Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DCzugT1fx6Gdcm4H8CV3vCuuVmh3CEPTCQomYkE2tUa1/0/34352e3233322e37302e302f32332d3233203d3e20323637323530.roa
File:                     34352e3233322e37302e302f32332d3233203d3e20323637323530.roa (raw, json)
Hash identifier:          WvAFaW90Zfy73WQ+xXg9h8+jGSxjnkSX04/IJZ06WYA=
Subject key identifier:   58:7C:2B:B1:B9:9A:10:83:56:C7:DD:C3:7C:E7:21:78:6A:C3:2D:D9
Certificate issuer:       /CN=C1912018C110A24C0048F831DD489DB1483ACB47
Certificate serial:       6257A92D797B5589DE04DE7EA7E72CAFD3B6B87C
Authority key identifier: C1:91:20:18:C1:10:A2:4C:00:48:F8:31:DD:48:9D:B1:48:3A:CB:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1912018C110A24C0048F831DD489DB1483ACB47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DCzugT1fx6Gdcm4H8CV3vCuuVmh3CEPTCQomYkE2tUa1/0/34352e3233322e37302e302f32332d3233203d3e20323637323530.roa
Signing time:             Mon 23 Mar 2026 12:08:50 +0000
ROA not before:           Mon 23 Mar 2026 12:03:50 +0000
ROA not after:            Mon 22 Mar 2027 12:08:50 +0000
asID:                     267250
IP address blocks:        45.232.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DCzugT1fx6Gdcm4H8CV3vCuuVmh3CEPTCQomYkE2tUa1/0/C1912018C110A24C0048F831DD489DB1483ACB47.crl
                          rsync://rpki-repo.registro.br/repo/DCzugT1fx6Gdcm4H8CV3vCuuVmh3CEPTCQomYkE2tUa1/0/C1912018C110A24C0048F831DD489DB1483ACB47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1912018C110A24C0048F831DD489DB1483ACB47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 16:49:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:57:a9:2d:79:7b:55:89:de:04:de:7e:a7:e7:2c:af:d3:b6:b8:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1912018C110A24C0048F831DD489DB1483ACB47
        Validity
            Not Before: Mar 23 12:03:50 2026 GMT
            Not After : Mar 22 12:08:50 2027 GMT
        Subject: CN=587C2BB1B99A108356C7DDC37CE721786AC32DD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:99:c0:e4:1d:a2:f9:4b:a0:b8:18:d9:55:2b:
                    50:47:65:c1:e3:52:be:dd:e2:f8:ec:f0:4e:9a:0f:
                    35:a7:15:c5:18:20:5c:dd:af:29:59:7d:13:0e:62:
                    8d:cd:44:17:3d:ed:7e:d0:26:68:c6:18:54:ff:6b:
                    cf:92:82:22:7f:5b:f0:31:d0:eb:5b:9a:d2:be:cc:
                    48:b3:bd:91:23:2c:fe:60:03:af:f5:f4:04:8f:33:
                    4d:d9:03:7c:d9:9e:39:3f:05:0c:e2:9e:11:da:84:
                    b0:4f:83:fb:8a:6b:82:60:60:b9:3b:4b:f6:bc:c2:
                    6c:22:3e:d2:79:23:d1:f4:3b:29:9d:88:a4:72:8e:
                    7e:6a:82:88:65:e4:5e:38:bf:27:bd:8b:85:98:c2:
                    d8:cb:42:c7:f6:a5:83:58:1d:dc:41:b7:9e:fa:f2:
                    aa:d6:b6:b5:06:0f:b6:d6:1e:d0:b9:1b:3b:a0:91:
                    84:81:52:83:e3:27:00:93:ae:bd:82:02:3d:e0:39:
                    0b:05:ba:0e:c1:45:3d:88:a1:9a:11:b6:96:5d:41:
                    32:b7:d0:92:94:9e:c7:17:7c:f6:f1:6f:ae:a4:6d:
                    87:0b:f3:f0:9d:02:1d:91:7a:63:ec:8a:e7:be:3a:
                    5a:58:41:61:9c:57:bc:a7:82:6a:ba:67:9b:0c:54:
                    8e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:7C:2B:B1:B9:9A:10:83:56:C7:DD:C3:7C:E7:21:78:6A:C3:2D:D9
            X509v3 Authority Key Identifier:
                keyid:C1:91:20:18:C1:10:A2:4C:00:48:F8:31:DD:48:9D:B1:48:3A:CB:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DCzugT1fx6Gdcm4H8CV3vCuuVmh3CEPTCQomYkE2tUa1/0/C1912018C110A24C0048F831DD489DB1483ACB47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1912018C110A24C0048F831DD489DB1483ACB47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCzugT1fx6Gdcm4H8CV3vCuuVmh3CEPTCQomYkE2tUa1/0/34352e3233322e37302e302f32332d3233203d3e20323637323530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:57:fb:cb:16:89:12:cd:00:24:8e:42:29:34:71:ac:f4:cc:
         44:59:60:ee:98:c2:3c:89:3c:37:78:6d:29:be:e0:a0:6f:f7:
         5d:84:49:41:2c:0e:3b:15:27:83:32:c8:36:16:90:b2:c0:f7:
         56:a2:3c:e2:7b:94:dd:b3:69:78:86:ab:f4:7f:fa:25:b4:68:
         90:f8:54:c5:29:6e:2b:a1:8c:32:50:da:5e:3d:3a:b5:45:32:
         a9:cf:06:33:ae:1b:9f:1c:3d:41:9d:09:e8:09:00:75:58:33:
         4c:7d:0c:b6:c0:2c:8a:e2:08:d6:2d:f7:93:73:9a:d1:93:0f:
         0b:ff:da:2d:0e:04:1a:df:92:f9:56:e6:c8:13:db:b0:e0:2f:
         87:6b:34:e7:30:41:c8:92:ff:8c:d8:c7:a5:b8:69:1d:f6:83:
         5e:5d:72:62:a5:43:2d:7d:fb:62:cd:bd:6a:30:9f:dd:10:09:
         cf:83:80:70:70:6d:9d:46:1a:87:c8:5f:34:bf:a7:53:23:b6:
         58:5c:ae:84:5f:f3:0e:32:a7:9c:62:f2:69:1a:f2:86:8f:e8:
         33:e5:cd:fd:c1:c4:76:81:29:83:f7:67:19:41:ef:e9:37:8b:
         cb:61:02:bc:af:0c:b7:a0:bd:a0:b3:1f:71:b4:28:cc:5a:80:
         37:2c:55:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:28:06 2026 by rpki-client