Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/34352e372e31322e302f32322d3332203d3e203631363738.roa
File:                     34352e372e31322e302f32322d3332203d3e203631363738.roa (raw, json)
Hash identifier:          5naDD0zitt7PIirZU/YwT0lkSbQqx7ZCEn7ZHzN8E3o=
Subject key identifier:   93:23:65:0A:AA:CD:72:02:57:8C:48:E6:D7:67:FE:28:FF:3E:E3:4B
Certificate issuer:       /CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
Certificate serial:       575A732B3625DFD0DB7919D99FEC4368DC9A8F4E
Authority key identifier: 8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/34352e372e31322e302f32322d3332203d3e203631363738.roa
Signing time:             Tue 26 May 2026 09:44:00 +0000
ROA not before:           Tue 26 May 2026 09:39:00 +0000
ROA not after:            Tue 25 May 2027 09:44:00 +0000
asID:                     61678
IP address blocks:        45.7.12.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl
                          rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 01:35:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:5a:73:2b:36:25:df:d0:db:79:19:d9:9f:ec:43:68:dc:9a:8f:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
        Validity
            Not Before: May 26 09:39:00 2026 GMT
            Not After : May 25 09:44:00 2027 GMT
        Subject: CN=9323650AAACD7202578C48E6D767FE28FF3EE34B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:26:aa:2e:dc:41:7f:5e:93:99:4a:a5:ca:dc:
                    d8:0d:77:3a:81:5b:f1:1e:80:6b:c4:1e:88:86:2f:
                    aa:59:ef:3b:d0:bf:50:c0:07:26:f0:df:cb:43:09:
                    be:6c:1e:b0:30:63:00:3c:1e:7e:ab:fe:f6:70:29:
                    c9:a9:50:a4:ec:cc:ad:b6:fb:68:e8:46:61:ef:dc:
                    dd:06:11:7c:69:ed:0a:a6:6f:70:0b:64:fa:1b:08:
                    74:a9:db:ea:17:e0:e3:3e:53:1b:b5:9b:df:c8:01:
                    8a:f9:87:b5:89:b6:34:26:31:06:0e:73:07:7f:bb:
                    d2:16:c1:3c:9b:68:3f:25:31:04:0d:d4:63:4c:27:
                    87:e7:00:8e:8b:2d:97:e0:0e:6a:c1:5d:a1:ac:3e:
                    94:0c:75:df:09:ef:38:e8:b8:96:44:0e:91:5f:fd:
                    d9:c3:97:8e:e9:93:b5:30:eb:25:21:1f:68:dc:84:
                    ad:ef:50:f9:8b:63:d7:db:8a:de:8e:2b:80:5d:7c:
                    e0:96:16:67:e1:63:6d:3b:42:38:0e:1c:56:07:7d:
                    61:1a:f7:59:46:55:a3:c1:cd:b0:8b:ce:41:00:a4:
                    c2:2d:14:01:7e:1e:0c:76:07:94:03:16:ab:ab:64:
                    1b:8f:33:fe:24:ad:27:3e:3f:6b:63:2f:86:0c:06:
                    ae:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:23:65:0A:AA:CD:72:02:57:8C:48:E6:D7:67:FE:28:FF:3E:E3:4B
            X509v3 Authority Key Identifier:
                keyid:8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/34352e372e31322e302f32322d3332203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:66:78:d3:b6:f4:15:e4:cd:a7:68:ab:cb:d3:37:0f:5a:80:
         bc:34:95:15:0a:d9:70:02:10:97:ef:24:95:e9:2d:52:cd:65:
         e2:a4:c1:ae:5b:dc:7e:c5:db:c0:13:27:ee:1b:22:2a:12:b8:
         17:23:e1:fb:1e:86:71:a4:6c:e3:58:54:54:e2:74:8d:5a:23:
         c9:d6:12:05:b3:1b:65:8e:e1:a7:be:c0:c7:5f:54:35:a3:8a:
         1a:8b:39:0f:bc:91:23:74:84:5d:50:ea:7b:11:67:e9:bf:6c:
         a4:12:a7:69:27:2d:b6:c8:08:2e:89:ea:a4:9b:31:26:4b:ef:
         cf:45:0e:5a:2f:5b:dc:56:cf:50:d1:64:f4:d4:72:a2:62:d4:
         a1:31:52:0e:55:50:7c:36:7e:ff:31:81:b7:89:67:97:00:0e:
         3a:e4:3b:5d:02:8c:40:73:ed:2b:ba:72:d6:1c:98:49:4b:95:
         c3:58:ec:24:c1:6e:41:96:cf:7c:5f:8c:8c:05:c9:f3:b2:7c:
         15:79:0f:b1:56:1f:ab:c9:85:0f:e4:74:20:2c:3e:97:3c:13:
         46:6a:3a:2b:e3:9f:ab:33:df:bd:c2:3f:06:3d:69:3d:70:6f:
         58:1b:a1:0d:d0:11:da:62:d3:18:07:63:78:df:12:37:dd:2b:
         7a:a8:1a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:09:34 2026 by rpki-client