Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/34352e37312e3133302e302f32342d3234203d3e20323637363038.roa
File:                     34352e37312e3133302e302f32342d3234203d3e20323637363038.roa (raw, json)
Hash identifier:          oWPIf/KGvCPR2Bf1HnWQchsN3X+2QIfhUCkNZsXeE64=
Subject key identifier:   6F:49:F6:E2:96:DB:CD:B1:7E:54:F2:7F:88:4E:64:45:8B:F1:F9:F2
Certificate issuer:       /CN=371070DB3AF9489AC044A01894F7F3DEA5016C1F
Certificate serial:       01CFA450205BF94403BA20CCA650203CE93BE6EE
Authority key identifier: 37:10:70:DB:3A:F9:48:9A:C0:44:A0:18:94:F7:F3:DE:A5:01:6C:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/34352e37312e3133302e302f32342d3234203d3e20323637363038.roa
Signing time:             Sat 02 May 2026 00:03:20 +0000
ROA not before:           Fri 01 May 2026 23:58:20 +0000
ROA not after:            Sat 01 May 2027 00:03:20 +0000
asID:                     267608
IP address blocks:        45.71.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.crl
                          rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 11:16:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:cf:a4:50:20:5b:f9:44:03:ba:20:cc:a6:50:20:3c:e9:3b:e6:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=371070DB3AF9489AC044A01894F7F3DEA5016C1F
        Validity
            Not Before: May  1 23:58:20 2026 GMT
            Not After : May  1 00:03:20 2027 GMT
        Subject: CN=6F49F6E296DBCDB17E54F27F884E64458BF1F9F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:eb:a4:d2:d0:3e:40:99:ca:59:65:10:64:1f:
                    cf:e2:e6:1a:6a:e8:a8:34:10:e9:cf:2e:2a:36:dd:
                    4b:1b:eb:18:c6:bd:a7:6e:53:94:d4:93:ac:cd:76:
                    c5:f7:4f:96:f5:7a:30:97:f8:5e:87:0b:3d:09:a1:
                    60:8c:a0:8a:54:c1:57:39:8b:74:4a:c5:e9:93:f9:
                    e4:34:9a:29:63:d9:48:60:5a:4f:67:8b:2d:23:1e:
                    bd:28:63:5c:04:e3:8e:5e:a3:57:0b:d8:dd:e9:c8:
                    18:e2:80:d7:06:e6:72:2b:53:a4:d0:32:ad:5b:6a:
                    3c:a1:64:54:ea:f3:85:48:da:f5:5d:cd:f5:c2:65:
                    82:73:26:e4:4a:3c:bb:f0:50:63:85:d8:6f:e1:01:
                    2b:60:e4:6c:5e:99:28:31:df:ff:e2:3a:f0:ed:5b:
                    a6:9b:04:10:71:6f:26:06:0b:81:da:df:8f:96:f7:
                    1a:8b:88:2b:ca:0c:65:f4:21:b9:27:b5:8a:61:51:
                    c9:24:9f:40:cd:68:6e:03:76:5d:4b:38:8f:69:ae:
                    95:6f:df:75:41:9e:35:7c:6f:49:17:d9:e6:15:52:
                    91:2a:5e:21:1e:f4:3a:e9:9c:a0:d6:9f:ae:3a:8d:
                    69:b7:fe:68:50:e9:d2:44:07:c4:e1:19:67:4f:d2:
                    5a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:49:F6:E2:96:DB:CD:B1:7E:54:F2:7F:88:4E:64:45:8B:F1:F9:F2
            X509v3 Authority Key Identifier:
                keyid:37:10:70:DB:3A:F9:48:9A:C0:44:A0:18:94:F7:F3:DE:A5:01:6C:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/34352e37312e3133302e302f32342d3234203d3e20323637363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:29:d3:a2:34:aa:17:57:91:29:a8:9b:b7:fc:15:e3:6e:c6:
         0e:18:e8:fc:93:a4:19:85:ac:3b:0d:06:6f:cf:7c:c1:84:2b:
         4b:ad:cc:82:9f:b9:b6:05:b4:c5:8b:fa:af:da:2a:4d:5b:b2:
         cf:91:e9:c5:ae:32:02:96:5e:db:a7:c3:27:f9:45:e3:3c:4b:
         4b:a9:a6:51:e5:ff:ae:2d:39:02:85:63:54:cd:4d:e1:ef:f3:
         58:9c:d8:3d:d3:b1:86:b5:1d:5f:59:c5:f4:04:aa:13:21:0c:
         c0:8f:6a:75:86:a3:e4:78:b0:47:cd:84:41:ce:cb:85:eb:9c:
         76:84:37:63:6a:be:ec:13:9d:de:66:ec:76:07:af:6b:02:49:
         f9:66:71:1a:f6:92:9a:eb:ed:91:1d:57:fc:ba:c4:d5:7c:7a:
         09:9d:ea:92:86:61:c2:30:b7:11:46:d5:8f:5a:4e:da:95:0b:
         6e:96:07:89:ad:72:dd:e2:04:42:7f:74:9a:e6:52:51:14:16:
         22:12:9b:4d:8c:ee:cb:43:e5:33:b0:62:2a:a6:3a:3e:be:aa:
         85:83:b5:fb:1f:0e:ca:ea:a8:15:ba:30:5f:98:03:bf:32:95:
         45:8c:5b:18:8c:73:ae:37:b0:46:8a:a5:2c:a2:20:34:43:d2:
         f1:6f:59:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:21:40 2026 by rpki-client