Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/34352e3232362e37362e302f32322d3234203d3e20323636393834.roa
File:                     34352e3232362e37362e302f32322d3234203d3e20323636393834.roa (raw, json)
Hash identifier:          AUUzROfmcUlsNY9ZuHUICy6MH7co6Iosr0Pk+/i+aeo=
Subject key identifier:   64:75:16:18:A8:A3:C1:C0:9A:37:D6:45:4D:90:F4:42:93:D5:39:EB
Certificate issuer:       /CN=41107F8D71D8B83AE0B9185D5C53CC2EE346B47B
Certificate serial:       7FBBDD6B8196B9545E33E9027B26166DB808177B
Authority key identifier: 41:10:7F:8D:71:D8:B8:3A:E0:B9:18:5D:5C:53:CC:2E:E3:46:B4:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41107F8D71D8B83AE0B9185D5C53CC2EE346B47B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/34352e3232362e37362e302f32322d3234203d3e20323636393834.roa
Signing time:             Thu 03 Jul 2025 20:53:28 +0000
ROA not before:           Thu 03 Jul 2025 20:48:28 +0000
ROA not after:            Thu 02 Jul 2026 20:53:28 +0000
asID:                     266984
IP address blocks:        45.226.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/41107F8D71D8B83AE0B9185D5C53CC2EE346B47B.crl
                          rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/41107F8D71D8B83AE0B9185D5C53CC2EE346B47B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41107F8D71D8B83AE0B9185D5C53CC2EE346B47B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 23:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:bb:dd:6b:81:96:b9:54:5e:33:e9:02:7b:26:16:6d:b8:08:17:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41107F8D71D8B83AE0B9185D5C53CC2EE346B47B
        Validity
            Not Before: Jul  3 20:48:28 2025 GMT
            Not After : Jul  2 20:53:28 2026 GMT
        Subject: CN=64751618A8A3C1C09A37D6454D90F44293D539EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4f:4b:a5:65:b7:b4:3a:c3:33:16:d4:8c:6a:
                    83:10:7e:0e:21:1d:e2:8d:b0:e1:1e:9b:6e:61:0d:
                    70:e7:1c:02:6c:8c:04:77:76:f3:df:14:57:c2:94:
                    95:87:cc:e0:a9:91:03:8b:70:14:fa:77:fe:05:c0:
                    57:d8:10:1e:52:f9:f9:f4:d6:69:8b:4c:65:c6:62:
                    61:a4:d1:a8:f6:07:2d:6e:1c:89:63:b2:9d:cd:cb:
                    e5:56:12:b0:33:38:bc:cb:50:e6:4f:45:47:46:91:
                    d1:59:8c:ed:0f:e4:a3:d0:21:49:f3:2e:a4:87:a0:
                    15:a3:ec:9f:6b:31:97:a5:7f:91:9b:c0:e4:7e:77:
                    ac:f4:a4:71:bb:b0:1d:d2:0a:69:1d:e4:65:d1:0a:
                    89:82:a7:d8:be:3e:6c:27:17:20:9c:b5:62:77:ad:
                    e7:25:78:17:d5:99:31:77:a3:8a:a5:3b:75:a6:9f:
                    34:cb:ea:81:db:a3:f3:dc:74:c7:39:48:53:67:4d:
                    73:41:e7:e4:2e:37:53:54:a6:51:07:64:3d:27:26:
                    76:77:0e:56:20:52:b2:b1:1b:67:5a:be:99:09:fc:
                    ff:8d:f6:47:5b:7d:94:69:41:3c:ac:64:2c:79:1c:
                    8b:53:fb:c1:e6:61:ab:7b:b8:54:ed:fc:b1:55:21:
                    15:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:75:16:18:A8:A3:C1:C0:9A:37:D6:45:4D:90:F4:42:93:D5:39:EB
            X509v3 Authority Key Identifier:
                keyid:41:10:7F:8D:71:D8:B8:3A:E0:B9:18:5D:5C:53:CC:2E:E3:46:B4:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/41107F8D71D8B83AE0B9185D5C53CC2EE346B47B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41107F8D71D8B83AE0B9185D5C53CC2EE346B47B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/34352e3232362e37362e302f32322d3234203d3e20323636393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:5c:7b:cd:58:48:30:ca:ed:fe:80:47:88:8e:a2:36:72:96:
         49:83:71:f3:1f:a5:7e:f3:e2:71:63:a0:fb:6a:31:14:98:0c:
         51:b6:19:5c:65:07:ed:05:64:f1:bf:23:9d:33:a3:87:d8:34:
         cf:4a:cb:dd:33:e2:1a:dc:40:f5:98:3b:cd:f6:6b:1c:c1:d3:
         b9:55:3c:1f:6c:03:f9:ff:63:3c:f8:d2:48:a6:e7:83:f7:b1:
         e2:2e:a3:18:06:63:00:5c:15:5f:5e:0a:f5:8b:50:c7:b7:e8:
         cc:ec:38:97:ec:e3:b7:35:ec:47:eb:25:51:e4:99:28:a0:6d:
         88:26:79:81:99:6c:28:f7:55:8f:79:a5:89:d5:83:5d:57:5c:
         3d:94:ca:d7:7f:a3:f9:12:c1:be:90:bc:98:97:8d:7c:49:fd:
         45:6d:7b:bc:6c:2c:e7:46:53:38:36:c4:8b:6a:00:77:ba:b6:
         44:24:43:30:66:e0:c0:10:9c:26:64:6e:1a:66:74:55:a5:05:
         24:b1:ab:0e:81:de:ad:39:99:b3:a8:15:04:11:b3:d8:c4:d0:
         6c:2e:4d:c5:95:1c:ad:4e:17:5f:8f:03:82:84:2f:0d:fd:be:
         47:a2:56:90:7a:02:4c:af:8f:39:2e:c9:c7:d7:c2:f2:fb:8a:
         81:08:68:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:31:16 2025 by rpki-client