Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CzzKNEWfFZHGSQcGf4qiZ6gAbjfs4udEd37BUSLqNxTa/1/34352e3138352e3233322e302f32322d3332203d3e20323639333935.roa
File:                     34352e3138352e3233322e302f32322d3332203d3e20323639333935.roa (raw, json)
Hash identifier:          4ShVGg1PzOx0K9qdw6iI2A14TDJUpAQa1tx0LFLbH6A=
Subject key identifier:   61:65:93:99:CC:9B:C1:D1:CD:AB:6E:DF:6F:18:E1:AA:79:FD:27:55
Certificate issuer:       /CN=6A50C3539B611D00CB3A70A4F78534B8BAA97FB4
Certificate serial:       1B7937BAC363DB25F8E72A2C2B75C41C009B73
Authority key identifier: 6A:50:C3:53:9B:61:1D:00:CB:3A:70:A4:F7:85:34:B8:BA:A9:7F:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A50C3539B611D00CB3A70A4F78534B8BAA97FB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzzKNEWfFZHGSQcGf4qiZ6gAbjfs4udEd37BUSLqNxTa/1/34352e3138352e3233322e302f32322d3332203d3e20323639333935.roa
Signing time:             Mon 02 Mar 2026 16:38:14 +0000
ROA not before:           Mon 02 Mar 2026 16:33:14 +0000
ROA not after:            Mon 01 Mar 2027 16:38:14 +0000
asID:                     269395
IP address blocks:        45.185.232.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CzzKNEWfFZHGSQcGf4qiZ6gAbjfs4udEd37BUSLqNxTa/1/6A50C3539B611D00CB3A70A4F78534B8BAA97FB4.crl
                          rsync://rpki-repo.registro.br/repo/CzzKNEWfFZHGSQcGf4qiZ6gAbjfs4udEd37BUSLqNxTa/1/6A50C3539B611D00CB3A70A4F78534B8BAA97FB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A50C3539B611D00CB3A70A4F78534B8BAA97FB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 17:57:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:79:37:ba:c3:63:db:25:f8:e7:2a:2c:2b:75:c4:1c:00:9b:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A50C3539B611D00CB3A70A4F78534B8BAA97FB4
        Validity
            Not Before: Mar  2 16:33:14 2026 GMT
            Not After : Mar  1 16:38:14 2027 GMT
        Subject: CN=61659399CC9BC1D1CDAB6EDF6F18E1AA79FD2755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:22:ba:e0:31:59:41:f7:4b:24:20:66:0e:0a:
                    99:cb:6d:05:84:57:f5:4d:4d:86:75:01:45:8c:70:
                    24:9c:0f:6d:24:3a:c5:da:75:1d:4e:33:6a:d5:75:
                    10:87:23:e4:cd:2b:5f:58:a3:64:64:23:63:5c:c7:
                    d5:39:c7:dc:3c:6a:c2:d3:4f:ff:51:c1:82:77:43:
                    31:a5:55:f6:cf:cd:b2:b0:36:6b:d7:fc:73:66:7e:
                    b7:5a:9e:5f:62:94:c7:92:6c:e4:e8:a7:df:d3:f1:
                    dc:1f:5f:f2:d9:c2:0c:65:1e:2e:64:a8:73:7e:5e:
                    36:30:28:c9:06:14:44:33:55:13:2b:b9:5b:e6:12:
                    59:d0:18:ce:d0:d3:a5:91:b5:58:d4:11:ec:08:b2:
                    6a:bb:e6:41:91:a7:9a:c7:b8:a2:45:a9:1e:ef:97:
                    8a:f7:94:3c:43:29:ce:d5:54:8e:91:21:95:19:f9:
                    05:a5:e5:2a:4a:cb:81:0e:9d:c1:a1:6e:4d:99:46:
                    2e:3e:c0:ca:a2:8c:f0:db:51:bd:39:ab:1d:78:7c:
                    a2:85:af:d3:d0:12:5d:0e:0d:e7:62:aa:92:bb:5b:
                    dd:89:bc:47:50:51:98:c8:60:de:42:93:78:4e:81:
                    f1:59:78:85:aa:2d:55:35:8a:aa:ce:96:cb:be:7a:
                    e2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:65:93:99:CC:9B:C1:D1:CD:AB:6E:DF:6F:18:E1:AA:79:FD:27:55
            X509v3 Authority Key Identifier:
                keyid:6A:50:C3:53:9B:61:1D:00:CB:3A:70:A4:F7:85:34:B8:BA:A9:7F:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzzKNEWfFZHGSQcGf4qiZ6gAbjfs4udEd37BUSLqNxTa/1/6A50C3539B611D00CB3A70A4F78534B8BAA97FB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A50C3539B611D00CB3A70A4F78534B8BAA97FB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzzKNEWfFZHGSQcGf4qiZ6gAbjfs4udEd37BUSLqNxTa/1/34352e3138352e3233322e302f32322d3332203d3e20323639333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:df:ea:a1:a4:ed:08:22:fd:ab:5c:c2:30:ac:77:85:b8:cc:
         65:38:21:ff:5a:7c:64:c0:e3:1c:1a:4c:96:64:08:34:fc:a1:
         8e:38:3a:60:fc:21:e5:42:c0:1f:e0:76:c3:2d:4a:10:0a:7e:
         5a:58:bf:41:e1:13:4a:62:29:6a:95:65:6c:6c:ad:9a:31:69:
         47:95:1a:5f:bf:2b:cb:50:5f:6d:30:4a:19:ac:16:f7:37:a4:
         e5:e9:12:e0:c2:f8:b2:15:37:7d:68:3d:32:10:e2:1c:aa:45:
         70:84:ad:5c:64:8e:48:ed:c3:56:6e:ec:05:be:6d:8c:0d:71:
         ff:14:cc:3b:9d:1d:6e:a0:68:68:b2:77:85:37:64:88:1d:50:
         ac:50:1c:39:7d:c8:c4:0c:c6:b3:9f:09:91:09:0c:2f:06:1e:
         9c:0f:fc:95:29:ae:20:4f:f0:3c:0d:1f:bb:8e:d0:64:48:ac:
         c7:48:58:8b:eb:dc:e8:80:65:c3:36:eb:5b:fa:f8:70:74:f4:
         65:6d:23:73:72:76:ce:2c:b5:0d:b8:a4:bf:66:aa:1f:af:09:
         60:f1:7e:6e:c9:26:c9:82:16:5e:86:7a:5a:23:08:9a:f5:b2:
         c6:5f:e5:6e:7e:6e:f7:83:35:00:a5:24:cf:41:0c:e1:42:fa:
         0b:3d:b8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:53:40 2026 by rpki-client