Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/34352e3232382e33372e302f32342d3234203d3e20323731363939.roa
File:                     34352e3232382e33372e302f32342d3234203d3e20323731363939.roa (raw, json)
Hash identifier:          MDm6brbMqhhj0QNIW1mKPNYdLklyBw6YGsGhE2rNebs=
Subject key identifier:   16:C3:77:59:55:60:3F:CD:45:48:27:86:C7:25:8B:5B:8B:49:5A:CE
Certificate issuer:       /CN=F292A8F647A00800145AA8D3CD40704C603AE5A7
Certificate serial:       510860B35898C77952D03E43C7F042FDB6251F03
Authority key identifier: F2:92:A8:F6:47:A0:08:00:14:5A:A8:D3:CD:40:70:4C:60:3A:E5:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F292A8F647A00800145AA8D3CD40704C603AE5A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/34352e3232382e33372e302f32342d3234203d3e20323731363939.roa
Signing time:             Wed 22 Jul 2026 17:15:05 +0000
ROA not before:           Wed 22 Jul 2026 17:10:05 +0000
ROA not after:            Wed 21 Jul 2027 17:15:05 +0000
asID:                     271699
IP address blocks:        45.228.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/F292A8F647A00800145AA8D3CD40704C603AE5A7.crl
                          rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/F292A8F647A00800145AA8D3CD40704C603AE5A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F292A8F647A00800145AA8D3CD40704C603AE5A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 06:45:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:08:60:b3:58:98:c7:79:52:d0:3e:43:c7:f0:42:fd:b6:25:1f:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F292A8F647A00800145AA8D3CD40704C603AE5A7
        Validity
            Not Before: Jul 22 17:10:05 2026 GMT
            Not After : Jul 21 17:15:05 2027 GMT
        Subject: CN=16C3775955603FCD45482786C7258B5B8B495ACE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8d:d6:47:ff:e8:4a:ac:51:c3:06:11:56:d1:
                    e0:ea:7f:c4:7f:aa:79:02:43:d1:8e:93:0d:19:77:
                    8b:ca:22:33:6b:a9:31:b2:1d:94:4e:91:c0:a5:62:
                    cc:24:35:7e:ac:e6:99:44:a8:f1:82:27:04:83:5f:
                    eb:0c:39:14:0f:ce:b7:1f:9b:a7:4c:f8:50:91:9d:
                    f4:c1:c0:fe:4d:18:ed:81:4b:0f:35:3f:b3:ca:4f:
                    3e:63:3b:04:46:00:58:11:e5:ff:a3:42:6e:0a:af:
                    2d:16:2a:b7:dd:2b:89:4f:e5:2a:32:b9:d7:0d:5e:
                    dd:cc:7e:56:ba:87:e4:cd:af:a3:52:02:e0:be:9c:
                    83:be:a7:b0:3a:4f:42:3f:bf:5d:c4:ea:71:fe:38:
                    d1:b0:db:39:f7:2a:a1:57:25:78:b3:33:dd:3b:55:
                    5b:15:e0:39:49:d7:ee:99:33:36:74:3e:b0:5a:d6:
                    d3:3c:7e:4f:fb:87:9c:ff:01:41:4b:39:3a:42:87:
                    98:a3:f1:da:ee:7d:f7:8e:fa:72:02:36:e2:e5:44:
                    c2:5a:71:e7:4b:e0:d8:9c:41:bf:9f:08:b8:5e:53:
                    f3:97:16:44:a7:43:7b:3e:d6:ab:d7:6a:3c:a6:8e:
                    46:50:2e:bf:b2:eb:b1:c6:2b:86:d0:58:49:8d:0c:
                    52:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C3:77:59:55:60:3F:CD:45:48:27:86:C7:25:8B:5B:8B:49:5A:CE
            X509v3 Authority Key Identifier:
                keyid:F2:92:A8:F6:47:A0:08:00:14:5A:A8:D3:CD:40:70:4C:60:3A:E5:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/F292A8F647A00800145AA8D3CD40704C603AE5A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F292A8F647A00800145AA8D3CD40704C603AE5A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/34352e3232382e33372e302f32342d3234203d3e20323731363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:1c:d4:23:39:16:a1:89:48:d7:07:a7:4f:ff:a0:6f:32:be:
         57:5e:0d:18:55:4b:19:b2:73:8e:e5:8d:0a:ce:65:37:84:3b:
         ff:4c:04:2c:e9:c9:e8:46:91:b5:e2:46:d7:59:13:50:67:2f:
         c1:31:b8:78:66:52:d7:04:79:b0:a1:ce:ed:a1:de:67:c8:33:
         b9:bc:6b:39:56:ed:8e:5a:5b:c2:b3:e2:8d:56:8b:40:b5:c9:
         76:0c:3c:c9:52:33:07:32:0d:e7:a7:aa:0e:a0:94:7b:17:01:
         a2:df:8d:32:86:37:35:90:f3:e0:b9:6f:4a:4c:01:fb:18:f1:
         9c:c8:4d:20:2b:c9:03:ad:17:be:79:4a:e9:77:43:4f:f9:f4:
         81:1c:f9:22:97:f2:70:0f:77:99:58:36:ca:2e:27:b6:31:56:
         77:6a:27:90:13:1f:b7:23:69:71:a4:ec:ed:9a:fc:b9:a5:31:
         74:16:26:9f:83:f2:6e:50:39:b1:28:6f:d1:6a:e6:bd:66:be:
         1e:dd:c7:94:3f:85:07:bc:c3:21:9d:66:5e:f3:ec:64:19:18:
         4b:42:3f:2c:4a:6f:fa:4a:b2:4f:b7:8a:9c:3e:a2:71:3e:e6:
         6c:83:84:2b:37:7c:bf:c4:a2:58:2e:fd:16:a3:ae:b7:2b:f3:
         ab:c6:74:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:56:55 2026 by rpki-client