Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/34352e3233342e36332e302f32342d3234203d3e20323632353339.roa
File:                     34352e3233342e36332e302f32342d3234203d3e20323632353339.roa (raw, json)
Hash identifier:          tAW1G0pJuGt4Cg49eOPtQuRUJA+LxN1amA3q/GmPYZI=
Subject key identifier:   C4:76:C7:27:B4:54:09:F5:EC:4F:2D:2B:61:4C:6F:0E:CE:8B:DE:E8
Certificate issuer:       /CN=48C8BB91A4A51A013E78E5B7DCC8F94EA7044483
Certificate serial:       5261D55AD9385D433FCD41A6223CAB3758D68FC5
Authority key identifier: 48:C8:BB:91:A4:A5:1A:01:3E:78:E5:B7:DC:C8:F9:4E:A7:04:44:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48C8BB91A4A51A013E78E5B7DCC8F94EA7044483.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/34352e3233342e36332e302f32342d3234203d3e20323632353339.roa
Signing time:             Tue 07 Apr 2026 18:53:33 +0000
ROA not before:           Tue 07 Apr 2026 18:48:33 +0000
ROA not after:            Tue 06 Apr 2027 18:53:33 +0000
asID:                     262539
IP address blocks:        45.234.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/48C8BB91A4A51A013E78E5B7DCC8F94EA7044483.crl
                          rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/48C8BB91A4A51A013E78E5B7DCC8F94EA7044483.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48C8BB91A4A51A013E78E5B7DCC8F94EA7044483.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 14:09:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:61:d5:5a:d9:38:5d:43:3f:cd:41:a6:22:3c:ab:37:58:d6:8f:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48C8BB91A4A51A013E78E5B7DCC8F94EA7044483
        Validity
            Not Before: Apr  7 18:48:33 2026 GMT
            Not After : Apr  6 18:53:33 2027 GMT
        Subject: CN=C476C727B45409F5EC4F2D2B614C6F0ECE8BDEE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:58:b7:57:42:02:46:e5:5f:8e:e1:78:58:91:
                    26:91:25:2f:7d:0d:7a:70:5e:d8:b3:b0:9d:f6:ca:
                    ee:d7:55:ff:53:7d:ef:a1:d8:1b:2b:4e:26:24:79:
                    71:cb:48:30:61:39:33:75:d0:d3:d2:92:df:0e:1a:
                    94:67:62:f5:7e:bb:b4:21:9f:1d:2d:61:33:c5:ba:
                    81:81:af:e7:e6:75:80:21:ae:88:61:b6:bf:02:a3:
                    7e:62:cd:93:45:22:9c:19:90:ce:cb:e2:06:ac:c9:
                    ef:0f:ad:58:a5:a4:4f:42:e4:17:6d:66:26:d2:2d:
                    08:c8:99:98:61:83:df:6e:27:c7:96:e1:c4:e5:69:
                    c7:69:8f:5b:07:4a:6d:e7:bf:95:d5:10:b3:81:e6:
                    42:86:77:e1:ba:8b:24:8f:b9:81:f7:65:0f:cd:26:
                    b6:5e:83:c1:79:42:af:42:46:31:e0:60:23:44:9f:
                    bd:36:d0:af:33:d5:1c:d7:54:db:b6:e3:e4:e5:2b:
                    df:94:e5:3e:5e:ed:ee:12:d8:d5:3c:6f:ef:ae:ac:
                    c4:81:9c:51:9b:ed:05:42:2e:f4:2a:12:54:85:58:
                    85:20:2f:41:b4:95:25:c5:e0:94:45:71:d2:af:50:
                    8c:19:29:bd:f6:8a:7a:9e:b8:07:e5:f7:02:00:6e:
                    f2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:76:C7:27:B4:54:09:F5:EC:4F:2D:2B:61:4C:6F:0E:CE:8B:DE:E8
            X509v3 Authority Key Identifier:
                keyid:48:C8:BB:91:A4:A5:1A:01:3E:78:E5:B7:DC:C8:F9:4E:A7:04:44:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/48C8BB91A4A51A013E78E5B7DCC8F94EA7044483.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48C8BB91A4A51A013E78E5B7DCC8F94EA7044483.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/34352e3233342e36332e302f32342d3234203d3e20323632353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:27:88:c7:ae:c7:41:81:3d:4c:9c:1d:86:8d:22:b0:cd:2e:
         69:55:78:f6:cf:87:d4:51:d3:aa:67:95:7b:29:ca:c2:30:bb:
         d1:92:18:41:74:37:a0:0e:53:44:ad:a0:e5:1e:ab:f0:27:7a:
         3c:02:ab:fd:66:b6:0c:7a:e8:8c:f5:24:63:96:48:43:dd:6c:
         a2:1f:04:75:c3:2f:0e:d4:95:0c:49:78:3a:31:49:c4:57:9e:
         ad:3d:de:f3:ed:9a:f7:9b:d1:4b:b2:ad:06:96:cd:b7:c8:bd:
         59:76:35:3b:c1:33:4b:7a:9f:b8:41:ed:90:86:e2:77:92:f1:
         42:ee:86:32:e0:78:39:cc:a8:6a:57:4b:54:6d:54:5e:06:c8:
         1e:b0:c3:4a:61:b1:1c:22:44:0b:f3:7e:cf:49:20:6b:d3:94:
         1e:2d:07:69:0f:ad:ab:b8:85:f0:00:26:dc:a1:7b:30:07:8b:
         31:b1:32:ba:e3:26:24:55:ed:61:14:e0:e5:0f:a0:b4:40:e5:
         68:2e:0b:16:7c:5e:6a:17:10:33:9f:1d:29:4f:43:22:e2:40:
         2c:93:91:97:a8:4e:26:88:3e:aa:c5:89:f1:fa:26:f9:f0:b4:
         3f:0c:81:5f:ff:90:dc:5f:39:80:fa:b7:7b:31:ad:0e:fb:be:
         d2:0b:45:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 15:59:14 2026 by rpki-client