Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/34352e37312e3132382e302f32332d3233203d3e20323637363038.roa
File:                     34352e37312e3132382e302f32332d3233203d3e20323637363038.roa (raw, json)
Hash identifier:          Rrs5R1eLFc1cxs9Kip6ftQLGjA/5g3sm0N0XGd105Pg=
Subject key identifier:   26:19:B5:5D:74:27:BF:B2:3E:0E:51:BE:BB:50:A3:55:3F:7C:B1:44
Certificate issuer:       /CN=371070DB3AF9489AC044A01894F7F3DEA5016C1F
Certificate serial:       17E2C1A2278035C230DF0111842DA183635CE71E
Authority key identifier: 37:10:70:DB:3A:F9:48:9A:C0:44:A0:18:94:F7:F3:DE:A5:01:6C:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/34352e37312e3132382e302f32332d3233203d3e20323637363038.roa
Signing time:             Sat 02 May 2026 00:03:20 +0000
ROA not before:           Fri 01 May 2026 23:58:20 +0000
ROA not after:            Sat 01 May 2027 00:03:20 +0000
asID:                     267608
IP address blocks:        45.71.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.crl
                          rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 11:16:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e2:c1:a2:27:80:35:c2:30:df:01:11:84:2d:a1:83:63:5c:e7:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=371070DB3AF9489AC044A01894F7F3DEA5016C1F
        Validity
            Not Before: May  1 23:58:20 2026 GMT
            Not After : May  1 00:03:20 2027 GMT
        Subject: CN=2619B55D7427BFB23E0E51BEBB50A3553F7CB144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c2:97:33:69:46:3c:03:dc:84:a2:91:63:05:
                    21:03:a4:f7:05:83:2d:9a:9a:e1:16:94:b4:81:a2:
                    fa:12:8d:cf:39:48:b8:74:e8:0b:48:e6:46:80:48:
                    97:65:2b:c9:58:3a:76:fe:2b:26:ec:07:75:56:d9:
                    cd:d1:89:a2:d1:1c:aa:6c:0f:bc:fc:73:04:2a:54:
                    6b:fb:93:8a:9c:e1:4b:19:70:5e:95:da:51:5f:a4:
                    bf:a0:c0:7c:b0:9f:e0:41:15:18:9c:34:59:a5:39:
                    a0:bb:8f:86:11:0f:fe:3b:c0:b0:c6:94:6b:7b:78:
                    67:f5:86:4f:40:51:a8:17:63:4b:88:15:51:e6:0d:
                    f9:39:1b:5b:2f:27:67:90:7b:9d:e9:a3:68:bd:ad:
                    52:83:0e:0e:aa:a6:ed:0b:6e:bc:1e:60:f8:31:6d:
                    f0:de:f8:a0:84:c4:e2:30:cb:45:61:96:1b:1d:3c:
                    4b:9a:90:b2:b9:2e:f2:47:36:b7:61:d3:9d:fb:f0:
                    1b:11:ad:d8:75:8c:5a:2a:86:fd:f8:b9:59:4b:47:
                    b9:72:76:67:be:b6:91:da:ec:d9:c0:64:73:e0:a4:
                    f0:42:33:84:19:b2:b0:bf:a6:ab:3e:64:52:84:2b:
                    aa:b6:c8:f0:8f:14:9c:18:a7:af:bb:f0:76:5c:a9:
                    13:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:19:B5:5D:74:27:BF:B2:3E:0E:51:BE:BB:50:A3:55:3F:7C:B1:44
            X509v3 Authority Key Identifier:
                keyid:37:10:70:DB:3A:F9:48:9A:C0:44:A0:18:94:F7:F3:DE:A5:01:6C:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/34352e37312e3132382e302f32332d3233203d3e20323637363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:59:fe:31:0d:d3:5a:53:bb:bb:23:e1:84:e5:47:d1:90:f8:
         82:12:ce:ad:ad:83:4a:f8:c8:c0:bc:31:fe:d6:98:fa:ca:44:
         60:46:04:7a:95:ac:59:c8:0d:fd:83:88:30:2e:6f:64:ca:98:
         f8:fd:72:8d:ab:4b:48:32:74:c7:26:2d:7b:fb:c1:ac:03:9d:
         f3:46:fe:f4:b1:8f:7d:d9:0d:02:1d:a2:86:14:b2:17:79:d6:
         c6:dd:02:49:cf:84:61:4b:19:9c:2e:c6:36:23:58:78:e7:0d:
         26:18:09:2f:96:e9:20:99:5b:a2:a8:7f:17:8b:af:fa:26:f7:
         57:ea:05:15:ab:75:38:99:80:5e:cc:53:21:16:de:d7:ea:fe:
         73:63:0a:6a:4d:0f:31:8e:ff:93:16:6a:97:84:88:a5:8c:81:
         ac:cf:ba:01:e4:b4:e7:f9:32:c0:b1:97:df:c8:d2:22:9e:70:
         dd:82:d4:92:08:f8:0e:13:e4:45:cf:fd:11:87:50:81:4a:f1:
         96:dc:5e:d8:2d:ba:76:db:06:9b:6b:d3:8a:4e:db:a7:59:ea:
         90:78:f6:ef:32:af:c2:d4:69:9d:1f:c1:56:e9:b6:55:7c:71:
         35:89:5e:60:53:22:91:9d:99:06:0f:fd:75:ad:ff:c2:80:31:
         ea:96:15:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:34:41 2026 by rpki-client