Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234342e302f32342d3234203d3e20323638323936.roa
File:                     34352e3233372e3234342e302f32342d3234203d3e20323638323936.roa (raw, json)
Hash identifier:          /fEbJEal0Q6ylr4jjsSJmnl2NHDPL3HEbZCCDnTGxhk=
Subject key identifier:   D5:AD:B6:F8:52:83:9F:0F:CF:1C:72:C8:F5:EF:B6:CD:A8:5A:7B:D2
Certificate issuer:       /CN=5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2
Certificate serial:       7BBA24A7361C23E0610BBD526AF0FF69CFEC428D
Authority key identifier: 5F:0A:FA:8A:F3:FB:CB:95:22:11:4C:46:E2:AB:F0:26:20:0D:47:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234342e302f32342d3234203d3e20323638323936.roa
Signing time:             Wed 01 Apr 2026 17:40:28 +0000
ROA not before:           Wed 01 Apr 2026 17:35:28 +0000
ROA not after:            Wed 31 Mar 2027 17:40:28 +0000
asID:                     268296
IP address blocks:        45.237.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 20:51:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:ba:24:a7:36:1c:23:e0:61:0b:bd:52:6a:f0:ff:69:cf:ec:42:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2
        Validity
            Not Before: Apr  1 17:35:28 2026 GMT
            Not After : Mar 31 17:40:28 2027 GMT
        Subject: CN=D5ADB6F852839F0FCF1C72C8F5EFB6CDA85A7BD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7d:73:4b:45:92:fd:56:e1:ac:d8:d6:c8:a3:
                    fa:84:d0:82:63:26:f0:65:90:5b:79:0c:d9:1a:b9:
                    2c:66:cf:1a:d9:07:1d:a7:07:20:91:38:d4:f1:14:
                    74:67:8c:16:4a:bb:09:8f:54:f5:ea:d7:da:5d:dd:
                    bc:79:4d:b5:73:c1:fe:ef:ec:41:8c:e0:ac:33:57:
                    b1:0a:42:72:4f:8b:f9:ae:ce:54:0d:58:d3:41:0f:
                    ed:c8:13:a5:86:d2:c8:fe:aa:b6:5a:c2:45:95:fa:
                    12:51:e4:6c:3e:56:ac:46:60:5d:5a:79:84:f0:ab:
                    db:ba:ef:3d:27:29:c8:92:7e:fd:d6:38:06:ad:01:
                    60:01:b6:04:04:5f:6c:74:20:a7:9a:77:cd:a5:44:
                    fd:f4:46:c8:f4:65:13:d4:a6:85:26:83:20:d0:dd:
                    28:ee:b0:8a:9b:f1:59:53:0a:45:2d:7a:32:3a:35:
                    1e:c6:3a:70:89:1a:90:ba:51:e5:f7:96:54:a2:97:
                    49:3a:80:b3:8b:c8:20:f8:ab:84:91:71:fe:5b:95:
                    32:2f:51:37:8e:dd:b7:d1:02:23:1b:13:09:53:bd:
                    09:bc:1f:6a:4c:53:1f:60:fd:aa:42:17:68:df:b7:
                    5d:61:db:ec:62:b8:44:a0:07:44:6e:f9:1f:a9:5c:
                    f9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:AD:B6:F8:52:83:9F:0F:CF:1C:72:C8:F5:EF:B6:CD:A8:5A:7B:D2
            X509v3 Authority Key Identifier:
                keyid:5F:0A:FA:8A:F3:FB:CB:95:22:11:4C:46:E2:AB:F0:26:20:0D:47:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234342e302f32342d3234203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:ea:80:bf:76:06:be:49:29:db:ed:3a:a3:6c:a8:d0:8b:31:
         7d:fe:39:d7:cf:3e:f0:55:77:35:83:b2:62:9f:87:9c:14:9e:
         79:13:de:49:55:9d:ea:e5:f3:96:93:ba:27:07:91:bb:21:93:
         60:f5:b6:85:f5:77:e6:58:1f:91:4a:56:0c:02:9e:02:3c:91:
         c6:7b:83:b9:e5:61:44:27:10:6e:0b:c6:d1:04:6b:97:65:a2:
         14:85:8e:59:92:62:c2:d3:63:10:bd:eb:f9:a8:87:a4:c9:02:
         38:14:7e:3d:85:0f:82:d1:cf:2b:08:63:e0:e4:37:71:7f:25:
         fd:91:d7:cd:8c:8e:f6:6a:b2:7f:39:40:22:a0:e5:a4:a7:66:
         13:dc:45:88:e1:9d:ea:f8:3e:6a:39:5b:4e:0a:4e:d1:fb:8a:
         bd:3a:6a:36:8f:27:f2:2b:2c:80:1d:a6:f8:45:98:d4:35:5e:
         4f:9a:5b:1f:40:de:a3:a6:2a:15:56:c6:e1:43:4e:65:50:f0:
         7c:e6:d3:24:0f:7f:7d:9d:a6:b5:66:62:d9:1f:5d:4a:c0:40:
         49:59:72:9f:60:cf:6c:b2:32:03:79:0a:77:27:8b:ff:83:09:
         5d:a3:8c:9b:ca:cb:d1:8d:f9:aa:99:ef:d8:96:5f:cc:69:bc:
         b5:41:83:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 10:44:06 2026 by rpki-client