Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6zFrH9WH1MGSDo71YPDuzScjLmkwJrozQHerGNB4fZMJ/0/34352e3233372e35372e302f32342d3234203d3e20323638333030.roa
File:                     34352e3233372e35372e302f32342d3234203d3e20323638333030.roa (raw, json)
Hash identifier:          FaCRS65dPZvMtDVQJqAeR1n/FdrUh404IzEEtCiIHzs=
Subject key identifier:   FB:4E:41:8E:56:23:C3:93:EC:7A:A2:F9:B3:61:DE:0A:40:BC:57:A3
Certificate issuer:       /CN=443681E3ADAB56666689B0FFC0971A173CEEB409
Certificate serial:       7AC2F419D26C3C3D5C6C1670FB711C4A3ECD088F
Authority key identifier: 44:36:81:E3:AD:AB:56:66:66:89:B0:FF:C0:97:1A:17:3C:EE:B4:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/443681E3ADAB56666689B0FFC0971A173CEEB409.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6zFrH9WH1MGSDo71YPDuzScjLmkwJrozQHerGNB4fZMJ/0/34352e3233372e35372e302f32342d3234203d3e20323638333030.roa
Signing time:             Wed 13 May 2026 15:31:56 +0000
ROA not before:           Wed 13 May 2026 15:26:56 +0000
ROA not after:            Wed 12 May 2027 15:31:56 +0000
asID:                     268300
IP address blocks:        45.237.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6zFrH9WH1MGSDo71YPDuzScjLmkwJrozQHerGNB4fZMJ/0/443681E3ADAB56666689B0FFC0971A173CEEB409.crl
                          rsync://rpki-repo.registro.br/repo/6zFrH9WH1MGSDo71YPDuzScjLmkwJrozQHerGNB4fZMJ/0/443681E3ADAB56666689B0FFC0971A173CEEB409.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/443681E3ADAB56666689B0FFC0971A173CEEB409.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 08:33:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:c2:f4:19:d2:6c:3c:3d:5c:6c:16:70:fb:71:1c:4a:3e:cd:08:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443681E3ADAB56666689B0FFC0971A173CEEB409
        Validity
            Not Before: May 13 15:26:56 2026 GMT
            Not After : May 12 15:31:56 2027 GMT
        Subject: CN=FB4E418E5623C393EC7AA2F9B361DE0A40BC57A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:19:5c:36:93:83:e0:56:a9:e1:ed:0c:f5:bb:
                    14:ba:64:af:0b:80:ab:22:fb:b4:92:39:5c:3e:ea:
                    88:4d:47:0e:6b:73:56:25:57:51:f0:bb:e5:d5:59:
                    33:8f:51:02:00:72:0f:26:fa:07:95:6e:5e:38:5f:
                    72:7f:8c:af:fe:fb:0a:e8:b4:8c:11:05:83:6d:dc:
                    a1:20:35:4b:e4:f3:ff:08:fd:7c:d1:42:ab:8f:74:
                    1e:ae:9f:24:1e:39:40:61:57:98:89:f0:e6:01:1e:
                    1f:46:7d:85:96:36:0a:e6:5a:e0:ff:8a:63:24:06:
                    e1:a0:3b:f0:aa:79:28:20:16:51:ef:1f:4c:bf:0b:
                    0f:1c:af:69:3d:22:bd:ad:56:3a:5b:9c:8d:24:08:
                    d2:48:fc:d8:b3:b0:3f:61:18:57:01:8e:17:5b:12:
                    59:e3:a7:1a:02:6d:49:f5:04:45:bd:82:15:d1:61:
                    41:93:f3:26:c3:25:a5:2e:a2:d3:33:8b:cb:6e:df:
                    b9:7d:16:a7:97:d3:63:9f:31:55:ba:53:35:48:d5:
                    73:87:9e:ee:4a:5e:a5:7e:3e:eb:93:e2:dc:92:37:
                    f2:a8:ed:56:a3:2f:af:28:0d:eb:98:78:74:23:d3:
                    16:ee:84:87:ad:3e:67:fa:f7:5a:2c:f6:a0:da:3f:
                    0b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:4E:41:8E:56:23:C3:93:EC:7A:A2:F9:B3:61:DE:0A:40:BC:57:A3
            X509v3 Authority Key Identifier:
                keyid:44:36:81:E3:AD:AB:56:66:66:89:B0:FF:C0:97:1A:17:3C:EE:B4:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6zFrH9WH1MGSDo71YPDuzScjLmkwJrozQHerGNB4fZMJ/0/443681E3ADAB56666689B0FFC0971A173CEEB409.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/443681E3ADAB56666689B0FFC0971A173CEEB409.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6zFrH9WH1MGSDo71YPDuzScjLmkwJrozQHerGNB4fZMJ/0/34352e3233372e35372e302f32342d3234203d3e20323638333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:d3:9b:d7:ab:9f:bb:b1:d8:8d:e3:06:8c:25:3d:53:60:c7:
         85:4e:c3:a2:de:d1:9e:9f:06:da:fa:ee:9f:a2:29:a8:ae:59:
         df:58:57:fc:df:83:15:64:27:2f:c1:93:cf:17:11:2b:79:35:
         dc:28:a8:40:a7:ab:57:af:fb:d0:2a:b9:92:6b:1a:1d:f9:56:
         e1:e8:34:a2:fa:21:6d:eb:c4:2a:fe:2b:75:52:80:3d:f9:3b:
         cb:41:28:db:34:34:ef:dd:a9:d3:49:ae:67:11:e4:a1:44:4e:
         7f:fa:df:c0:71:7c:7b:0b:fe:ea:5e:d9:b2:00:e9:dc:56:96:
         b5:43:a5:d1:5e:85:e8:20:3d:dc:42:7a:8b:6c:95:e8:d8:b2:
         6a:b5:75:41:f5:2e:19:db:80:02:a9:c9:ab:5a:ef:33:41:70:
         74:a2:63:25:13:6d:be:c7:a5:9d:c2:4d:58:9d:ce:e4:a1:35:
         82:15:a4:e9:60:13:9d:57:86:2f:47:05:74:ca:c2:58:5c:35:
         d4:c6:12:54:5a:d6:17:bd:ce:2c:1c:7c:59:8e:84:13:c8:dd:
         b5:ed:3f:16:9a:a8:80:21:ee:7e:63:db:6a:56:d4:aa:2b:16:
         ff:d3:d0:5d:2b:53:85:82:59:f5:db:8c:e9:70:9c:75:d6:cf:
         f5:64:e7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:49:50 2026 by rpki-client