Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GCwP9pdoi5dvim88NoieosrwmJ3CxjmM91QcfQwER2Jv/0/34352e37302e362e302f32332d3332203d3e20323733353833.roa
File:                     34352e37302e362e302f32332d3332203d3e20323733353833.roa (raw, json)
Hash identifier:          836f4OOqC2TmLYPhOiI/Rwc3q1GXqv6HhIrDt1JF9Cs=
Subject key identifier:   A8:53:90:B9:FB:3D:78:C4:54:54:58:BF:BA:DC:02:8C:AB:A9:A4:C4
Certificate issuer:       /CN=9CB518189DB04B365BACF0400B56A31E7A9A0DD1
Certificate serial:       77D26C30EE3F9533DEF98B7C175739B005AA4DAC
Authority key identifier: 9C:B5:18:18:9D:B0:4B:36:5B:AC:F0:40:0B:56:A3:1E:7A:9A:0D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB518189DB04B365BACF0400B56A31E7A9A0DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GCwP9pdoi5dvim88NoieosrwmJ3CxjmM91QcfQwER2Jv/0/34352e37302e362e302f32332d3332203d3e20323733353833.roa
Signing time:             Thu 19 Feb 2026 17:27:16 +0000
ROA not before:           Thu 19 Feb 2026 17:22:16 +0000
ROA not after:            Thu 18 Feb 2027 17:27:16 +0000
asID:                     273583
IP address blocks:        45.70.6.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GCwP9pdoi5dvim88NoieosrwmJ3CxjmM91QcfQwER2Jv/0/9CB518189DB04B365BACF0400B56A31E7A9A0DD1.crl
                          rsync://rpki-repo.registro.br/repo/GCwP9pdoi5dvim88NoieosrwmJ3CxjmM91QcfQwER2Jv/0/9CB518189DB04B365BACF0400B56A31E7A9A0DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB518189DB04B365BACF0400B56A31E7A9A0DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 11:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:d2:6c:30:ee:3f:95:33:de:f9:8b:7c:17:57:39:b0:05:aa:4d:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CB518189DB04B365BACF0400B56A31E7A9A0DD1
        Validity
            Not Before: Feb 19 17:22:16 2026 GMT
            Not After : Feb 18 17:27:16 2027 GMT
        Subject: CN=A85390B9FB3D78C4545458BFBADC028CABA9A4C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:73:db:23:a2:29:3d:73:a1:3b:65:45:d2:ee:
                    2d:0d:97:e7:5b:5b:90:44:5d:df:7e:9a:02:ae:ab:
                    16:be:9b:bc:c5:69:b2:35:83:f2:14:d5:52:0e:c5:
                    fd:f6:55:c8:c5:2a:7e:71:67:28:b0:19:bd:61:d2:
                    f8:97:9b:f4:5d:e1:42:41:38:c0:bb:12:bd:bd:5d:
                    1d:36:10:f5:60:66:aa:27:08:01:64:68:6e:26:20:
                    ba:d1:e7:8d:aa:9f:62:f2:62:cd:65:e9:40:dc:59:
                    e8:95:03:3a:65:ea:5b:6b:49:02:e8:bb:d7:b6:b7:
                    c1:16:1c:03:f3:76:16:cb:63:6f:1b:e1:ae:89:1d:
                    93:30:2d:d3:99:6d:3e:32:95:1e:07:01:54:89:f1:
                    bc:28:50:1e:1c:f1:d4:a2:c5:04:03:7c:41:56:04:
                    fa:b5:10:1d:92:65:58:93:75:16:b9:a2:91:8f:ae:
                    04:72:54:5e:56:7d:11:e2:e5:df:d3:94:6d:41:e9:
                    fe:65:9e:f2:ba:b3:b5:99:fc:41:36:2b:73:b6:04:
                    04:de:27:82:5d:cb:2a:48:4e:df:ea:3d:6e:c4:25:
                    ba:d4:ef:48:6f:f5:b6:82:9d:41:39:a1:65:fc:3c:
                    9a:b1:aa:8b:e6:d3:4a:2f:81:5e:f4:3f:84:47:24:
                    54:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:53:90:B9:FB:3D:78:C4:54:54:58:BF:BA:DC:02:8C:AB:A9:A4:C4
            X509v3 Authority Key Identifier:
                keyid:9C:B5:18:18:9D:B0:4B:36:5B:AC:F0:40:0B:56:A3:1E:7A:9A:0D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GCwP9pdoi5dvim88NoieosrwmJ3CxjmM91QcfQwER2Jv/0/9CB518189DB04B365BACF0400B56A31E7A9A0DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB518189DB04B365BACF0400B56A31E7A9A0DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GCwP9pdoi5dvim88NoieosrwmJ3CxjmM91QcfQwER2Jv/0/34352e37302e362e302f32332d3332203d3e20323733353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:16:48:ab:7f:bc:24:2f:f1:f7:4c:56:7b:41:f1:e9:b8:68:
         01:11:b5:f5:73:63:54:d5:25:3d:29:20:e7:03:61:97:84:8e:
         ef:21:16:66:9f:4f:87:41:ba:34:10:df:90:ef:33:29:20:da:
         e3:e4:fa:91:dc:0d:f6:8c:ea:25:62:62:81:03:d1:9f:c9:33:
         a2:f0:fe:65:30:b1:7a:b9:8e:bb:d3:f4:ad:1a:0c:b6:29:e5:
         08:4a:e5:60:34:c0:8f:70:27:b8:69:f3:ac:3c:aa:c3:0c:40:
         79:80:11:ed:db:ba:b8:15:0a:99:3a:e3:5c:e8:a4:3a:8b:5b:
         f5:ef:69:af:5f:55:b3:70:e6:eb:af:0c:ca:db:23:36:ab:ca:
         8d:2c:46:64:8c:0d:ee:db:90:49:6c:53:3a:41:6a:46:51:fb:
         8b:31:15:74:9b:8c:37:81:7f:56:fe:92:10:47:ff:49:63:17:
         ad:cf:99:d3:e3:db:8f:00:a6:4f:56:66:45:7d:af:d4:13:da:
         e5:d6:98:c4:48:1d:26:70:ac:ad:5f:cb:d6:d5:2e:cd:cc:fc:
         0c:ed:9f:a4:d4:1e:68:9f:59:82:00:ba:1b:68:98:86:b5:a8:
         8b:17:77:f7:77:c2:ba:a4:ca:4d:0b:05:fa:0d:30:83:24:a1:
         cb:66:0e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:57:57 2026 by rpki-client