Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/34352e37312e3132382e302f32342d3234203d3e20323637363038.roa
File:                     34352e37312e3132382e302f32342d3234203d3e20323637363038.roa (raw, json)
Hash identifier:          kbiBjD7Y4pA+04qjUcAfjreOVEXAAtLEUeqsrwyQBVI=
Subject key identifier:   6C:6D:56:A9:53:A0:85:5C:02:D6:1F:82:B3:99:27:CB:53:4E:16:5A
Certificate issuer:       /CN=371070DB3AF9489AC044A01894F7F3DEA5016C1F
Certificate serial:       2CCDD4649608CA1A3157F21E5AD8EC77BFE20E29
Authority key identifier: 37:10:70:DB:3A:F9:48:9A:C0:44:A0:18:94:F7:F3:DE:A5:01:6C:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/34352e37312e3132382e302f32342d3234203d3e20323637363038.roa
Signing time:             Sat 02 May 2026 00:03:20 +0000
ROA not before:           Fri 01 May 2026 23:58:20 +0000
ROA not after:            Sat 01 May 2027 00:03:20 +0000
asID:                     267608
IP address blocks:        45.71.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.crl
                          rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 11:16:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:cd:d4:64:96:08:ca:1a:31:57:f2:1e:5a:d8:ec:77:bf:e2:0e:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=371070DB3AF9489AC044A01894F7F3DEA5016C1F
        Validity
            Not Before: May  1 23:58:20 2026 GMT
            Not After : May  1 00:03:20 2027 GMT
        Subject: CN=6C6D56A953A0855C02D61F82B39927CB534E165A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:07:a8:03:7d:4d:52:7f:a7:d2:68:af:3c:e9:
                    de:8f:e4:7e:b7:ff:d2:70:c3:b8:63:53:a4:60:45:
                    01:47:21:93:2b:6d:7a:6d:c9:6e:77:63:ed:7a:e4:
                    ba:67:93:1e:a8:14:2b:86:66:bc:48:b7:90:4a:10:
                    7e:4f:1b:cb:35:70:72:f3:36:08:43:1c:4d:c3:3c:
                    59:d1:5c:39:89:cc:94:01:6f:c1:64:a2:41:04:92:
                    31:a3:10:8f:08:b6:7f:8a:25:7f:ac:69:67:be:c8:
                    ca:af:15:38:59:0f:94:64:90:ed:8f:f1:67:26:0b:
                    3c:50:77:45:c1:97:92:76:4a:dc:14:58:51:57:f9:
                    f9:c3:70:d2:be:4f:cc:53:4e:27:bb:df:a1:e7:8b:
                    c8:23:18:69:28:8f:dd:cc:78:40:d9:f7:e5:26:dd:
                    84:ed:53:f7:bb:30:ce:21:3a:d9:90:6d:53:c0:0f:
                    c7:a8:51:6c:42:8e:8a:8a:1a:b4:cb:82:4d:82:ce:
                    4e:11:f8:d1:e4:ff:5b:fb:42:fc:b0:77:4e:9a:aa:
                    66:0d:55:82:fa:ef:39:d0:83:9e:53:6b:47:76:44:
                    66:2b:0c:c9:01:78:dc:de:bc:91:22:1b:f2:7b:c2:
                    97:e5:70:4e:61:38:32:6b:8e:5a:6f:5b:e4:0e:f1:
                    a6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:6D:56:A9:53:A0:85:5C:02:D6:1F:82:B3:99:27:CB:53:4E:16:5A
            X509v3 Authority Key Identifier:
                keyid:37:10:70:DB:3A:F9:48:9A:C0:44:A0:18:94:F7:F3:DE:A5:01:6C:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/34352e37312e3132382e302f32342d3234203d3e20323637363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:41:9a:86:48:a9:17:47:1f:04:43:13:e0:16:0f:9c:31:85:
         85:d2:bd:cf:54:5e:cd:2f:cf:20:57:fe:57:60:c9:c7:8d:c1:
         46:30:0b:f0:b1:80:a3:c1:4a:c2:ff:b8:8b:62:f5:98:69:8e:
         d7:c5:79:0a:ed:8a:d8:b2:2b:2e:2b:13:29:bd:0e:88:fd:d5:
         ed:b7:b1:28:77:ec:7f:fb:05:29:88:de:19:39:5d:d9:36:b8:
         39:97:aa:53:26:cd:4d:e3:61:b5:2d:9a:4e:1e:24:c7:e1:02:
         d9:66:22:69:7d:22:38:92:77:d9:d0:b4:fb:34:7e:d8:8e:c4:
         b0:62:fa:91:10:21:c0:7d:25:b6:ee:d5:91:77:85:80:7b:89:
         51:c7:33:cc:43:d1:08:b0:90:26:35:54:72:b9:71:77:30:cd:
         45:9d:37:2a:3c:0e:fc:f5:7a:45:8a:17:6f:fe:81:fd:c6:d1:
         23:6b:0a:87:8e:4c:7d:2d:82:f3:40:75:f1:f2:86:78:c0:03:
         f5:82:68:df:e4:62:73:af:40:70:ad:c4:68:d1:8c:bf:c5:63:
         9a:ee:79:7e:cd:6c:20:4c:2e:95:64:13:40:68:b2:37:a0:86:
         57:6e:ad:e4:b2:c1:38:20:2e:e7:19:a2:fb:be:60:92:22:6e:
         dd:33:8b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:06:34 2026 by rpki-client