Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F1zMEY4eCELTX91aar5b9DP12qXet2wPyCrxBZYp8T8U/0/34352e37312e3136382e302f32342d3234203d3e20323734373735.roa
File:                     34352e37312e3136382e302f32342d3234203d3e20323734373735.roa (raw, json)
Hash identifier:          AmjIex20EvLZMUx96fw+p2oo13VlUKSatjlFVxZKWg8=
Subject key identifier:   24:DF:4A:7B:30:F2:22:A8:57:F0:18:6C:2D:C6:12:80:A5:D8:77:56
Certificate issuer:       /CN=72498970A4E832211C0DA0ED3526B1CE579C5172
Certificate serial:       7123A606781CFDAFAAEA6592795E9E110F26B3EC
Authority key identifier: 72:49:89:70:A4:E8:32:21:1C:0D:A0:ED:35:26:B1:CE:57:9C:51:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72498970A4E832211C0DA0ED3526B1CE579C5172.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F1zMEY4eCELTX91aar5b9DP12qXet2wPyCrxBZYp8T8U/0/34352e37312e3136382e302f32342d3234203d3e20323734373735.roa
Signing time:             Thu 11 Jun 2026 14:13:45 +0000
ROA not before:           Thu 11 Jun 2026 14:08:45 +0000
ROA not after:            Thu 10 Jun 2027 14:13:45 +0000
asID:                     274775
IP address blocks:        45.71.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F1zMEY4eCELTX91aar5b9DP12qXet2wPyCrxBZYp8T8U/0/72498970A4E832211C0DA0ED3526B1CE579C5172.crl
                          rsync://rpki-repo.registro.br/repo/F1zMEY4eCELTX91aar5b9DP12qXet2wPyCrxBZYp8T8U/0/72498970A4E832211C0DA0ED3526B1CE579C5172.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72498970A4E832211C0DA0ED3526B1CE579C5172.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 21:04:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:23:a6:06:78:1c:fd:af:aa:ea:65:92:79:5e:9e:11:0f:26:b3:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72498970A4E832211C0DA0ED3526B1CE579C5172
        Validity
            Not Before: Jun 11 14:08:45 2026 GMT
            Not After : Jun 10 14:13:45 2027 GMT
        Subject: CN=24DF4A7B30F222A857F0186C2DC61280A5D87756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:72:ae:50:d0:9f:01:32:3e:97:ac:fd:9a:72:
                    cc:c9:97:9d:8e:f8:a7:19:fc:4f:f2:90:75:36:8e:
                    7c:26:de:8a:75:77:f3:ab:55:c5:c6:bc:9e:e0:80:
                    6d:f5:26:b2:f3:9f:a5:86:b7:9d:78:5c:17:0d:8d:
                    17:ff:01:17:ad:fe:ca:ca:d0:c5:c1:9e:cd:c9:ca:
                    f4:24:d1:e0:a9:55:63:4e:50:72:98:12:37:7b:2f:
                    2b:ae:d4:46:60:3c:42:a3:c2:80:1d:ee:16:98:5d:
                    e6:5c:fb:91:20:ca:30:c4:35:a9:41:6c:98:c8:f9:
                    81:76:88:2a:15:e1:67:14:cb:79:69:ef:74:4d:8d:
                    40:72:34:18:d5:13:5c:a1:ec:ad:ee:50:da:75:c0:
                    0e:11:44:56:0b:c9:65:0c:a5:30:b7:97:06:66:bf:
                    f4:d9:53:00:69:cb:e3:70:a3:14:a3:c7:87:f4:5c:
                    0c:12:ba:3e:fd:f6:84:6c:ef:20:4b:3b:8a:40:3a:
                    b0:03:32:a3:58:a0:49:ef:48:37:0a:b1:2e:ad:59:
                    22:54:f4:d6:b1:54:4c:47:6c:c7:94:ba:15:c0:fe:
                    d8:70:df:de:fe:36:93:8e:2c:5f:c3:ad:3a:fd:dc:
                    dd:39:16:74:60:ed:78:12:75:67:3d:59:80:6b:f2:
                    dc:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:DF:4A:7B:30:F2:22:A8:57:F0:18:6C:2D:C6:12:80:A5:D8:77:56
            X509v3 Authority Key Identifier:
                keyid:72:49:89:70:A4:E8:32:21:1C:0D:A0:ED:35:26:B1:CE:57:9C:51:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F1zMEY4eCELTX91aar5b9DP12qXet2wPyCrxBZYp8T8U/0/72498970A4E832211C0DA0ED3526B1CE579C5172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72498970A4E832211C0DA0ED3526B1CE579C5172.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F1zMEY4eCELTX91aar5b9DP12qXet2wPyCrxBZYp8T8U/0/34352e37312e3136382e302f32342d3234203d3e20323734373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:63:3b:39:34:a2:08:70:41:4b:f5:e0:f4:78:66:bb:ae:58:
         37:a1:a9:f5:71:e9:e7:5c:60:e6:f0:b0:aa:ee:78:66:3f:22:
         c7:ae:f9:8b:9f:05:4d:4c:14:61:c4:e5:13:3a:a5:4b:a9:92:
         7d:87:19:4a:44:9f:07:1b:f8:b7:ae:b3:3b:18:3c:70:08:39:
         7e:95:59:73:ca:06:08:b3:b1:6f:1c:3b:ec:c9:62:6d:ae:ee:
         79:01:a6:eb:39:1c:91:d5:6d:36:04:86:bc:a7:8f:d2:cc:d6:
         b2:d5:40:4d:0b:75:7b:15:09:10:d5:26:9c:e9:c8:fd:d2:e0:
         de:7d:93:ef:64:a0:de:cc:5f:c4:0e:f0:b3:c4:c4:f1:07:3f:
         4b:4c:11:93:a5:d7:b7:c4:fa:52:4f:dc:7a:1a:bf:0c:5e:b0:
         a4:6b:5f:20:44:98:66:ab:5f:e7:15:fb:fc:d3:e0:a8:22:fd:
         17:4a:5d:37:1f:06:54:f6:83:4d:57:4c:8b:9f:d2:0c:b0:d4:
         39:58:6a:bb:bb:e6:66:bf:06:d5:2e:14:8d:4d:65:63:54:44:
         fb:ef:e5:32:4f:2f:b9:16:a1:3d:a7:75:94:97:63:cd:cb:4b:
         fd:09:85:21:a8:8a:80:75:21:a9:6e:90:31:71:13:a7:5a:4c:
         bb:bf:e2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:12:59 2026 by rpki-client