Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/34352e3137302e37322e302f32322d3332203d3e20323638313533.roa
File:                     34352e3137302e37322e302f32322d3332203d3e20323638313533.roa (raw, json)
Hash identifier:          GKA4YAk9DANxL+BkDjLRYUYfY9wIR7metCm6Mo8Wpnc=
Subject key identifier:   09:21:45:10:BB:F6:95:E8:92:87:53:C7:25:A7:B5:0A:B9:AA:CC:C6
Certificate issuer:       /CN=5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F
Certificate serial:       236AA88844ED7F8D4D00B886BD646D5B4AE1FA15
Authority key identifier: 5F:A7:CB:BB:D1:D1:F7:95:13:C2:EF:D5:24:7C:3A:A4:2F:D0:E7:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/34352e3137302e37322e302f32322d3332203d3e20323638313533.roa
Signing time:             Wed 01 Apr 2026 16:31:32 +0000
ROA not before:           Wed 01 Apr 2026 16:26:32 +0000
ROA not after:            Wed 31 Mar 2027 16:31:32 +0000
asID:                     268153
IP address blocks:        45.170.72.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F.crl
                          rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 23:40:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:6a:a8:88:44:ed:7f:8d:4d:00:b8:86:bd:64:6d:5b:4a:e1:fa:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F
        Validity
            Not Before: Apr  1 16:26:32 2026 GMT
            Not After : Mar 31 16:31:32 2027 GMT
        Subject: CN=09214510BBF695E8928753C725A7B50AB9AACCC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ac:d5:34:d6:bb:f8:2e:e3:2f:0a:0c:a1:f6:
                    09:57:54:8d:e9:a9:ea:06:a1:c3:9d:d1:8e:99:fc:
                    12:e1:ad:91:9f:66:bf:79:85:c4:cc:15:a3:ed:cb:
                    6b:bc:b3:ff:e0:db:49:b1:47:a9:f2:ef:28:5c:e1:
                    68:af:64:96:95:ee:e1:3b:56:73:10:aa:14:b6:bf:
                    78:ee:d5:ce:de:7f:5e:d5:dd:5a:e5:47:e6:f6:36:
                    ae:8b:dd:12:7c:64:1d:06:4b:63:95:f1:b1:db:82:
                    c2:05:64:e9:04:3d:e0:8d:d1:6e:66:7c:41:69:d5:
                    c4:66:fb:ea:77:12:e5:58:0b:de:c8:e6:fd:7b:5d:
                    8a:2b:eb:48:3a:a1:27:6d:f3:16:53:82:e2:a9:cc:
                    55:0e:ae:da:e7:49:41:f5:57:87:a9:f1:0b:58:1e:
                    e2:1f:c8:31:ea:8b:fa:9e:9b:23:dc:ff:a8:70:5a:
                    ce:e1:09:01:0c:a7:98:3e:da:72:c6:57:7d:43:9e:
                    4c:37:b0:33:02:10:63:10:41:4e:f5:63:e4:d1:9d:
                    0d:79:a3:5c:e1:3f:46:b0:c1:89:39:c2:c5:4c:83:
                    3c:ec:ce:0d:dd:c8:45:f1:fa:a3:09:0b:88:8e:c9:
                    27:c6:8d:28:b9:e8:63:4e:88:a8:29:5d:d7:45:50:
                    c6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:21:45:10:BB:F6:95:E8:92:87:53:C7:25:A7:B5:0A:B9:AA:CC:C6
            X509v3 Authority Key Identifier:
                keyid:5F:A7:CB:BB:D1:D1:F7:95:13:C2:EF:D5:24:7C:3A:A4:2F:D0:E7:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/34352e3137302e37322e302f32322d3332203d3e20323638313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:6c:e3:f7:63:44:27:d8:af:88:27:8a:5b:a6:05:b1:11:7b:
         35:88:5d:7f:9e:1c:07:dc:06:6f:5e:db:16:51:2b:1a:7e:69:
         2b:f3:d2:36:ce:f8:ed:f4:32:47:a3:71:a6:8d:eb:66:69:b0:
         27:f5:41:5d:5d:b5:01:64:4c:83:0d:89:7b:a7:8d:7f:18:3b:
         83:6c:86:3e:04:2f:a4:9a:1b:7a:a1:1c:5e:74:26:b0:c4:ba:
         b3:b8:ed:6d:7f:9c:7b:d4:d1:fc:19:f8:97:5b:85:4d:de:c6:
         4b:09:1c:18:8a:69:df:88:15:40:7f:22:60:73:08:ac:0a:d8:
         0b:51:71:5c:b8:68:05:33:57:00:f3:b8:ac:00:d7:7e:cb:ca:
         ec:40:f2:d1:b5:75:d8:eb:fa:ab:8e:35:5f:24:0d:5a:c8:0a:
         db:56:0b:58:cf:18:61:8f:02:f3:dd:c3:9f:d0:ef:ae:b1:40:
         b4:62:42:2b:d5:c5:52:76:de:e3:89:48:34:da:4b:3c:94:7a:
         10:e8:a7:56:3d:ac:b3:72:ac:cf:c0:d0:2d:c4:58:de:f7:ae:
         bf:65:d5:5f:6e:2d:86:4a:e7:47:f9:10:1e:c2:16:dd:36:85:
         08:91:2f:e1:e5:b6:c5:1b:af:20:d8:05:17:98:10:4d:b9:39:
         7f:91:c3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 16:49:31 2026 by rpki-client