Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/34352e3137322e3230342e302f32322d3234203d3e20323638373837.roa
File:                     34352e3137322e3230342e302f32322d3234203d3e20323638373837.roa (raw, json)
Hash identifier:          Xvt+KmkpuZBDY4sNvArtEHSiSYyKv1lwfIljJMyQpMU=
Subject key identifier:   B3:CC:14:55:5F:F8:71:53:13:F9:A7:B3:68:37:2D:83:9C:9A:BB:AE
Certificate issuer:       /CN=E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4
Certificate serial:       70522A28188F6F43D64CD92F6B326B6C3BA4A18C
Authority key identifier: E5:16:A2:D9:41:B6:2A:BE:AE:8B:B7:B1:59:4A:0D:1B:AF:47:58:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/34352e3137322e3230342e302f32322d3234203d3e20323638373837.roa
Signing time:             Thu 26 Mar 2026 11:14:55 +0000
ROA not before:           Thu 26 Mar 2026 11:09:55 +0000
ROA not after:            Thu 25 Mar 2027 11:14:55 +0000
asID:                     268787
IP address blocks:        45.172.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.crl
                          rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 11:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:52:2a:28:18:8f:6f:43:d6:4c:d9:2f:6b:32:6b:6c:3b:a4:a1:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4
        Validity
            Not Before: Mar 26 11:09:55 2026 GMT
            Not After : Mar 25 11:14:55 2027 GMT
        Subject: CN=B3CC14555FF8715313F9A7B368372D839C9ABBAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:70:d1:57:e4:43:bb:eb:bf:91:2e:09:16:90:
                    eb:7d:f0:d8:7f:f1:92:9c:aa:c8:b0:56:00:4f:21:
                    e4:fa:4d:f3:ee:2d:74:dc:fb:59:6b:f7:39:46:84:
                    f9:c7:bc:eb:bf:c0:41:d7:6f:cc:cc:63:2a:6e:1c:
                    1d:53:54:29:0f:57:2e:9c:95:97:9a:21:d2:94:22:
                    c2:24:cc:b0:07:52:be:ac:20:f2:b4:a8:b8:d2:5f:
                    d3:f2:21:a7:b4:a5:13:39:ff:c7:2c:7a:5f:a5:c4:
                    db:af:ed:7d:c4:92:f8:2a:4a:05:d6:a8:f2:60:65:
                    c4:f2:48:b3:db:a9:62:b0:75:e8:67:40:6a:a2:45:
                    fc:b3:47:37:32:76:d1:4b:bc:84:6a:12:6b:4e:f7:
                    5f:78:8d:b7:82:02:8b:c0:ba:93:64:e5:18:e6:d6:
                    8f:ae:bf:00:d9:31:9d:67:5c:e3:ce:77:aa:90:d6:
                    5f:06:55:b8:02:bd:03:96:07:0f:76:ec:76:fd:52:
                    a5:3c:31:1f:10:9d:fd:bb:de:78:a7:4b:aa:0c:77:
                    41:2a:94:52:36:51:e4:b7:a1:18:e0:2c:97:bf:c4:
                    06:ec:62:02:79:01:b5:3b:c8:0f:18:3a:23:9c:87:
                    e2:b9:f2:78:84:60:9d:0b:1e:1e:c7:ff:d3:d2:56:
                    d2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:CC:14:55:5F:F8:71:53:13:F9:A7:B3:68:37:2D:83:9C:9A:BB:AE
            X509v3 Authority Key Identifier:
                keyid:E5:16:A2:D9:41:B6:2A:BE:AE:8B:B7:B1:59:4A:0D:1B:AF:47:58:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/34352e3137322e3230342e302f32322d3234203d3e20323638373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:93:00:9d:4f:f9:fb:00:0c:42:87:6d:e3:4c:7c:2a:c4:cb:
         38:ed:bf:e7:73:26:84:2b:e8:20:1e:94:e9:6f:f3:b6:17:72:
         98:30:a9:5b:00:88:99:70:f7:4f:7a:83:84:ce:19:1e:3d:f3:
         6c:59:e8:66:a3:fe:e9:8e:a6:87:d2:a8:e9:56:0d:d2:30:95:
         d5:da:58:06:19:73:2e:1b:e5:b6:ef:65:be:a2:c6:66:ef:2d:
         b3:3b:85:16:34:da:52:8e:11:88:2e:60:bb:8f:aa:a9:0b:49:
         a9:fe:40:64:ea:32:d6:36:5e:e6:17:bf:84:6b:4d:49:24:39:
         97:e2:8e:c6:cc:1c:4b:61:e3:28:b5:2a:69:2a:2c:ff:2c:79:
         c7:04:77:79:26:09:1a:ae:72:66:86:e0:14:9a:e5:39:31:47:
         a3:49:b0:4b:f0:5b:9d:87:2e:4e:d7:84:6d:fe:2a:79:bf:3a:
         55:27:2b:b6:ec:01:b5:b0:28:19:b1:7f:7f:37:83:69:f2:16:
         79:68:79:ab:5b:15:48:40:53:82:a2:34:87:50:99:f8:a1:c7:
         47:40:ce:22:7e:6d:78:06:c7:99:f3:91:7f:ee:64:8b:c3:08:
         2c:b1:f2:5a:80:d9:05:4a:df:c9:a2:ac:0c:d6:45:83:b7:d5:
         87:cc:15:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:20:21 2026 by rpki-client