Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/34352e3138342e3139382e302f32332d3233203d3e20323639333432.roa
File:                     34352e3138342e3139382e302f32332d3233203d3e20323639333432.roa (raw, json)
Hash identifier:          vhgdsDEoJLHH+0PKQFkmkpRa4qPDbG2rPQbuYqUedmQ=
Subject key identifier:   3A:0B:77:2F:2D:CA:B4:31:3C:19:BA:8A:E0:75:A2:C8:67:8C:C4:16
Certificate issuer:       /CN=DDEDE0E3E533477AAAB19E2CB811C826B145F53E
Certificate serial:       281B1714AFA93D410BDC0A14B049F53F5B168E8B
Authority key identifier: DD:ED:E0:E3:E5:33:47:7A:AA:B1:9E:2C:B8:11:C8:26:B1:45:F5:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDEDE0E3E533477AAAB19E2CB811C826B145F53E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/34352e3138342e3139382e302f32332d3233203d3e20323639333432.roa
Signing time:             Fri 05 Jun 2026 11:03:48 +0000
ROA not before:           Fri 05 Jun 2026 10:58:48 +0000
ROA not after:            Fri 04 Jun 2027 11:03:48 +0000
asID:                     269342
IP address blocks:        45.184.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/DDEDE0E3E533477AAAB19E2CB811C826B145F53E.crl
                          rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/DDEDE0E3E533477AAAB19E2CB811C826B145F53E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDEDE0E3E533477AAAB19E2CB811C826B145F53E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 19:24:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:1b:17:14:af:a9:3d:41:0b:dc:0a:14:b0:49:f5:3f:5b:16:8e:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDEDE0E3E533477AAAB19E2CB811C826B145F53E
        Validity
            Not Before: Jun  5 10:58:48 2026 GMT
            Not After : Jun  4 11:03:48 2027 GMT
        Subject: CN=3A0B772F2DCAB4313C19BA8AE075A2C8678CC416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:95:70:39:94:e8:07:d8:e8:5c:c4:c4:0d:94:
                    d3:3e:83:b6:8c:cd:a1:c9:aa:6a:5f:c7:58:34:9a:
                    63:c6:2a:18:f5:da:7a:6c:67:dc:10:57:a6:ac:4c:
                    2f:d1:e0:d6:66:5a:fb:00:51:b5:33:48:1d:12:48:
                    6b:61:df:ee:2d:87:3b:ab:66:9d:03:33:35:8d:e8:
                    5a:cf:19:40:8e:59:8c:82:9e:93:4b:48:ae:80:d4:
                    5a:62:01:61:ff:03:f9:d7:ce:b0:9e:c5:a4:ea:67:
                    c2:a9:33:78:bc:20:e3:e2:83:0b:40:f0:41:c8:18:
                    d3:7c:30:16:23:ac:42:0d:9e:d8:33:73:cb:e0:04:
                    65:0b:9e:1f:b2:52:da:01:30:ef:55:24:d8:dd:58:
                    4b:f2:b3:8b:12:fd:0f:c3:e9:ec:96:f5:49:9f:89:
                    e3:3b:7a:4e:d6:c6:d3:60:8f:45:ab:0d:a7:c4:b1:
                    ab:c9:ab:df:20:3e:6a:1c:ff:dc:0f:65:8d:81:1e:
                    45:c0:f6:84:cc:72:13:7f:a1:6b:23:43:ec:21:3c:
                    48:27:31:2e:14:50:fe:ef:2e:53:41:5b:29:22:a7:
                    51:ed:2b:35:fd:f8:4d:b4:0c:1a:17:9e:84:f4:1f:
                    e9:5c:85:52:99:bd:01:36:a5:50:e5:9a:1c:2b:9d:
                    64:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:0B:77:2F:2D:CA:B4:31:3C:19:BA:8A:E0:75:A2:C8:67:8C:C4:16
            X509v3 Authority Key Identifier:
                keyid:DD:ED:E0:E3:E5:33:47:7A:AA:B1:9E:2C:B8:11:C8:26:B1:45:F5:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/DDEDE0E3E533477AAAB19E2CB811C826B145F53E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDEDE0E3E533477AAAB19E2CB811C826B145F53E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/34352e3138342e3139382e302f32332d3233203d3e20323639333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:67:bf:a6:1c:d6:37:54:cf:2e:30:b8:29:ff:a6:0a:0e:58:
         d2:0b:61:33:22:aa:6f:3e:8e:83:aa:9f:24:73:6f:97:47:ef:
         9d:a0:10:37:64:8a:19:73:aa:63:06:b6:ba:0e:d2:9c:35:c4:
         de:13:b0:a0:8e:8f:95:f3:40:2f:fd:7f:c9:7a:a4:28:b7:fd:
         bd:92:e0:26:87:61:5b:38:50:a7:7f:3a:60:95:7e:ec:fa:ff:
         24:1a:11:69:b2:e7:f6:e0:38:f6:dd:4a:a1:2a:5c:ff:5f:8f:
         ca:9b:e9:19:cc:0b:d1:96:11:d6:9e:61:53:86:bd:60:69:5d:
         97:97:3d:fa:63:21:d9:46:a7:bd:90:e5:93:46:32:b6:42:38:
         30:60:d5:ae:88:e3:43:ed:b8:f9:87:25:26:1f:d6:18:a5:56:
         74:96:63:22:ca:a2:8b:2e:a9:fd:fe:8b:a7:62:40:81:0c:20:
         7c:98:bf:67:52:40:6c:9e:f7:4e:8b:7a:26:b0:e7:0e:06:dc:
         b1:49:69:a0:9d:61:56:a0:cc:07:63:da:c2:d4:e7:ef:98:87:
         f5:31:fe:a3:d1:aa:af:f2:7a:32:a9:dd:60:5b:62:61:90:1d:
         d0:bc:4e:de:61:fa:50:7f:d0:0d:99:3e:87:86:3c:b4:49:aa:
         5b:de:9a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:11:51 2026 by rpki-client