Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234342e302f32322d3232203d3e20323638323936.roa
File:                     34352e3233372e3234342e302f32322d3232203d3e20323638323936.roa (raw, json)
Hash identifier:          /HB96l0qlZcM0g214VPOrSzHewmggbclGqEuOvgsi8k=
Subject key identifier:   66:D5:B9:8E:31:9C:60:F9:BB:68:A6:7C:16:96:EF:12:1D:48:F2:2D
Certificate issuer:       /CN=5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2
Certificate serial:       0C5B0E5F832677E68164E7313356FF208300FDFD
Authority key identifier: 5F:0A:FA:8A:F3:FB:CB:95:22:11:4C:46:E2:AB:F0:26:20:0D:47:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234342e302f32322d3232203d3e20323638323936.roa
Signing time:             Wed 01 Apr 2026 17:40:30 +0000
ROA not before:           Wed 01 Apr 2026 17:35:30 +0000
ROA not after:            Wed 31 Mar 2027 17:40:30 +0000
asID:                     268296
IP address blocks:        45.237.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 20:51:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:5b:0e:5f:83:26:77:e6:81:64:e7:31:33:56:ff:20:83:00:fd:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2
        Validity
            Not Before: Apr  1 17:35:30 2026 GMT
            Not After : Mar 31 17:40:30 2027 GMT
        Subject: CN=66D5B98E319C60F9BB68A67C1696EF121D48F22D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f8:03:2c:94:a7:e1:78:aa:d0:3a:51:84:36:
                    16:6d:5d:6b:77:3f:c9:98:c0:f3:07:c8:aa:75:43:
                    2b:47:ec:32:4c:da:05:17:ab:24:89:b1:69:ef:27:
                    1b:f0:4a:d2:32:ec:ac:17:e1:28:07:3c:87:ae:eb:
                    bc:00:f8:be:e1:ca:35:51:80:eb:c2:98:76:17:f2:
                    cb:90:c0:fd:d9:b4:75:41:09:51:fe:cc:d1:a5:8c:
                    a5:3e:c9:c2:0b:f1:d8:af:9d:6a:44:02:c7:90:51:
                    56:9c:65:f7:fd:06:4e:c3:e3:d1:ae:1b:50:27:78:
                    5e:17:04:13:d1:fc:ef:8f:7c:6b:b6:e2:ad:65:41:
                    54:a4:57:16:fc:44:0c:f3:86:2d:33:9f:84:3e:fe:
                    24:45:2e:89:99:f9:14:b7:84:48:e6:17:1b:e4:98:
                    e9:30:4c:b8:47:b7:6c:b5:63:78:73:f2:ed:c1:56:
                    6f:ae:85:b8:16:08:8a:1d:68:b0:40:77:df:db:8a:
                    aa:c3:cb:76:9a:da:e3:d0:8a:a3:6b:8d:90:ce:a9:
                    45:83:47:51:07:32:eb:d5:54:4b:21:ff:8a:a3:a7:
                    5d:4a:f2:7b:d6:14:63:f7:aa:c2:83:5c:4a:00:d8:
                    87:88:6e:2b:bb:fd:93:63:fb:a8:b0:3a:9b:28:43:
                    29:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D5:B9:8E:31:9C:60:F9:BB:68:A6:7C:16:96:EF:12:1D:48:F2:2D
            X509v3 Authority Key Identifier:
                keyid:5F:0A:FA:8A:F3:FB:CB:95:22:11:4C:46:E2:AB:F0:26:20:0D:47:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234342e302f32322d3232203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:d6:bd:ce:b1:3e:a2:7a:aa:67:5f:09:0e:35:93:f5:2c:a5:
         f4:f1:91:bb:95:67:0d:de:b6:cd:41:75:14:87:3a:26:8c:b3:
         5b:02:55:44:ef:dd:38:ce:4d:48:c7:f5:22:64:23:bd:a6:0d:
         02:9c:af:d0:75:77:e4:96:7c:0f:a9:78:51:4e:f1:54:14:54:
         76:30:86:33:e6:28:86:f9:13:94:84:ee:c8:53:34:9d:d5:e4:
         2d:31:0a:b5:35:ff:cb:58:17:70:0e:5c:41:42:32:45:73:77:
         a7:02:67:48:ad:aa:4d:74:aa:03:94:31:cb:c2:d8:a0:1d:06:
         7d:33:aa:d4:c1:a0:af:64:e3:d8:d2:7a:ff:c3:1a:ba:d3:d4:
         f4:65:e7:d3:21:1d:f8:98:5f:1c:a8:59:87:09:5a:dc:05:30:
         7c:ed:27:9e:a9:27:24:e4:72:bd:64:8b:8b:ac:7a:85:40:64:
         81:83:f2:63:02:aa:04:57:98:8f:0a:08:a4:63:2b:4f:47:34:
         32:15:c2:6e:6d:96:b7:e7:84:15:f8:e9:1d:06:5f:ec:3e:74:
         da:a7:58:36:63:23:99:c6:05:43:37:49:53:a8:eb:ae:a9:f5:
         fe:82:6c:64:6f:c2:7f:6b:a2:1b:3d:89:41:67:d6:bc:04:f6:
         2e:b2:a6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 07:41:07 2026 by rpki-client