Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/34352e3138382e37322e302f32332d3233203d3e20323639353137.roa
File:                     34352e3138382e37322e302f32332d3233203d3e20323639353137.roa (raw, json)
Hash identifier:          V2mCc5bamkhcBohfZEYkTEDLlu1J42Qo4+JU3+5Oars=
Subject key identifier:   CD:7C:4F:F7:60:32:14:B6:84:53:65:97:CA:5D:97:FC:10:F4:B9:FE
Certificate issuer:       /CN=F3FB9757ABE985717A1ED2B2112ECDA2A257E007
Certificate serial:       6C9ED4690DDE22DC1C0A0A78851C4C3CAE237DB9
Authority key identifier: F3:FB:97:57:AB:E9:85:71:7A:1E:D2:B2:11:2E:CD:A2:A2:57:E0:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/34352e3138382e37322e302f32332d3233203d3e20323639353137.roa
Signing time:             Wed 06 May 2026 17:37:02 +0000
ROA not before:           Wed 06 May 2026 17:32:02 +0000
ROA not after:            Wed 05 May 2027 17:37:02 +0000
asID:                     269517
IP address blocks:        45.188.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.crl
                          rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 15:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:9e:d4:69:0d:de:22:dc:1c:0a:0a:78:85:1c:4c:3c:ae:23:7d:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3FB9757ABE985717A1ED2B2112ECDA2A257E007
        Validity
            Not Before: May  6 17:32:02 2026 GMT
            Not After : May  5 17:37:02 2027 GMT
        Subject: CN=CD7C4FF7603214B684536597CA5D97FC10F4B9FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d9:a7:47:9e:72:39:13:29:4a:51:95:24:9c:
                    63:d2:1c:b7:e7:c0:0e:80:74:8c:1d:7b:fc:72:37:
                    6b:9a:c7:71:c7:7d:39:ef:c6:35:61:ae:67:1b:7f:
                    2f:2b:57:66:5f:26:ba:06:94:a0:19:16:41:00:db:
                    21:bc:fd:86:1a:11:29:8e:d0:c4:09:1e:62:9f:f7:
                    a7:53:3b:ae:f2:52:b2:60:03:c5:77:ad:27:cb:ce:
                    6e:f9:3c:c7:11:38:51:8f:72:48:7a:cb:0f:c6:37:
                    cd:ef:d1:dc:02:89:e8:4a:75:cf:3b:01:73:1d:52:
                    a4:38:61:ef:4c:ef:e8:ee:bf:ad:14:7c:65:f8:cf:
                    88:65:ca:24:1e:d0:c1:8a:3c:a0:f6:1e:6b:56:46:
                    a6:c5:95:c5:aa:80:47:3e:9f:21:20:28:81:2c:35:
                    4f:0d:7b:88:d6:14:69:b9:8f:70:47:e5:63:f1:e8:
                    03:f1:9b:db:0b:23:0a:ff:12:2e:07:34:4b:3e:b6:
                    2e:dd:bf:10:7f:fd:af:65:77:c1:b7:b4:48:50:a4:
                    69:ad:a2:40:09:dd:0e:50:fc:cb:3f:57:40:9a:cb:
                    99:2e:92:c4:ad:88:75:06:2c:86:54:db:1c:c5:d8:
                    e2:ff:6e:86:a6:26:64:ec:67:4d:05:db:33:66:43:
                    1e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:7C:4F:F7:60:32:14:B6:84:53:65:97:CA:5D:97:FC:10:F4:B9:FE
            X509v3 Authority Key Identifier:
                keyid:F3:FB:97:57:AB:E9:85:71:7A:1E:D2:B2:11:2E:CD:A2:A2:57:E0:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/34352e3138382e37322e302f32332d3233203d3e20323639353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:74:59:fe:76:a9:76:5c:37:75:60:94:d3:11:0e:cb:e1:fc:
         1b:b9:31:c3:64:03:70:7f:87:b2:a9:2a:a3:74:b4:78:51:56:
         b0:1d:ee:89:89:6a:86:ec:b4:98:9a:68:02:bf:19:13:06:3a:
         03:f5:57:5a:9d:42:ee:71:00:bf:7b:84:6c:87:81:d0:63:65:
         52:51:a4:09:ed:f1:0f:4b:41:a5:a8:4c:ad:b3:ac:a8:3b:6d:
         3e:33:f7:ba:4c:8f:f7:e2:05:fd:f4:8f:5a:01:4c:40:6b:d5:
         02:e6:ad:2c:22:a7:28:7b:c2:e8:4b:1f:33:b4:bf:b0:87:d9:
         ac:f0:c0:16:85:2d:3d:db:45:b2:2d:58:3d:a8:49:45:54:eb:
         83:ea:7c:74:5c:6c:b1:bf:7f:fb:a7:61:98:57:3d:de:e5:31:
         0d:a7:84:c9:1e:0c:7f:57:1e:67:b7:fc:1d:a7:06:12:17:7a:
         b3:5d:01:49:89:55:e7:a2:8a:47:8b:5b:eb:17:43:f4:d0:24:
         75:e5:4b:46:4b:c6:d2:2e:01:08:4e:14:4c:6a:c7:85:26:c3:
         7f:10:c2:10:71:60:47:cd:0f:82:80:46:85:77:cc:1e:ae:cc:
         34:17:bb:4c:0a:82:5f:83:72:5c:09:74:f8:27:ff:11:4f:c1:
         41:b8:5d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:33:55 2026 by rpki-client