Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/34352e3233362e35302e302f32342d3234203d3e20323638323035.roa
File:                     34352e3233362e35302e302f32342d3234203d3e20323638323035.roa (raw, json)
Hash identifier:          uEI/Pc7T9T4L6s0WTzsrOQlPb9MufOEv4eKIWpm+wSM=
Subject key identifier:   74:74:2F:07:D8:35:51:2C:50:3B:14:4C:4A:B2:57:88:9A:A7:F3:18
Certificate issuer:       /CN=E623553538E00E63657BFD8F27CC352EDDF522D9
Certificate serial:       4DB99B3A959E148821D0BEFB204DA02512262110
Authority key identifier: E6:23:55:35:38:E0:0E:63:65:7B:FD:8F:27:CC:35:2E:DD:F5:22:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E623553538E00E63657BFD8F27CC352EDDF522D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/34352e3233362e35302e302f32342d3234203d3e20323638323035.roa
Signing time:             Thu 02 Jul 2026 22:19:04 +0000
ROA not before:           Thu 02 Jul 2026 22:14:04 +0000
ROA not after:            Thu 01 Jul 2027 22:19:04 +0000
asID:                     268205
IP address blocks:        45.236.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.crl
                          rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E623553538E00E63657BFD8F27CC352EDDF522D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 07:55:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:b9:9b:3a:95:9e:14:88:21:d0:be:fb:20:4d:a0:25:12:26:21:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E623553538E00E63657BFD8F27CC352EDDF522D9
        Validity
            Not Before: Jul  2 22:14:04 2026 GMT
            Not After : Jul  1 22:19:04 2027 GMT
        Subject: CN=74742F07D835512C503B144C4AB257889AA7F318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fe:c7:66:59:34:b4:42:bc:8b:34:35:35:ac:
                    52:03:c2:23:67:68:7b:86:05:d3:c1:4d:31:89:8f:
                    95:c8:ee:fa:ad:14:0a:c6:1a:18:e2:11:f1:76:bb:
                    3a:ec:1d:b6:c2:05:15:58:c8:36:5a:1a:6c:7a:7e:
                    5e:1a:8a:bc:69:ea:3e:b4:3c:af:82:2f:50:ea:16:
                    4c:7e:cd:b8:eb:10:bd:87:9a:26:53:fa:60:43:23:
                    63:11:73:13:50:04:25:83:cd:e8:7d:2b:c4:a8:06:
                    22:37:71:be:87:e7:a2:5b:b8:ff:68:da:41:a8:4d:
                    26:92:74:b4:58:26:8b:c3:c8:1e:09:80:7b:8b:9b:
                    1f:52:46:6b:46:cf:df:47:3d:ec:96:d5:b6:d0:12:
                    f0:23:f0:27:b8:af:c4:b2:ff:7e:b8:de:7b:bf:d5:
                    57:1e:58:87:25:06:61:92:bb:fb:b5:d1:10:fc:4c:
                    d0:13:55:23:0a:0c:c0:e2:b8:fb:28:5a:3b:5a:7d:
                    f3:98:60:b6:0d:37:47:42:cd:bf:d5:76:2c:4d:f8:
                    9b:35:d6:80:9a:b1:06:7a:fa:d3:d9:3c:1d:4a:3b:
                    91:ee:6f:1d:ae:99:a7:c3:10:bc:de:49:d1:23:ba:
                    55:23:d0:03:58:38:43:53:73:32:9e:b0:4d:9b:33:
                    a7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:74:2F:07:D8:35:51:2C:50:3B:14:4C:4A:B2:57:88:9A:A7:F3:18
            X509v3 Authority Key Identifier:
                keyid:E6:23:55:35:38:E0:0E:63:65:7B:FD:8F:27:CC:35:2E:DD:F5:22:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E623553538E00E63657BFD8F27CC352EDDF522D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/34352e3233362e35302e302f32342d3234203d3e20323638323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:23:45:0c:25:7c:39:5a:63:4d:16:6f:78:7e:84:75:3b:1b:
         97:18:b0:d4:c2:4c:c7:8e:ff:95:41:22:7a:32:be:2a:17:ff:
         fd:6c:cf:5a:68:ee:da:ce:a0:2b:58:ef:9b:25:a7:0e:ec:62:
         2e:74:5a:96:52:b6:5c:9c:c5:7d:ca:0b:7b:d0:29:86:ce:95:
         bf:2c:24:23:a7:4a:fc:f4:51:8d:b0:16:79:a2:89:4c:24:99:
         fb:72:d7:68:58:22:84:66:38:31:8e:43:c6:60:27:3c:02:8b:
         b1:2a:ea:fb:b3:8a:70:61:f5:0a:84:b1:c3:c3:99:d7:a7:1f:
         bd:09:30:d6:27:84:9c:a8:75:8f:fd:26:d0:d0:f3:33:40:3d:
         bf:21:6a:61:33:db:a0:eb:07:9b:6b:6d:24:62:a5:54:5f:68:
         b9:dd:93:d0:06:b3:52:87:ac:5b:20:cc:8d:4c:fd:75:3d:9a:
         7d:65:24:8f:a4:3d:ab:b8:ac:de:33:e4:20:53:36:46:f0:1b:
         bf:22:1f:af:f5:0b:b7:a2:61:9b:b5:71:40:74:28:1d:d2:3f:
         43:c2:a2:e1:02:fb:09:63:f3:65:11:ec:82:f2:62:72:d5:02:
         45:74:2a:fe:2a:de:af:e5:c2:c9:f5:3f:b7:28:1d:1e:4b:96:
         1f:a0:40:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:43:10 2026 by rpki-client