Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9G7kNKks12igDfJDbs4pSppgtQCr616FsmBfzofbR4JE/0/34352e3232372e3134342e302f32322d3234203d3e20323637303336.roa
File:                     34352e3232372e3134342e302f32322d3234203d3e20323637303336.roa (raw, json)
Hash identifier:          F7X8lGxix/JC6FybtEucyVU52YgkzZl1JbrdGBMA7V0=
Subject key identifier:   D2:60:DF:D2:87:5F:F1:85:47:86:D4:86:15:32:31:03:AE:A1:E7:CF
Certificate issuer:       /CN=B44D3F216BC388705EB728F618C985D7B6CB8F81
Certificate serial:       41ED6735FA64A3A892605C435AC9C75E2881228B
Authority key identifier: B4:4D:3F:21:6B:C3:88:70:5E:B7:28:F6:18:C9:85:D7:B6:CB:8F:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B44D3F216BC388705EB728F618C985D7B6CB8F81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9G7kNKks12igDfJDbs4pSppgtQCr616FsmBfzofbR4JE/0/34352e3232372e3134342e302f32322d3234203d3e20323637303336.roa
Signing time:             Thu 26 Feb 2026 21:06:03 +0000
ROA not before:           Thu 26 Feb 2026 21:01:03 +0000
ROA not after:            Thu 25 Feb 2027 21:06:03 +0000
asID:                     267036
IP address blocks:        45.227.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9G7kNKks12igDfJDbs4pSppgtQCr616FsmBfzofbR4JE/0/B44D3F216BC388705EB728F618C985D7B6CB8F81.crl
                          rsync://rpki-repo.registro.br/repo/9G7kNKks12igDfJDbs4pSppgtQCr616FsmBfzofbR4JE/0/B44D3F216BC388705EB728F618C985D7B6CB8F81.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B44D3F216BC388705EB728F618C985D7B6CB8F81.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 16:34:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:ed:67:35:fa:64:a3:a8:92:60:5c:43:5a:c9:c7:5e:28:81:22:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B44D3F216BC388705EB728F618C985D7B6CB8F81
        Validity
            Not Before: Feb 26 21:01:03 2026 GMT
            Not After : Feb 25 21:06:03 2027 GMT
        Subject: CN=D260DFD2875FF1854786D48615323103AEA1E7CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:75:c1:d4:f9:23:11:ab:5d:3c:10:91:eb:69:
                    b9:e7:ae:80:30:e3:c7:6e:38:10:7f:f1:dc:31:a3:
                    01:49:bf:44:46:4a:6f:db:6b:6c:12:4e:88:a6:f8:
                    3d:9e:79:8e:d2:16:17:1c:42:b4:9b:da:b9:5b:ad:
                    d0:be:25:fb:92:ad:c7:c5:ac:e6:52:5c:b9:84:0c:
                    c9:17:92:27:5a:58:cc:1d:39:6f:54:31:b3:03:6b:
                    4c:af:a4:07:73:7b:5d:6e:bf:17:16:2d:15:c9:5e:
                    f0:d6:27:a8:16:3e:17:4d:35:1c:05:79:79:93:d5:
                    34:d6:66:6a:75:02:97:c8:3f:df:cb:e4:b4:21:4e:
                    2e:a0:59:f4:87:07:d5:d9:fa:39:77:23:4b:0d:8a:
                    6c:04:5b:4d:2f:75:47:23:2a:af:67:b6:5e:c6:e4:
                    f9:77:09:79:bb:d1:bd:06:0b:52:71:e2:96:cc:5a:
                    c8:cb:a5:5f:6b:46:ab:3c:1d:2e:ef:b3:35:a3:80:
                    2a:07:48:f7:51:de:3a:34:54:13:9e:2d:61:af:b0:
                    bc:95:10:be:71:45:83:24:ea:6b:97:a5:ff:83:d6:
                    76:c3:4d:27:a3:6e:15:cf:61:c9:0c:b3:68:d4:c2:
                    03:e8:01:b4:5d:f5:4a:b6:2d:5c:1a:a0:db:31:f9:
                    97:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:60:DF:D2:87:5F:F1:85:47:86:D4:86:15:32:31:03:AE:A1:E7:CF
            X509v3 Authority Key Identifier:
                keyid:B4:4D:3F:21:6B:C3:88:70:5E:B7:28:F6:18:C9:85:D7:B6:CB:8F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9G7kNKks12igDfJDbs4pSppgtQCr616FsmBfzofbR4JE/0/B44D3F216BC388705EB728F618C985D7B6CB8F81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B44D3F216BC388705EB728F618C985D7B6CB8F81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9G7kNKks12igDfJDbs4pSppgtQCr616FsmBfzofbR4JE/0/34352e3232372e3134342e302f32322d3234203d3e20323637303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:7b:f2:b4:65:00:e4:b9:30:95:47:9d:d3:e0:8b:72:ed:77:
         0c:3b:7b:df:ba:06:2c:a1:51:2f:75:b9:81:e1:f9:6d:f1:ba:
         ce:06:e4:d6:ec:ac:02:ae:54:fc:08:8b:be:52:f5:65:cb:46:
         1d:3d:7a:25:57:a3:a3:a7:6f:bc:22:d7:fa:42:20:a7:cf:ec:
         39:e7:a3:02:96:d1:e4:85:c4:3f:ff:19:47:7b:da:a1:71:8f:
         92:75:1a:7c:f8:88:a3:27:6c:0f:46:f0:05:40:48:62:71:b9:
         1c:28:ff:8c:12:68:71:58:0a:66:94:4c:79:38:68:14:76:e4:
         0d:ef:17:e7:d8:69:49:c2:bd:85:b5:1e:0c:1e:7a:05:4e:d2:
         cd:6a:44:e5:27:d4:94:86:2d:20:98:1f:c1:25:b2:a4:9e:68:
         30:85:e8:c6:62:be:69:8e:d5:4f:7e:0a:38:2d:14:59:a4:d2:
         5a:26:4f:eb:d9:91:ff:12:31:fb:3a:7f:2b:10:a3:d3:e4:89:
         33:e6:f5:13:4c:81:c6:07:24:9b:42:d0:b9:2e:43:d1:db:67:
         1c:86:40:55:5f:65:66:ca:0c:bb:be:07:5a:2b:88:66:d6:fe:
         e3:49:70:69:14:e0:e9:6b:7f:94:45:8f:2c:8a:1e:96:2d:eb:
         bf:61:5d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:16:25 2026 by rpki-client