Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ENUz4iakany2yxvUkeZzLRxoWwCCvxKNSCbBAoKsnbkn/0/34352e3233342e3139382e302f32332d3233203d3e20323637333834.roa
File:                     34352e3233342e3139382e302f32332d3233203d3e20323637333834.roa (raw, json)
Hash identifier:          LFjSTn6yKlG1ISrKQM/Ys3v6eAdb2aCrgvzKnZfbvyQ=
Subject key identifier:   2E:2C:50:99:B2:7A:A8:B4:76:60:DE:1C:DD:FA:26:64:C1:04:D5:42
Certificate issuer:       /CN=9E59DF3AA037619983782349ADD1B34802F0330A
Certificate serial:       494596EF321BAC9DB90E0DB7CD57AB612A2D2587
Authority key identifier: 9E:59:DF:3A:A0:37:61:99:83:78:23:49:AD:D1:B3:48:02:F0:33:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E59DF3AA037619983782349ADD1B34802F0330A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ENUz4iakany2yxvUkeZzLRxoWwCCvxKNSCbBAoKsnbkn/0/34352e3233342e3139382e302f32332d3233203d3e20323637333834.roa
Signing time:             Tue 09 Jun 2026 17:28:44 +0000
ROA not before:           Tue 09 Jun 2026 17:23:44 +0000
ROA not after:            Tue 08 Jun 2027 17:28:44 +0000
asID:                     267384
IP address blocks:        45.234.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ENUz4iakany2yxvUkeZzLRxoWwCCvxKNSCbBAoKsnbkn/0/9E59DF3AA037619983782349ADD1B34802F0330A.crl
                          rsync://rpki-repo.registro.br/repo/ENUz4iakany2yxvUkeZzLRxoWwCCvxKNSCbBAoKsnbkn/0/9E59DF3AA037619983782349ADD1B34802F0330A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E59DF3AA037619983782349ADD1B34802F0330A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 15:58:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:45:96:ef:32:1b:ac:9d:b9:0e:0d:b7:cd:57:ab:61:2a:2d:25:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E59DF3AA037619983782349ADD1B34802F0330A
        Validity
            Not Before: Jun  9 17:23:44 2026 GMT
            Not After : Jun  8 17:28:44 2027 GMT
        Subject: CN=2E2C5099B27AA8B47660DE1CDDFA2664C104D542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:42:4b:ac:d5:4f:47:50:fb:21:67:c0:e9:11:
                    1a:4a:96:98:fc:25:fd:1d:90:78:a3:5f:5e:52:72:
                    de:1b:e6:fd:22:ac:23:2c:e2:6e:93:eb:c7:19:c6:
                    fd:8e:64:e7:e7:6c:c5:52:9f:85:48:24:bf:78:af:
                    e8:ea:fc:17:b7:1d:52:3c:dc:eb:80:38:68:04:b9:
                    46:ec:de:d3:e8:1b:6e:37:14:c2:09:1f:79:66:ac:
                    d5:d8:51:94:f3:a5:8d:aa:7f:3b:61:33:b9:50:16:
                    29:08:52:3c:58:03:d5:c4:fd:78:6f:87:00:5b:3a:
                    a9:7f:42:8c:41:2d:cc:c5:49:86:89:72:2e:0c:c5:
                    25:88:ec:c0:77:ae:8c:ac:af:51:68:43:9a:32:c4:
                    ca:eb:9f:bc:c4:b5:12:cf:f3:ea:c2:f1:5b:19:e5:
                    21:25:7a:fd:53:35:b5:22:48:de:e6:5b:60:94:1c:
                    e4:38:d2:94:50:bc:b3:ce:68:38:17:84:aa:f8:99:
                    42:8c:0f:93:3d:e9:f1:00:8a:74:74:02:b1:06:87:
                    0e:19:bb:b2:dd:84:92:f7:a9:60:3f:6e:57:91:8f:
                    76:07:41:d4:1f:75:cf:cd:20:c3:96:7e:ca:23:03:
                    0c:da:d5:21:b4:52:b5:2f:8c:8d:c0:b2:42:28:81:
                    1e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:2C:50:99:B2:7A:A8:B4:76:60:DE:1C:DD:FA:26:64:C1:04:D5:42
            X509v3 Authority Key Identifier:
                keyid:9E:59:DF:3A:A0:37:61:99:83:78:23:49:AD:D1:B3:48:02:F0:33:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ENUz4iakany2yxvUkeZzLRxoWwCCvxKNSCbBAoKsnbkn/0/9E59DF3AA037619983782349ADD1B34802F0330A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E59DF3AA037619983782349ADD1B34802F0330A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ENUz4iakany2yxvUkeZzLRxoWwCCvxKNSCbBAoKsnbkn/0/34352e3233342e3139382e302f32332d3233203d3e20323637333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:49:f3:3e:30:d7:75:03:7f:c7:a1:a7:d9:56:bd:a1:d7:77:
         13:31:a5:f1:d1:6c:5f:df:72:a1:3c:47:0a:57:f9:b6:f6:ab:
         07:b3:71:bd:6e:36:fe:11:6d:13:43:62:6e:d1:57:24:39:90:
         f6:5e:52:84:95:7c:4f:ed:c8:9a:a6:de:05:2e:e5:1d:12:e9:
         a1:31:e9:6b:61:a0:61:1b:41:7e:69:15:71:82:6c:19:4a:25:
         03:f1:78:c0:a4:14:d7:47:23:1f:ad:01:3a:aa:1a:ec:cc:fe:
         8f:4a:a9:01:e4:b2:e2:6d:9a:89:99:e5:7c:90:7f:83:55:85:
         16:49:5d:64:1b:13:62:5b:3f:a4:97:63:b1:55:7f:84:d6:03:
         99:19:0b:61:ea:3a:4f:a2:7a:ec:7e:ef:20:ca:73:c4:0c:36:
         a1:5e:30:a5:6e:f7:89:c6:cc:9e:80:bb:9a:19:ec:dc:a5:3e:
         6d:a8:43:a7:0a:e2:9e:9d:b7:cc:f4:12:94:4c:a6:9e:39:3d:
         25:14:89:0c:6f:d5:00:94:ab:e6:95:a0:ac:13:34:d1:ed:f3:
         34:1c:ea:00:b0:11:33:03:68:14:b8:7a:3b:57:39:0e:8f:fc:
         7d:0b:93:8e:be:f5:f9:1e:14:1a:57:66:7d:40:39:b7:d3:43:
         bb:d9:15:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:57:39 2026 by rpki-client