Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3PTYDW3BMMieeMXTwEvGX46C4RZqWqhFJZRsLNzUCErH/0/34352e3233382e3136322e302f32332d3233203d3e20323638333437.roa
File:                     34352e3233382e3136322e302f32332d3233203d3e20323638333437.roa (raw, json)
Hash identifier:          EiOJgSr1eZRrgZTM8Xm9nlJMTGqPBZWuIO7IQGbha1Q=
Subject key identifier:   A1:B1:7F:7F:69:96:8C:0F:03:7E:69:93:21:84:A8:23:DF:37:F3:B7
Certificate issuer:       /CN=EA0C6D51FF8F6FAC2DB3B50E8262EE397B63E901
Certificate serial:       5E235E3CF68A37B6BE7B288C3D2989399C0AAE50
Authority key identifier: EA:0C:6D:51:FF:8F:6F:AC:2D:B3:B5:0E:82:62:EE:39:7B:63:E9:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA0C6D51FF8F6FAC2DB3B50E8262EE397B63E901.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3PTYDW3BMMieeMXTwEvGX46C4RZqWqhFJZRsLNzUCErH/0/34352e3233382e3136322e302f32332d3233203d3e20323638333437.roa
Signing time:             Fri 24 Jul 2026 05:21:44 +0000
ROA not before:           Fri 24 Jul 2026 05:16:44 +0000
ROA not after:            Fri 23 Jul 2027 05:21:44 +0000
asID:                     268347
IP address blocks:        45.238.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3PTYDW3BMMieeMXTwEvGX46C4RZqWqhFJZRsLNzUCErH/0/EA0C6D51FF8F6FAC2DB3B50E8262EE397B63E901.crl
                          rsync://rpki-repo.registro.br/repo/3PTYDW3BMMieeMXTwEvGX46C4RZqWqhFJZRsLNzUCErH/0/EA0C6D51FF8F6FAC2DB3B50E8262EE397B63E901.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA0C6D51FF8F6FAC2DB3B50E8262EE397B63E901.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Jul 2026 23:31:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:23:5e:3c:f6:8a:37:b6:be:7b:28:8c:3d:29:89:39:9c:0a:ae:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA0C6D51FF8F6FAC2DB3B50E8262EE397B63E901
        Validity
            Not Before: Jul 24 05:16:44 2026 GMT
            Not After : Jul 23 05:21:44 2027 GMT
        Subject: CN=A1B17F7F69968C0F037E69932184A823DF37F3B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7a:00:0b:1e:70:98:17:96:e6:e5:d5:02:d0:
                    fa:4f:a6:6c:9d:d6:ef:16:5b:f6:eb:24:56:05:8c:
                    f8:04:e2:39:21:84:00:bb:4f:62:cb:ac:6c:67:5b:
                    0f:e6:b5:15:fa:a4:7d:51:5a:02:99:0b:35:86:15:
                    29:48:e9:b4:3c:48:25:9b:2c:c9:93:b7:81:04:a9:
                    bb:4d:b1:0f:00:91:5b:59:ed:a7:b7:53:eb:5c:73:
                    17:6e:cb:25:40:4d:f8:a9:ac:8b:9a:af:35:97:df:
                    73:cc:e6:e6:32:a7:df:d0:98:a1:34:65:c6:62:1e:
                    4b:8c:f6:50:6b:96:5e:52:57:d8:c8:f1:d3:74:73:
                    fd:b6:a2:af:17:3a:3e:a6:f0:65:78:9f:cc:df:6d:
                    ce:b4:c6:3a:63:09:2e:db:89:78:e7:26:cb:0d:b2:
                    78:32:3b:ab:9c:bb:b8:f8:d3:5a:fa:55:d5:6f:2c:
                    18:c8:dc:c3:2c:6c:44:fb:d2:d5:c1:82:47:08:03:
                    fd:08:7c:5d:40:c1:ba:b9:2b:f0:55:58:f4:22:3c:
                    e6:a2:af:16:c9:a3:a8:1b:bf:29:c8:87:ae:56:ac:
                    6c:10:fc:e9:70:59:10:2e:38:b6:5d:9c:4f:4c:1b:
                    d7:57:fc:eb:ec:66:82:7e:62:9e:6c:62:d6:89:7a:
                    6e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B1:7F:7F:69:96:8C:0F:03:7E:69:93:21:84:A8:23:DF:37:F3:B7
            X509v3 Authority Key Identifier:
                keyid:EA:0C:6D:51:FF:8F:6F:AC:2D:B3:B5:0E:82:62:EE:39:7B:63:E9:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3PTYDW3BMMieeMXTwEvGX46C4RZqWqhFJZRsLNzUCErH/0/EA0C6D51FF8F6FAC2DB3B50E8262EE397B63E901.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA0C6D51FF8F6FAC2DB3B50E8262EE397B63E901.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3PTYDW3BMMieeMXTwEvGX46C4RZqWqhFJZRsLNzUCErH/0/34352e3233382e3136322e302f32332d3233203d3e20323638333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:f8:cf:a0:bd:22:46:95:03:8e:da:ab:33:ae:e1:90:59:6b:
         73:a2:23:9a:85:20:3b:eb:49:16:ae:29:4d:ae:c9:b2:8f:ea:
         41:6e:fe:6a:1c:c4:9e:73:a0:30:ea:4e:8e:6a:73:1e:63:53:
         f1:2a:9c:13:c1:0a:54:0e:76:1a:da:d8:82:81:e9:91:c8:85:
         08:8b:97:87:d9:f6:b1:c7:a1:7d:8d:1d:7f:41:76:e2:64:c8:
         fb:e8:f0:3b:3b:b1:6d:b1:11:3b:65:71:dc:ad:ed:e0:a7:4a:
         e1:ee:d3:c1:ca:9f:f9:f7:c1:c4:23:9f:d6:90:6f:23:87:27:
         74:87:77:9f:e6:fd:71:e0:96:8c:b9:66:b4:9f:85:d7:0b:ce:
         f9:91:3e:d6:c8:cb:71:14:dc:d1:e3:ad:5a:1c:06:43:f0:1c:
         4c:e3:a8:98:50:dd:c3:03:f3:03:54:eb:d3:88:8a:23:e6:c0:
         e2:bf:08:6c:b4:fe:d2:18:b2:bb:1d:ee:19:45:1d:70:bf:b7:
         8a:1c:0a:15:7e:72:01:7c:fb:09:86:d1:f6:5a:bb:71:f5:d9:
         89:10:12:9e:58:90:b9:f1:0e:3a:65:a4:96:f3:36:e2:cd:6f:
         b3:b9:3b:9e:ad:51:4f:c1:41:3a:d5:c0:2b:84:a4:93:60:a3:
         80:92:99:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:38:18 2026 by rpki-client