Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/0/34352e3137322e3230362e302f32342d3234203d3e20323638373837.roa
File:                     34352e3137322e3230362e302f32342d3234203d3e20323638373837.roa (raw, json)
Hash identifier:          IAPxIJSVzHJOE7qhE6wHeSKwALZNLvmMfxH/vKO7C2I=
Subject key identifier:   3C:3F:53:27:8E:C0:12:7F:4E:D7:14:CF:30:19:BA:65:51:11:92:5E
Certificate issuer:       /CN=C580056AB029AC3AF008F0645E34ED32ECFADF01
Certificate serial:       01C900AB9BE7BED5BF6695E1D4AB96E5779A0280
Authority key identifier: C5:80:05:6A:B0:29:AC:3A:F0:08:F0:64:5E:34:ED:32:EC:FA:DF:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C580056AB029AC3AF008F0645E34ED32ECFADF01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/0/34352e3137322e3230362e302f32342d3234203d3e20323638373837.roa
Signing time:             Fri 17 Jul 2026 11:54:11 +0000
ROA not before:           Fri 17 Jul 2026 11:49:11 +0000
ROA not after:            Fri 16 Jul 2027 11:54:11 +0000
asID:                     268787
IP address blocks:        45.172.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/0/C580056AB029AC3AF008F0645E34ED32ECFADF01.crl
                          rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/0/C580056AB029AC3AF008F0645E34ED32ECFADF01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C580056AB029AC3AF008F0645E34ED32ECFADF01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 08:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c9:00:ab:9b:e7:be:d5:bf:66:95:e1:d4:ab:96:e5:77:9a:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C580056AB029AC3AF008F0645E34ED32ECFADF01
        Validity
            Not Before: Jul 17 11:49:11 2026 GMT
            Not After : Jul 16 11:54:11 2027 GMT
        Subject: CN=3C3F53278EC0127F4ED714CF3019BA655111925E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:03:84:26:9d:ba:45:f0:0b:dd:0e:f8:98:51:
                    de:89:20:41:41:90:ae:2d:25:17:c2:93:d6:92:21:
                    f5:d3:dd:6c:d7:6a:60:83:88:d4:9d:f4:8c:e9:b7:
                    c3:b3:79:89:69:fb:e7:70:f0:d6:33:f6:7b:45:73:
                    d4:c0:1a:ae:e7:f8:2c:21:8e:14:77:2a:6e:fa:b1:
                    29:3e:9d:be:7f:e0:54:ee:ba:ff:7d:c4:67:1b:9d:
                    32:cf:98:c2:ed:09:84:78:cd:40:a2:0f:5d:50:b8:
                    9a:11:b7:36:4f:90:7a:ff:88:37:52:45:ef:64:fc:
                    51:75:14:a7:94:2a:f2:eb:48:da:e2:88:35:cd:a1:
                    07:82:fb:54:99:ed:45:4d:fa:8d:80:fc:64:3d:32:
                    8c:6e:e8:69:a1:8e:40:0b:21:89:49:e8:7a:22:4b:
                    05:e4:3b:8f:c1:e0:a2:12:13:25:a4:de:ca:97:04:
                    7d:cb:0a:f6:0c:da:9c:68:a4:80:2e:d1:5b:fd:e7:
                    9f:d5:6c:79:91:d5:83:3d:1f:2e:31:b1:35:a6:14:
                    10:78:17:35:4e:f1:31:4d:4d:75:f9:f6:5d:1f:a7:
                    88:88:04:1c:2a:24:ac:a3:66:c2:77:f5:2c:25:2d:
                    ec:1d:50:00:3a:25:28:41:a1:23:14:8c:01:68:93:
                    b2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:3F:53:27:8E:C0:12:7F:4E:D7:14:CF:30:19:BA:65:51:11:92:5E
            X509v3 Authority Key Identifier:
                keyid:C5:80:05:6A:B0:29:AC:3A:F0:08:F0:64:5E:34:ED:32:EC:FA:DF:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/0/C580056AB029AC3AF008F0645E34ED32ECFADF01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C580056AB029AC3AF008F0645E34ED32ECFADF01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/0/34352e3137322e3230362e302f32342d3234203d3e20323638373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:1b:0d:0e:90:b2:97:ec:13:8f:b2:93:39:3b:28:68:28:e1:
         38:c3:2b:20:15:e6:a6:57:4d:74:83:e8:d6:ee:8c:13:11:f7:
         68:37:a0:cd:78:d1:e7:be:e4:42:ae:81:44:43:44:3e:e1:e7:
         d5:17:a3:65:2d:85:d6:40:e4:e5:8e:42:8f:12:2f:53:68:4e:
         36:ed:2f:d2:bb:09:2e:88:94:d4:ad:71:f8:5b:e5:8c:38:07:
         e7:d3:ae:c5:a3:8a:17:7d:9b:fb:40:93:6e:73:59:f5:7c:d9:
         82:3d:a6:87:dd:38:4b:f1:82:3e:10:da:51:00:64:b3:b1:44:
         88:c6:a8:e7:5d:41:24:cc:28:03:a9:83:da:e2:8d:bb:ca:07:
         eb:cf:45:59:f4:1d:d2:39:c9:e8:76:f2:b1:28:9d:41:c1:2e:
         59:83:f4:78:fc:4c:47:af:c3:91:43:c6:cf:a4:0b:35:2f:de:
         1f:ab:2e:fa:3d:33:50:af:bb:2d:eb:93:b5:74:6a:ee:ce:92:
         aa:6a:06:30:b4:1c:fa:c9:8f:59:e6:21:8c:ac:56:68:06:21:
         99:c9:a1:be:43:05:57:d4:fb:7d:c0:c7:52:64:3c:7b:9a:97:
         4c:73:79:2a:7d:9e:0a:ae:65:d7:cc:23:28:6d:54:2c:89:18:
         a0:e2:c9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:11:29 2026 by rpki-client