Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/0/34352e352e3234342e302f32322d3332203d3e20323636313130.roa
File:                     34352e352e3234342e302f32322d3332203d3e20323636313130.roa (raw, json)
Hash identifier:          YokPYCFlSXo3z+XvprHR3N8EEAffWX314itsDVxw+aI=
Subject key identifier:   54:E2:0F:CC:12:AA:41:A1:E8:E5:4A:85:01:94:60:23:4D:03:1A:88
Certificate issuer:       /CN=9CF4F570E3A766751DA881F56F05A7C38CFE1867
Certificate serial:       40B593D44755ED3AF602EC11798DC1FA99FF8438
Authority key identifier: 9C:F4:F5:70:E3:A7:66:75:1D:A8:81:F5:6F:05:A7:C3:8C:FE:18:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CF4F570E3A766751DA881F56F05A7C38CFE1867.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/0/34352e352e3234342e302f32322d3332203d3e20323636313130.roa
Signing time:             Mon 23 Mar 2026 00:28:11 +0000
ROA not before:           Mon 23 Mar 2026 00:23:11 +0000
ROA not after:            Mon 22 Mar 2027 00:28:11 +0000
asID:                     266110
IP address blocks:        45.5.244.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/0/9CF4F570E3A766751DA881F56F05A7C38CFE1867.crl
                          rsync://rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/0/9CF4F570E3A766751DA881F56F05A7C38CFE1867.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CF4F570E3A766751DA881F56F05A7C38CFE1867.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 19:37:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b5:93:d4:47:55:ed:3a:f6:02:ec:11:79:8d:c1:fa:99:ff:84:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CF4F570E3A766751DA881F56F05A7C38CFE1867
        Validity
            Not Before: Mar 23 00:23:11 2026 GMT
            Not After : Mar 22 00:28:11 2027 GMT
        Subject: CN=54E20FCC12AA41A1E8E54A85019460234D031A88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9a:e1:79:27:37:0f:90:29:9e:9f:e4:07:45:
                    a5:bb:98:a0:28:68:00:e2:ce:42:34:28:b2:af:00:
                    cf:74:5f:2d:ad:27:d0:af:80:05:57:db:06:a2:4d:
                    7e:ec:1e:d8:65:2d:8e:5c:7c:5d:7a:08:a9:19:d0:
                    73:dc:42:48:85:4d:5c:83:8d:46:53:d9:67:37:a9:
                    cf:3e:30:de:93:42:ea:57:a2:02:fd:1e:16:89:57:
                    00:dc:6c:e3:86:b6:9e:8e:59:d3:fd:13:0d:9a:cd:
                    eb:8a:8b:9e:5f:ab:59:04:a8:5a:8f:2c:c1:c3:52:
                    56:af:3e:93:09:71:04:da:b7:56:4b:e4:ef:18:c9:
                    cc:98:fd:af:d7:1f:21:dc:81:a3:bc:af:da:e1:fe:
                    53:b1:87:93:a9:2a:2a:1f:58:1a:63:8c:45:54:63:
                    dd:33:f4:ea:34:94:4e:24:6d:68:e3:b4:de:4b:c1:
                    29:3a:4b:19:1b:07:99:f0:0d:f8:4e:e3:ec:b4:c4:
                    f3:ae:ff:59:8d:c2:07:ba:02:b4:7e:8d:f1:af:68:
                    fd:a3:b6:6e:c7:ed:47:89:9a:68:50:2e:64:5d:3a:
                    f6:dc:f0:ec:39:d1:b6:39:da:d1:c2:ed:87:76:5b:
                    16:f5:3c:aa:73:b3:bb:4b:97:48:04:e9:1a:bb:2e:
                    8e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E2:0F:CC:12:AA:41:A1:E8:E5:4A:85:01:94:60:23:4D:03:1A:88
            X509v3 Authority Key Identifier:
                keyid:9C:F4:F5:70:E3:A7:66:75:1D:A8:81:F5:6F:05:A7:C3:8C:FE:18:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/0/9CF4F570E3A766751DA881F56F05A7C38CFE1867.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CF4F570E3A766751DA881F56F05A7C38CFE1867.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/0/34352e352e3234342e302f32322d3332203d3e20323636313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:07:41:00:0f:5c:0a:a9:11:5c:43:06:a5:44:66:cd:30:91:
         36:eb:43:b0:68:6a:38:cc:a3:5a:4d:11:e7:e2:ec:6a:1f:20:
         b4:f4:c5:4e:53:0d:c0:16:f1:5f:f5:0f:8b:be:ff:82:26:2a:
         7e:af:7c:fc:a2:8c:e4:b0:b5:80:24:d5:d9:cb:97:19:dc:e8:
         fc:56:90:e0:ca:7a:43:f1:aa:49:94:84:51:20:ef:e2:76:43:
         ec:38:79:f3:3d:fb:b7:58:09:a2:3c:eb:64:79:a7:cb:28:f6:
         9a:e3:99:21:8a:1a:22:20:d2:87:0d:2e:e6:4d:58:b5:e0:73:
         05:de:df:28:ac:c1:31:7f:fd:40:44:a0:18:09:9a:0c:40:48:
         ab:e5:31:d8:e0:89:08:93:3b:45:de:c8:8e:0f:de:79:01:12:
         7c:14:72:0c:fe:24:ae:a8:6a:81:d4:43:99:0d:4e:ac:e5:33:
         02:4e:3a:8e:de:3e:c4:c8:8c:26:c2:02:fc:ac:ee:e5:9d:b9:
         04:6c:c3:1b:b9:bf:df:6c:ae:7c:e3:ad:fd:49:fe:c7:7e:c1:
         98:e7:76:a9:59:09:5a:a7:f3:3e:54:5d:36:ec:72:35:d7:fd:
         ce:60:6f:70:de:8f:b3:c8:85:0f:91:b3:11:e7:2f:ac:cb:52:
         9a:40:b3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:12:56 2026 by rpki-client