Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/34352e3233352e3230302e302f32342d3234203d3e20323638323239.roa
File:                     34352e3233352e3230302e302f32342d3234203d3e20323638323239.roa (raw, json)
Hash identifier:          mueDaLuVP1zppoHv9HQ0BhQnzGkrb+e4jMMmNVrYlHs=
Subject key identifier:   57:DC:B6:47:76:25:6B:F3:16:1D:0F:97:82:E5:64:BC:82:E5:D0:71
Certificate issuer:       /CN=24A3CCFD6B6E5E8CFEF39922F1A6ED764A9135F4
Certificate serial:       39796E46BC93D91B7ABA4F5CC09574F188E05112
Authority key identifier: 24:A3:CC:FD:6B:6E:5E:8C:FE:F3:99:22:F1:A6:ED:76:4A:91:35:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24A3CCFD6B6E5E8CFEF39922F1A6ED764A9135F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/34352e3233352e3230302e302f32342d3234203d3e20323638323239.roa
Signing time:             Fri 27 Feb 2026 15:33:57 +0000
ROA not before:           Fri 27 Feb 2026 15:28:57 +0000
ROA not after:            Fri 26 Feb 2027 15:33:57 +0000
asID:                     268229
IP address blocks:        45.235.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/24A3CCFD6B6E5E8CFEF39922F1A6ED764A9135F4.crl
                          rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/24A3CCFD6B6E5E8CFEF39922F1A6ED764A9135F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24A3CCFD6B6E5E8CFEF39922F1A6ED764A9135F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 19:58:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:79:6e:46:bc:93:d9:1b:7a:ba:4f:5c:c0:95:74:f1:88:e0:51:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24A3CCFD6B6E5E8CFEF39922F1A6ED764A9135F4
        Validity
            Not Before: Feb 27 15:28:57 2026 GMT
            Not After : Feb 26 15:33:57 2027 GMT
        Subject: CN=57DCB64776256BF3161D0F9782E564BC82E5D071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a8:ec:a8:91:e3:c2:e0:be:c9:79:5d:aa:e9:
                    f4:68:e2:da:df:13:f2:5f:5a:4f:b9:07:d4:0e:c3:
                    86:fa:ac:64:85:ae:31:ad:dd:78:eb:a8:7d:f8:23:
                    66:d7:89:7f:65:b6:1d:d0:ae:cf:a0:b6:07:52:a2:
                    3e:b9:94:ea:28:e5:e3:9a:dd:6f:ef:ed:60:eb:60:
                    11:c9:cf:c7:a0:d8:0c:ba:6e:3a:47:41:91:4e:0c:
                    09:31:9d:25:29:52:d0:00:8c:1a:4a:fd:e6:90:c9:
                    fa:8c:a4:50:55:8d:3b:9b:b1:c9:41:b4:02:1b:f8:
                    ee:4a:15:84:23:ff:c5:55:86:31:f5:d0:df:87:cf:
                    87:15:eb:e7:d0:71:78:7e:ed:5a:21:3a:d0:bf:79:
                    e7:c1:8f:68:fe:7c:6f:b4:f2:8b:6a:1b:16:80:9a:
                    f3:fa:46:80:b8:9c:bf:08:19:81:f9:c1:b9:e3:e2:
                    37:70:82:f2:70:8e:96:d1:a7:32:df:d5:62:cc:22:
                    4e:61:c3:49:fa:3b:12:58:f3:0f:f6:b7:84:d7:3c:
                    de:ec:29:b1:22:78:f3:2d:04:07:4d:f4:3f:01:b7:
                    34:e2:e0:94:14:77:f5:32:94:47:2b:d1:96:62:08:
                    b3:62:8c:26:40:87:43:02:db:1e:8a:ae:7c:00:b7:
                    64:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:DC:B6:47:76:25:6B:F3:16:1D:0F:97:82:E5:64:BC:82:E5:D0:71
            X509v3 Authority Key Identifier:
                keyid:24:A3:CC:FD:6B:6E:5E:8C:FE:F3:99:22:F1:A6:ED:76:4A:91:35:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/24A3CCFD6B6E5E8CFEF39922F1A6ED764A9135F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24A3CCFD6B6E5E8CFEF39922F1A6ED764A9135F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/34352e3233352e3230302e302f32342d3234203d3e20323638323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:a7:76:11:00:2d:8e:3c:5a:53:8b:69:19:f5:2e:0f:f9:ce:
         90:57:e3:fe:47:b7:91:7e:cc:93:c7:d6:de:c0:b7:34:c6:56:
         9c:47:50:83:fc:b0:0a:6e:68:d9:27:4a:c9:b5:64:90:98:bc:
         ed:78:c0:de:22:d1:01:2f:6e:d1:02:6c:1e:57:a4:44:14:d4:
         1c:ef:ae:5f:3c:e7:a8:bb:13:0b:29:8f:56:80:99:10:ca:3b:
         0e:58:06:82:33:b4:7f:08:de:1d:09:a5:ee:fb:ba:08:dc:d8:
         4d:3b:23:dc:30:c0:42:d6:34:68:ae:9d:a1:f8:0a:1c:80:1b:
         b5:73:3c:b7:69:21:87:21:4a:38:e7:bd:37:58:09:cd:16:98:
         80:ce:f1:63:24:42:27:fc:8c:17:cd:a4:5c:63:cb:f6:7e:0e:
         c2:b1:00:9b:b9:33:05:c3:a6:69:d4:8e:dd:82:52:c0:d2:af:
         05:0e:e0:02:28:b7:e5:5d:66:03:cc:54:7a:cd:25:4f:9e:ff:
         1b:b2:45:99:5c:65:1f:f5:4c:0b:e5:41:03:04:69:75:58:09:
         df:78:8d:51:33:da:4e:14:9d:cc:20:d8:3e:79:da:c0:a9:22:
         fc:ca:31:5e:ef:e2:36:42:a1:70:bb:24:28:05:bc:12:27:9b:
         42:19:73:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 03:32:15 2026 by rpki-client