Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/34352e3233392e3130302e302f32322d3234203d3e203631393432.roa
File:                     34352e3233392e3130302e302f32322d3234203d3e203631393432.roa (raw, json)
Hash identifier:          LUDr48xTpx4WCKeX1gnuj4FThy0qQoXGwUVL2TBdP10=
Subject key identifier:   D9:4C:BE:7B:89:7A:9E:2B:D9:3D:7E:7C:67:B9:7E:08:41:75:D4:9D
Certificate issuer:       /CN=0EC8EAC7F1F5A216824B37118697748825F314D9
Certificate serial:       056ABF539EC79E40E26E8BC12B64696B705D77A7
Authority key identifier: 0E:C8:EA:C7:F1:F5:A2:16:82:4B:37:11:86:97:74:88:25:F3:14:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/34352e3233392e3130302e302f32322d3234203d3e203631393432.roa
Signing time:             Mon 23 Feb 2026 15:04:36 +0000
ROA not before:           Mon 23 Feb 2026 14:59:36 +0000
ROA not after:            Mon 22 Feb 2027 15:04:36 +0000
asID:                     61942
IP address blocks:        45.239.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.crl
                          rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 10:04:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:6a:bf:53:9e:c7:9e:40:e2:6e:8b:c1:2b:64:69:6b:70:5d:77:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EC8EAC7F1F5A216824B37118697748825F314D9
        Validity
            Not Before: Feb 23 14:59:36 2026 GMT
            Not After : Feb 22 15:04:36 2027 GMT
        Subject: CN=D94CBE7B897A9E2BD93D7E7C67B97E084175D49D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6a:2c:c7:2c:1c:9c:6b:d7:d0:69:80:4b:08:
                    24:3f:6c:e4:c1:47:f2:2a:a4:f1:2f:91:a9:d9:6e:
                    c3:17:e3:c9:52:ca:43:7f:b6:50:42:67:b4:95:a9:
                    4b:cd:2e:e5:48:25:59:4c:3e:38:1e:3f:12:3d:f7:
                    4c:f2:26:c9:4f:4f:7c:b3:d2:e1:de:07:bd:34:2b:
                    05:24:1c:70:73:08:d6:27:06:ac:62:36:02:08:a4:
                    e2:31:6b:57:ed:da:cf:43:5a:24:d8:a8:f1:04:b8:
                    00:08:94:34:b3:50:86:5a:2d:d2:37:85:b2:5f:30:
                    74:de:c6:f0:6b:c0:38:d7:69:6a:6c:6e:3e:c7:69:
                    c5:c1:fb:e1:a9:05:f1:ac:66:54:98:97:5c:69:52:
                    16:a9:64:c4:e4:b7:23:54:80:bd:e5:1b:3c:24:4c:
                    9d:56:fb:4b:42:f3:15:6e:f2:2c:89:8a:4d:bd:e4:
                    08:17:f7:e2:45:74:d9:b5:c2:68:fe:87:bf:29:5c:
                    cd:89:11:92:45:68:f2:7e:7c:71:a1:d7:d4:51:4e:
                    85:ba:1a:0e:6b:44:17:a1:e5:18:39:55:e3:f6:d0:
                    08:fe:36:6f:d0:13:f0:67:45:18:8f:bb:86:66:9b:
                    b0:da:00:ca:17:d0:c2:58:63:1e:77:22:ac:e0:2d:
                    18:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:4C:BE:7B:89:7A:9E:2B:D9:3D:7E:7C:67:B9:7E:08:41:75:D4:9D
            X509v3 Authority Key Identifier:
                keyid:0E:C8:EA:C7:F1:F5:A2:16:82:4B:37:11:86:97:74:88:25:F3:14:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/34352e3233392e3130302e302f32322d3234203d3e203631393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:03:00:37:87:5b:40:54:6c:d7:83:f3:14:7e:f0:13:81:83:
         bc:22:72:a1:24:21:5e:df:36:63:61:e9:e4:e1:47:57:94:9e:
         2b:a8:8c:f5:87:d6:a4:d2:3b:28:f0:1b:b0:a8:b5:78:9a:c9:
         09:ce:50:26:56:39:c6:de:7a:4c:7e:c3:81:12:50:fc:ca:45:
         17:4d:5d:50:04:81:7e:66:df:79:de:75:2c:37:2a:1f:ad:7b:
         83:ce:5d:73:b8:46:24:e9:ae:c0:a7:89:4a:f9:cf:44:42:e6:
         bd:0c:bf:3b:37:6e:65:ce:56:b9:6f:ee:1c:44:94:7b:d3:d5:
         f3:7b:ab:97:dc:09:4b:d3:28:da:73:18:89:9a:fd:62:ec:63:
         6b:55:de:be:e5:46:c7:51:6f:cc:93:2c:df:e1:65:db:be:4d:
         5b:db:c8:9e:d5:a9:53:76:fd:06:47:80:a4:24:f4:c1:7a:5a:
         c3:db:85:40:f2:e6:4d:6e:a8:03:bb:dc:26:82:a9:99:a7:5e:
         be:80:8d:52:d1:8d:d0:18:eb:0b:06:76:d8:81:79:a5:8f:02:
         ef:89:c7:10:4e:1c:b9:68:37:66:b2:2d:93:c9:71:de:cb:e7:
         31:56:d8:28:7a:0f:12:66:c8:c8:87:20:af:3f:5f:9f:ff:6e:
         88:bf:d8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:18:59 2026 by rpki-client