0b:6a:5f:7b:95:bb:5c:a5:9f:83:1e:1a:ec:
                    79:1f:d2:3e:5f:38:5c:f8:25:64:82:05:b4:cb:63:
                    f0:25:f6:df:82:3e:aa:f8:f0:87:c1:af:3b:eb:ab:
                    e3:e6:ff:9b:0b:50:6f:b0:a2:33:30:27:8d:da:09:
                    17:39:76:c3:d6:61:75:2d:9a:d3:ad:87:58:53:53:
                    d3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6D:29:22:71:D8:28:FB:14:AC:39:F7:0A:62:86:9E:4D:72:10:1D
            X509v3 Authority Key Identifier:
                keyid:84:0D:16:70:E8:E8:66:12:1A:8A:BE:05:7D:88:AB:A7:10:01:41:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/840D1670E8E866121A8ABE057D88ABA7100141AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/840D1670E8E866121A8ABE057D88ABA7100141AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/34352e3233352e3234382e302f32322d3332203d3e20323638323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:7f:74:c3:3b:8f:49:7f:e9:37:a2:00:a1:72:a6:ba:f8:a0:
         c4:ae:c2:eb:23:4a:bc:47:8f:4b:c2:81:57:bb:a8:c0:2b:f2:
         42:7f:0d:58:9b:e0:85:b5:1d:46:d0:d7:c1:80:df:b1:d8:05:
         d8:da:45:72:c1:ce:0b:2e:f2:8b:d9:cc:39:f4:b3:3e:88:e7:
         0a:47:36:1c:e1:2b:5e:e1:7e:67:4f:d1:b6:ba:dc:b8:52:3a:
         81:c1:97:ca:1e:91:ea:99:27:18:4c:6a:11:be:e9:31:44:37:
         7e:66:dc:0f:1e:af:d9:0d:c1:fe:04:de:09:a7:fe:43:12:65:
         4d:ba:9a:7a:ea:98:7b:28:8f:0c:79:fe:6d:d8:eb:b2:76:af:
         cd:ea:13:36:48:c7:f1:3b:fe:19:8e:3f:0f:ea:8e:18:ba:95:
         95:40:57:6f:64:85:ef:23:37:08:26:e0:b2:77:27:c4:2c:64:
         89:d8:04:c6:3f:03:bc:23:34:b5:d6:4e:fd:09:99:3d:55:af:
         c2:9a:dc:d6:7c:8e:e3:7c:b5:e4:0b:26:7c:16:88:18:7d:91:
         ca:19:bd:93:a0:b6:f7:89:46:82:f7:26:c9:c2:ef:5f:80:40:
         04:1f:37:09:92:e5:ab:de:09:89:fb:60:04:8c:78:b4:b9:30:
         49:87:6b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:50:59 2026 by rpki-client