Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/34352e372e31322e302f32322d3332203d3e20323636363036.roa
File:                     34352e372e31322e302f32322d3332203d3e20323636363036.roa (raw, json)
Hash identifier:          g32emKUVREXWU2flPSClBZ4FyuFIauUhGllWsXkIFuQ=
Subject key identifier:   5F:F5:43:C0:25:AA:70:90:CE:70:79:ED:89:47:2B:67:EB:DC:08:7C
Certificate issuer:       /CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
Certificate serial:       70E35EE39A795521EC1E8F8AD7A746A33F561860
Authority key identifier: 8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/34352e372e31322e302f32322d3332203d3e20323636363036.roa
Signing time:             Tue 26 May 2026 09:44:32 +0000
ROA not before:           Tue 26 May 2026 09:39:32 +0000
ROA not after:            Tue 25 May 2027 09:44:32 +0000
asID:                     266606
IP address blocks:        45.7.12.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl
                          rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 01:35:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:e3:5e:e3:9a:79:55:21:ec:1e:8f:8a:d7:a7:46:a3:3f:56:18:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
        Validity
            Not Before: May 26 09:39:32 2026 GMT
            Not After : May 25 09:44:32 2027 GMT
        Subject: CN=5FF543C025AA7090CE7079ED89472B67EBDC087C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:58:4e:b2:b9:f4:47:cf:ab:cd:48:1a:c1:37:
                    b9:f7:65:fd:28:db:38:1c:f4:bc:81:82:8e:30:71:
                    b9:80:e8:a3:41:e0:00:0c:6f:ff:7a:0c:f1:c0:e8:
                    e2:af:56:b3:3a:94:3f:3f:1f:cd:0e:c4:30:ee:dc:
                    17:b2:60:93:5d:c6:6e:83:e8:9c:a4:71:71:2c:d9:
                    18:41:34:7a:62:84:e7:dc:73:ec:91:8c:62:47:76:
                    65:00:51:fb:d9:eb:b7:0f:fa:2a:7a:38:6f:55:d8:
                    c9:65:21:48:09:a8:cf:de:01:f3:be:e2:fe:f7:6c:
                    c8:57:28:8c:26:4a:dc:2c:d2:2a:93:91:91:98:5c:
                    e2:36:22:f8:7e:f0:07:07:e0:b1:3c:8c:ee:c2:53:
                    2b:c9:3b:6e:9e:f2:4c:5d:f8:85:c1:69:c2:c0:9b:
                    58:54:14:0e:77:e2:5c:52:8f:b1:19:0b:37:a1:44:
                    22:90:bc:25:12:3f:37:b6:cf:38:43:ba:78:b7:b9:
                    1f:b3:cb:6b:56:ab:ef:9b:e2:e2:8c:92:04:cf:ca:
                    f9:61:ca:70:a1:63:2a:bb:02:af:2c:79:2e:28:54:
                    6e:1b:79:e4:8b:bf:46:35:73:48:bb:a3:53:6e:e0:
                    91:af:f4:60:2f:8d:66:ab:db:75:32:65:36:2f:11:
                    4f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F5:43:C0:25:AA:70:90:CE:70:79:ED:89:47:2B:67:EB:DC:08:7C
            X509v3 Authority Key Identifier:
                keyid:8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/34352e372e31322e302f32322d3332203d3e20323636363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:74:e8:cb:9a:90:32:bd:f7:48:9d:9d:fe:c7:05:bb:ba:6a:
         28:49:fc:58:d6:cd:b4:26:55:78:72:81:59:d2:2b:69:2f:69:
         ca:c4:74:ea:47:44:a7:7c:52:0a:d3:45:e4:91:19:25:f3:76:
         1e:4c:3b:95:b1:91:c1:96:3b:9e:1e:ac:2b:10:6a:a1:4c:b5:
         82:ff:d7:b3:0d:17:d1:53:78:37:5d:a3:45:93:7b:f8:17:7d:
         54:2d:b2:cc:f6:4b:b5:9e:51:03:fe:ca:d2:27:26:e0:3e:bd:
         79:97:ee:d1:dd:59:0f:41:c7:e6:40:55:7d:a0:e3:d2:15:1d:
         70:aa:1e:f3:19:76:94:ed:d4:0a:e4:98:55:c5:fb:29:64:9f:
         dd:c4:e0:17:eb:7a:74:07:f2:de:77:8f:82:aa:b2:af:7b:49:
         1c:30:62:00:1a:d1:b8:b7:0e:f2:c4:15:0c:b8:e6:e6:2a:d3:
         fb:75:d4:cb:c2:b7:ae:2b:a5:ef:42:a4:5c:84:06:34:de:06:
         84:be:80:cc:4b:cf:b9:2a:3a:e2:61:8f:11:97:0a:c4:da:7e:
         9d:5e:9c:11:41:1a:5b:5a:56:44:f2:b9:af:67:2c:20:4c:79:
         9a:11:61:e9:99:e8:fb:5b:c1:2e:57:8d:19:df:ce:b1:d1:96:
         7e:d1:f0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:09:42 2026 by rpki-client