Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CAtppzkxDhPpqSY4Z7EfoAJQv9vVEcYamjJG2QZreppX/0/34352e3232392e3136302e302f32332d3233203d3e20323637313239.roa
File:                     34352e3232392e3136302e302f32332d3233203d3e20323637313239.roa (raw, json)
Hash identifier:          GpGxqhqwZtdCAy85oeWrP1N8xaRFFnzZA5mVa8NnnNU=
Subject key identifier:   DC:3F:DD:62:21:38:86:A5:D8:C3:C3:63:BA:9D:FE:86:53:ED:9C:B7
Certificate issuer:       /CN=3843911491509B3B3FCEA8756AD486D31581E35A
Certificate serial:       4FC7243F29EEFA7BC6E3DC3772D11B626EE13BA8
Authority key identifier: 38:43:91:14:91:50:9B:3B:3F:CE:A8:75:6A:D4:86:D3:15:81:E3:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3843911491509B3B3FCEA8756AD486D31581E35A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CAtppzkxDhPpqSY4Z7EfoAJQv9vVEcYamjJG2QZreppX/0/34352e3232392e3136302e302f32332d3233203d3e20323637313239.roa
Signing time:             Sun 26 Jul 2026 20:24:20 +0000
ROA not before:           Sun 26 Jul 2026 20:19:20 +0000
ROA not after:            Sun 25 Jul 2027 20:24:20 +0000
asID:                     267129
IP address blocks:        45.229.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CAtppzkxDhPpqSY4Z7EfoAJQv9vVEcYamjJG2QZreppX/0/3843911491509B3B3FCEA8756AD486D31581E35A.crl
                          rsync://rpki-repo.registro.br/repo/CAtppzkxDhPpqSY4Z7EfoAJQv9vVEcYamjJG2QZreppX/0/3843911491509B3B3FCEA8756AD486D31581E35A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3843911491509B3B3FCEA8756AD486D31581E35A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Jul 2026 08:20:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:c7:24:3f:29:ee:fa:7b:c6:e3:dc:37:72:d1:1b:62:6e:e1:3b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3843911491509B3B3FCEA8756AD486D31581E35A
        Validity
            Not Before: Jul 26 20:19:20 2026 GMT
            Not After : Jul 25 20:24:20 2027 GMT
        Subject: CN=DC3FDD62213886A5D8C3C363BA9DFE8653ED9CB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c9:73:d0:5e:de:77:a1:f9:da:c8:d0:9b:1a:
                    ae:18:6d:66:da:85:96:18:68:06:ca:c7:18:27:c6:
                    3c:4e:9e:05:76:a7:9a:6f:56:2f:04:4b:8d:4e:16:
                    b5:42:58:54:41:65:50:ae:a7:48:07:87:94:6c:5b:
                    0b:fa:6e:fa:3a:ab:ec:9c:a1:2f:15:49:19:55:a8:
                    0e:8f:96:ca:fd:54:96:86:7b:bf:3b:cc:dc:0d:7d:
                    33:d6:d8:8e:38:b9:5d:2f:93:cb:96:5f:0f:42:dc:
                    3a:e6:16:c2:c6:b4:b9:50:38:44:2d:7f:78:a4:6a:
                    57:e6:9d:f8:4a:90:f9:e3:94:7d:7b:58:8b:72:bd:
                    58:04:25:ff:7a:1f:67:e0:ef:c6:ce:af:8a:84:23:
                    7b:6f:c4:a4:4d:62:5f:af:0c:d2:9d:6f:ec:9f:90:
                    f3:76:ff:fd:c1:be:2e:a6:92:68:b6:88:48:a1:1a:
                    c7:2c:cc:86:0a:f5:bd:8a:29:e6:88:0a:94:b5:bb:
                    ab:41:16:99:90:92:77:66:8a:b8:af:d4:23:1a:f4:
                    b6:b1:a8:6c:d9:cd:aa:d4:6d:60:76:0e:8e:0e:7e:
                    2a:82:d1:a4:ba:2d:89:17:dc:c0:7a:71:8c:47:fd:
                    4c:63:83:21:a8:78:6c:c6:98:89:f9:a5:8a:23:c6:
                    21:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:3F:DD:62:21:38:86:A5:D8:C3:C3:63:BA:9D:FE:86:53:ED:9C:B7
            X509v3 Authority Key Identifier:
                keyid:38:43:91:14:91:50:9B:3B:3F:CE:A8:75:6A:D4:86:D3:15:81:E3:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CAtppzkxDhPpqSY4Z7EfoAJQv9vVEcYamjJG2QZreppX/0/3843911491509B3B3FCEA8756AD486D31581E35A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3843911491509B3B3FCEA8756AD486D31581E35A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CAtppzkxDhPpqSY4Z7EfoAJQv9vVEcYamjJG2QZreppX/0/34352e3232392e3136302e302f32332d3233203d3e20323637313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:4c:dc:4f:2f:b4:b9:b6:91:ef:bf:88:9f:bc:6b:ee:cf:86:
         00:b3:dc:af:b5:72:53:e7:eb:83:e5:9d:9e:2b:2f:d9:70:bf:
         2a:cb:48:a0:55:b2:34:24:21:c3:29:64:94:22:48:c5:27:83:
         8d:6e:5d:db:2a:3e:db:69:20:91:22:7b:8c:6b:8f:ca:3e:6b:
         b8:68:ae:9e:4a:14:1e:fb:7f:b3:d0:a7:ef:e6:8a:58:79:d8:
         e8:8e:42:57:52:4c:29:3b:7f:31:0c:b2:3b:47:98:06:f0:51:
         68:e9:ad:34:67:66:14:15:3b:a3:e5:61:f2:84:1f:72:af:d6:
         f3:c8:15:97:eb:3a:d7:e5:2f:50:5a:8a:3c:bb:fe:91:e7:37:
         b2:2d:20:d1:74:f5:77:30:36:ff:b8:92:5e:f7:26:b3:ba:a3:
         2d:0c:cf:10:58:5f:b2:3c:35:96:f7:20:5b:05:eb:c6:0d:b2:
         4e:e8:38:96:e0:6f:ef:21:96:c0:df:7f:36:7d:17:e3:74:ab:
         bd:4b:3e:b3:6d:ad:38:4a:5f:d1:8b:ec:fa:1c:54:bd:69:91:
         be:b9:ef:0c:5d:51:96:f6:9b:c9:c6:82:91:50:ae:00:db:84:
         a2:0e:c3:8f:c1:e5:18:db:fd:c4:f8:2a:b7:ce:ac:d8:00:a2:
         7b:fb:2c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:03:36 2026 by rpki-client