Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3LaNtcJ9pc3vDf7r44kv2YDGj5UUkLgFW3pEpGtzYrej/0/34352e362e3137322e302f32322d3233203d3e20323636313339.roa
File:                     34352e362e3137322e302f32322d3233203d3e20323636313339.roa (raw, json)
Hash identifier:          np5FQHy2vK3MNaP71srZIJ2079elgMz/9WGxbpCKmhg=
Subject key identifier:   8A:3F:0D:FE:BD:1C:28:78:9E:BC:0C:06:67:04:70:C3:64:68:AE:5B
Certificate issuer:       /CN=01C410F2D199705E3E387AB99600CABA9280F155
Certificate serial:       33BE1AC00D32323FAE74EAB3366BA95C01D25594
Authority key identifier: 01:C4:10:F2:D1:99:70:5E:3E:38:7A:B9:96:00:CA:BA:92:80:F1:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01C410F2D199705E3E387AB99600CABA9280F155.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3LaNtcJ9pc3vDf7r44kv2YDGj5UUkLgFW3pEpGtzYrej/0/34352e362e3137322e302f32322d3233203d3e20323636313339.roa
Signing time:             Mon 02 Mar 2026 14:19:47 +0000
ROA not before:           Mon 02 Mar 2026 14:14:47 +0000
ROA not after:            Mon 01 Mar 2027 14:19:47 +0000
asID:                     266139
IP address blocks:        45.6.172.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3LaNtcJ9pc3vDf7r44kv2YDGj5UUkLgFW3pEpGtzYrej/0/01C410F2D199705E3E387AB99600CABA9280F155.crl
                          rsync://rpki-repo.registro.br/repo/3LaNtcJ9pc3vDf7r44kv2YDGj5UUkLgFW3pEpGtzYrej/0/01C410F2D199705E3E387AB99600CABA9280F155.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01C410F2D199705E3E387AB99600CABA9280F155.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 15:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:be:1a:c0:0d:32:32:3f:ae:74:ea:b3:36:6b:a9:5c:01:d2:55:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01C410F2D199705E3E387AB99600CABA9280F155
        Validity
            Not Before: Mar  2 14:14:47 2026 GMT
            Not After : Mar  1 14:19:47 2027 GMT
        Subject: CN=8A3F0DFEBD1C28789EBC0C06670470C36468AE5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7b:57:20:bd:39:fb:29:20:e0:da:19:9d:b3:
                    4f:bb:50:01:a0:39:bb:6f:fb:d0:f8:a5:ed:03:50:
                    e7:f6:5e:ea:39:30:df:03:6f:8a:5f:a3:3d:e6:fd:
                    f8:3c:1e:b8:5e:a2:39:49:c9:64:a3:80:78:7e:bd:
                    14:69:ac:a2:38:f5:f1:3c:90:46:16:8d:a6:e9:6b:
                    70:53:fb:53:10:5f:21:ec:0a:61:e8:19:69:55:15:
                    f8:8b:82:52:31:d5:62:51:5e:5e:c6:88:4a:13:4a:
                    07:fe:03:f2:26:a0:11:43:20:36:f2:33:47:1c:51:
                    f0:f8:a2:9b:61:54:1d:87:79:e1:a4:6b:15:c7:6d:
                    d3:10:a6:74:54:19:51:2e:ed:c9:ad:03:d8:80:2c:
                    0b:38:8f:5c:1a:c1:96:3b:7e:14:b4:7d:d5:39:dc:
                    c8:f2:56:9e:04:60:7c:52:a5:bb:65:92:a8:66:c9:
                    8e:50:83:7e:6b:d0:93:d4:08:29:02:6b:f0:cc:ee:
                    22:6a:48:4b:1a:a4:4f:69:cf:ac:a1:02:ec:14:80:
                    70:36:c3:8d:98:4b:6c:c2:f1:09:da:7b:b9:1d:1f:
                    c1:f7:ba:88:fb:d4:ac:ea:99:de:e2:20:67:43:19:
                    fb:58:98:06:7a:a6:fb:f5:0b:50:24:f0:91:ea:2f:
                    df:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:3F:0D:FE:BD:1C:28:78:9E:BC:0C:06:67:04:70:C3:64:68:AE:5B
            X509v3 Authority Key Identifier:
                keyid:01:C4:10:F2:D1:99:70:5E:3E:38:7A:B9:96:00:CA:BA:92:80:F1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3LaNtcJ9pc3vDf7r44kv2YDGj5UUkLgFW3pEpGtzYrej/0/01C410F2D199705E3E387AB99600CABA9280F155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01C410F2D199705E3E387AB99600CABA9280F155.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3LaNtcJ9pc3vDf7r44kv2YDGj5UUkLgFW3pEpGtzYrej/0/34352e362e3137322e302f32322d3233203d3e20323636313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:24:84:95:c3:24:47:c5:bd:d7:a4:c8:30:4d:93:5d:3b:4c:
         a6:6d:03:fd:42:95:26:60:47:9f:5f:f1:33:b8:20:86:db:8e:
         d9:16:3b:05:bf:94:d9:a3:0b:57:bb:1d:17:6f:02:d4:f6:39:
         50:76:91:f8:e0:7d:7f:08:cb:1c:d0:11:b3:6b:8b:1e:76:41:
         cc:af:31:8d:f4:5e:94:ce:e1:e1:30:4f:6b:25:2d:44:83:de:
         bf:5c:96:e0:21:05:6d:fa:19:4a:04:03:3c:43:35:b2:fd:d5:
         74:60:0e:60:ff:57:d6:a4:24:48:10:95:f8:7d:cf:7a:df:76:
         82:79:ba:41:bf:6f:ad:49:db:02:82:3a:54:19:0d:6b:11:75:
         2a:2a:79:65:f5:b6:28:b2:4c:76:49:88:dd:95:39:f7:a8:ab:
         78:c7:c9:9a:46:ef:6f:3b:23:ab:0e:cf:7c:96:5f:d7:a8:ba:
         ee:3f:2a:c7:30:d6:3d:1a:05:92:28:0e:05:fd:81:95:53:44:
         a3:09:ca:f2:65:87:02:59:54:20:b9:44:f8:ea:81:1d:c7:41:
         53:43:1e:0e:98:36:79:49:c1:e4:21:19:bf:5a:c7:80:5d:9d:
         ea:d7:04:9a:52:64:67:e1:52:27:3e:ec:90:af:5a:2c:ea:9e:
         54:56:ac:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:53:36 2026 by rpki-client