Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/0/34352e3137322e3139322e302f32342d3234203d3e20323731363332.roa
File:                     34352e3137322e3139322e302f32342d3234203d3e20323731363332.roa (raw, json)
Hash identifier:          /iHQrYfbnq+j+gitjj4gevZI/gWLBgLWdZTL3kWqnpE=
Subject key identifier:   40:EE:8B:1A:EC:81:39:D6:F8:F3:9D:FD:A9:37:D5:DF:CC:BB:7C:AA
Certificate issuer:       /CN=76D51A03D1CA9776BB66B9DB80A8E7A3B880DC85
Certificate serial:       4BB0BDA6F75CEC60FD5C7B955D0B3EF87215A657
Authority key identifier: 76:D5:1A:03:D1:CA:97:76:BB:66:B9:DB:80:A8:E7:A3:B8:80:DC:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76D51A03D1CA9776BB66B9DB80A8E7A3B880DC85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/0/34352e3137322e3139322e302f32342d3234203d3e20323731363332.roa
Signing time:             Thu 09 Jul 2026 22:30:39 +0000
ROA not before:           Thu 09 Jul 2026 22:25:39 +0000
ROA not after:            Thu 08 Jul 2027 22:30:39 +0000
asID:                     271632
IP address blocks:        45.172.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/0/76D51A03D1CA9776BB66B9DB80A8E7A3B880DC85.crl
                          rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/0/76D51A03D1CA9776BB66B9DB80A8E7A3B880DC85.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76D51A03D1CA9776BB66B9DB80A8E7A3B880DC85.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 13:55:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b0:bd:a6:f7:5c:ec:60:fd:5c:7b:95:5d:0b:3e:f8:72:15:a6:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76D51A03D1CA9776BB66B9DB80A8E7A3B880DC85
        Validity
            Not Before: Jul  9 22:25:39 2026 GMT
            Not After : Jul  8 22:30:39 2027 GMT
        Subject: CN=40EE8B1AEC8139D6F8F39DFDA937D5DFCCBB7CAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:72:cb:04:59:f3:e8:52:4a:16:d0:9d:df:fd:
                    41:43:fc:f1:5a:47:5a:a2:2c:52:21:f8:2a:e6:15:
                    bf:94:91:11:bf:94:e0:5d:f8:ce:e3:0c:60:df:cd:
                    66:4a:33:1a:43:c9:78:25:54:d1:d7:a8:05:e7:ce:
                    b8:34:6f:78:28:9a:2e:83:a2:ee:40:49:20:23:59:
                    66:7b:b4:e2:bd:13:82:bb:01:e3:73:a5:a0:24:b0:
                    36:b3:b9:55:8f:ce:14:e0:c4:fd:83:c7:c0:63:65:
                    22:9a:51:b2:cb:96:b9:3d:c5:fc:42:b3:af:85:41:
                    60:da:db:dc:04:18:76:85:cc:d8:d7:8b:5f:b9:63:
                    09:43:c7:46:8a:36:8a:56:63:0d:d9:c7:08:d3:37:
                    65:29:f2:76:f5:a1:0e:b9:4f:a2:03:75:a0:43:49:
                    fd:b7:45:ff:36:ee:52:f9:95:45:24:ab:17:91:4e:
                    93:6c:4f:98:00:71:9d:ce:cf:11:33:07:99:9d:ea:
                    d7:5f:db:7e:a6:31:a1:15:e8:a2:d6:20:fc:c1:31:
                    ae:29:25:b1:6c:35:71:18:7c:7f:89:5f:a5:b1:9b:
                    49:2f:ac:e9:ce:22:1f:46:27:19:f5:6b:c7:65:26:
                    e7:15:48:32:3d:b1:f0:f5:4b:78:3b:ea:5f:c1:d9:
                    31:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:EE:8B:1A:EC:81:39:D6:F8:F3:9D:FD:A9:37:D5:DF:CC:BB:7C:AA
            X509v3 Authority Key Identifier:
                keyid:76:D5:1A:03:D1:CA:97:76:BB:66:B9:DB:80:A8:E7:A3:B8:80:DC:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/0/76D51A03D1CA9776BB66B9DB80A8E7A3B880DC85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76D51A03D1CA9776BB66B9DB80A8E7A3B880DC85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/0/34352e3137322e3139322e302f32342d3234203d3e20323731363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:48:f2:1b:f6:3f:b6:7f:8f:13:7a:8a:94:04:01:3f:a2:25:
         f4:2c:ce:24:c5:68:3d:51:6c:7b:ae:a2:11:0d:d7:ec:9b:19:
         9b:2f:ca:94:60:3b:21:bf:50:0a:60:40:c6:f4:57:62:6e:f0:
         78:33:b2:af:83:d8:c9:09:29:2c:b3:77:0c:7d:28:08:77:71:
         aa:d2:4b:17:8f:42:64:a4:8a:42:ed:ca:ec:c8:46:11:a9:78:
         dc:11:68:26:0a:c1:59:01:8c:f1:7d:da:5b:b0:51:58:5b:f6:
         f6:74:ee:1f:90:77:60:aa:28:a4:7c:c7:07:dd:44:e7:04:d7:
         55:2e:8f:c0:85:72:f2:d9:63:f5:20:31:9a:5b:04:93:31:84:
         54:cf:ac:96:8d:18:68:f3:f8:8b:4a:27:d7:31:e4:18:a6:a5:
         5a:87:31:e1:f7:fb:3b:bd:87:b0:f4:cb:0a:60:7c:8c:f7:93:
         ea:22:52:f7:b0:b6:5c:71:70:8a:17:f9:84:96:0e:a6:58:3d:
         d2:f5:24:ab:75:e8:18:c9:10:64:86:b8:b9:e2:7b:82:be:cf:
         17:e8:1d:52:aa:1a:24:15:df:af:8a:90:59:30:c1:78:9e:26:
         93:a3:8b:95:70:05:cf:60:93:5a:87:7e:04:d6:b6:e3:9f:3a:
         4b:5d:2b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:27:40 2026 by rpki-client