Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6fcSGDurFu6vytKX7GGLADPa8DDReTggzkz1SrnGeHZt/0/34352e3136362e3133322e302f32342d3234203d3e20323637393730.roa
File:                     34352e3136362e3133322e302f32342d3234203d3e20323637393730.roa (raw, json)
Hash identifier:          2xQqT+CRTjripbNnfSDR/Kh1tG2QRdpdeo7swQWbCfk=
Subject key identifier:   93:3C:3C:42:31:BA:E8:34:45:35:D1:F4:0C:74:AD:06:BE:B7:B2:0E
Certificate issuer:       /CN=3524F7A03839C64843D30C7A2EFD815309F1C95C
Certificate serial:       046E73F3F9B3BB6349A71AEBA3024E2B19062B16
Authority key identifier: 35:24:F7:A0:38:39:C6:48:43:D3:0C:7A:2E:FD:81:53:09:F1:C9:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3524F7A03839C64843D30C7A2EFD815309F1C95C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6fcSGDurFu6vytKX7GGLADPa8DDReTggzkz1SrnGeHZt/0/34352e3136362e3133322e302f32342d3234203d3e20323637393730.roa
Signing time:             Thu 17 Sep 2026 09:49:56 +0000
ROA not before:           Thu 17 Sep 2026 09:44:56 +0000
ROA not after:            Thu 16 Sep 2027 09:49:56 +0000
asID:                     267970
IP address blocks:        45.166.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6fcSGDurFu6vytKX7GGLADPa8DDReTggzkz1SrnGeHZt/0/3524F7A03839C64843D30C7A2EFD815309F1C95C.crl
                          rsync://rpki-repo.registro.br/repo/6fcSGDurFu6vytKX7GGLADPa8DDReTggzkz1SrnGeHZt/0/3524F7A03839C64843D30C7A2EFD815309F1C95C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3524F7A03839C64843D30C7A2EFD815309F1C95C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 19:15:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:6e:73:f3:f9:b3:bb:63:49:a7:1a:eb:a3:02:4e:2b:19:06:2b:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3524F7A03839C64843D30C7A2EFD815309F1C95C
        Validity
            Not Before: Sep 17 09:44:56 2026 GMT
            Not After : Sep 16 09:49:56 2027 GMT
        Subject: CN=933C3C4231BAE8344535D1F40C74AD06BEB7B20E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:79:24:12:9e:14:05:8f:82:76:7c:15:5e:9b:
                    d4:39:40:bb:a2:0b:f6:6d:73:dd:1b:76:99:78:36:
                    21:1f:8d:a1:41:bd:33:c5:95:77:2e:ab:bd:57:9c:
                    62:cd:4d:15:ae:06:6a:10:eb:0d:8e:4b:5d:45:29:
                    10:45:6e:c2:7b:e6:5f:bb:d6:5c:52:50:75:46:6c:
                    bb:2a:e7:65:34:1c:bc:2d:58:bc:e9:ad:c3:14:ea:
                    ce:64:32:92:f8:ee:9a:36:0b:4f:af:d5:12:df:27:
                    0b:bc:d2:20:ef:1c:aa:89:93:36:8c:a7:6a:bb:ee:
                    d6:7b:c6:9d:0b:2a:ec:28:44:57:cf:68:d8:6f:88:
                    02:9a:2c:cb:a9:cd:50:2a:77:fd:42:1e:98:7e:f4:
                    4a:22:0d:69:54:06:38:b6:4f:f3:17:74:fb:44:ef:
                    7a:c7:13:4c:e1:a4:76:04:da:00:dc:ec:4e:7c:20:
                    73:ee:8f:5f:3c:d7:53:3e:de:7d:c0:bf:33:82:d4:
                    4c:74:b1:e9:d6:69:11:a8:f1:32:ac:04:f9:b9:28:
                    c5:d0:62:94:e7:4e:90:af:cc:ab:d1:be:75:ee:21:
                    8f:01:44:14:40:71:1b:47:fb:91:11:f2:ec:e4:ed:
                    d8:d5:41:72:37:8f:17:23:98:7b:80:4b:a1:be:35:
                    ef:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:3C:3C:42:31:BA:E8:34:45:35:D1:F4:0C:74:AD:06:BE:B7:B2:0E
            X509v3 Authority Key Identifier:
                keyid:35:24:F7:A0:38:39:C6:48:43:D3:0C:7A:2E:FD:81:53:09:F1:C9:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6fcSGDurFu6vytKX7GGLADPa8DDReTggzkz1SrnGeHZt/0/3524F7A03839C64843D30C7A2EFD815309F1C95C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3524F7A03839C64843D30C7A2EFD815309F1C95C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6fcSGDurFu6vytKX7GGLADPa8DDReTggzkz1SrnGeHZt/0/34352e3136362e3133322e302f32342d3234203d3e20323637393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:d9:9b:48:1f:fc:27:09:aa:27:cc:65:f9:94:05:11:e3:1a:
         66:2f:3b:9c:ab:fe:1a:01:3a:5d:c1:a2:4b:bd:93:d3:47:bf:
         56:6c:82:a7:67:a5:0f:cb:10:80:ad:7a:f3:0e:51:53:f3:26:
         68:ab:58:5b:11:11:4f:6c:76:6f:1b:f7:49:4c:b3:a1:f8:6f:
         5f:a8:76:66:bf:14:d2:95:0a:da:e6:5f:ca:62:07:c8:58:72:
         1f:53:30:72:35:4d:cf:4c:18:19:c1:a0:66:ae:8f:14:2b:db:
         90:be:94:07:73:4c:ac:5a:aa:be:db:ef:f2:b3:cc:18:b3:76:
         e9:26:bc:63:a2:99:64:ea:8b:0c:e5:b3:d1:95:51:17:37:29:
         2f:c1:93:f9:4a:8e:b8:a3:d5:32:1a:11:0d:4c:2d:8b:9b:76:
         7c:7b:19:fe:d2:f1:93:5e:2f:45:67:86:db:34:2e:8e:f9:4a:
         f5:3e:42:a3:1c:63:af:fd:0e:c5:e4:37:95:58:fd:59:75:ad:
         2d:85:0f:63:27:0f:fb:d5:26:c5:49:7e:f3:41:ad:3b:0f:6c:
         0d:06:b1:69:af:dc:4d:88:79:17:12:34:e2:33:af:af:b1:da:
         9d:63:6e:5b:25:44:50:b0:79:ee:49:55:0e:ea:49:5a:11:a2:
         22:1b:8f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:43:42 2026 by rpki-client