Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/34352e37312e3232382e302f32322d3332203d3e20323637363234.roa
File:                     34352e37312e3232382e302f32322d3332203d3e20323637363234.roa (raw, json)
Hash identifier:          ReIlrJofErIYzzsbkcSy4Wj6C6hm/QCDcbuBIkCHma8=
Subject key identifier:   92:04:A1:2D:A8:EC:19:C7:02:1C:32:56:04:53:AC:89:67:29:A5:A8
Certificate issuer:       /CN=8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F
Certificate serial:       227B4E4E23AB4FFCB43BF680AF2161334036DCCD
Authority key identifier: 8B:2C:1E:FA:A9:30:40:51:7E:A3:D0:9D:1C:F4:DD:C5:3B:EE:F9:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/34352e37312e3232382e302f32322d3332203d3e20323637363234.roa
Signing time:             Mon 06 Apr 2026 11:51:11 +0000
ROA not before:           Mon 06 Apr 2026 11:46:11 +0000
ROA not after:            Mon 05 Apr 2027 11:51:11 +0000
asID:                     267624
IP address blocks:        45.71.228.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F.crl
                          rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 03:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:7b:4e:4e:23:ab:4f:fc:b4:3b:f6:80:af:21:61:33:40:36:dc:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F
        Validity
            Not Before: Apr  6 11:46:11 2026 GMT
            Not After : Apr  5 11:51:11 2027 GMT
        Subject: CN=9204A12DA8EC19C7021C32560453AC896729A5A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3f:2f:34:d0:6d:05:3a:f0:ae:ce:1a:11:bf:
                    dd:9d:87:5d:3b:e9:dd:48:9f:3d:56:4d:96:33:02:
                    1b:a7:b7:ee:27:f8:6d:d6:5b:99:60:57:c6:0b:81:
                    40:4e:64:80:77:79:c9:49:3a:76:d5:5a:9c:4c:21:
                    52:dd:54:14:33:44:39:8d:38:5a:c9:85:56:89:2d:
                    0c:2a:a5:eb:1e:5f:9f:c0:fb:38:ba:ec:f4:36:f6:
                    1d:97:87:1e:73:05:d9:40:e0:8b:db:39:76:90:6b:
                    1d:2e:8e:7d:1c:2b:7e:92:39:4f:25:26:c7:79:bc:
                    86:65:91:b3:34:24:e4:b6:0a:16:06:6a:85:6b:43:
                    97:b2:be:a0:d1:c3:c5:d9:b9:e0:66:70:33:ff:f8:
                    22:53:5e:e3:cd:a8:a3:6d:c6:2b:ba:e2:04:8b:8f:
                    39:36:f0:f3:ba:ab:07:b4:e9:c8:f6:4f:b6:a6:7d:
                    51:55:09:9e:03:c0:aa:6b:6d:c9:93:71:c9:7d:a7:
                    11:85:21:10:b9:a4:db:89:b1:ac:d0:ea:83:77:e0:
                    4b:11:bc:47:ad:ad:40:40:6f:6d:a8:fb:78:76:39:
                    5b:c8:37:76:14:8e:59:cc:92:c0:62:98:76:13:c6:
                    70:aa:d1:4d:a7:d1:a9:24:e8:fa:d2:ab:c8:46:fa:
                    45:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:04:A1:2D:A8:EC:19:C7:02:1C:32:56:04:53:AC:89:67:29:A5:A8
            X509v3 Authority Key Identifier:
                keyid:8B:2C:1E:FA:A9:30:40:51:7E:A3:D0:9D:1C:F4:DD:C5:3B:EE:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/34352e37312e3232382e302f32322d3332203d3e20323637363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:f7:e6:8e:a8:4a:c9:67:04:e3:c3:5f:11:78:43:5d:a6:eb:
         2d:0e:af:fb:3e:d4:e9:15:2a:91:cd:9b:49:f7:4e:c0:d2:8b:
         a6:c5:d8:da:96:92:3e:29:82:a1:96:19:47:6e:7c:b2:95:6d:
         35:c9:10:00:6b:ed:c9:8f:e4:c7:ee:64:0f:95:18:31:ec:cb:
         43:ac:48:6c:30:02:3a:ac:1d:88:e8:cc:17:f7:51:98:50:e7:
         73:52:c9:d1:3b:48:cc:cb:d2:4f:d9:2b:e7:df:fc:09:54:59:
         15:6e:8a:18:75:aa:18:ba:1b:82:42:41:45:97:23:7d:45:47:
         fb:ca:2b:42:77:e4:60:13:38:1b:28:23:de:fe:5a:03:a9:02:
         c0:f4:d6:fa:96:14:24:f7:37:f2:32:60:71:62:50:66:90:48:
         c0:60:76:d5:c0:44:73:03:1a:3a:44:5c:17:c6:78:ae:1a:06:
         1a:71:fc:09:c2:93:f4:0b:b9:fb:17:98:60:ca:a9:0d:8a:a5:
         60:70:51:63:0d:87:de:97:69:21:40:0c:56:16:0a:a7:07:45:
         06:2f:a4:11:92:d6:fd:01:91:6c:80:0f:89:01:71:9c:74:bb:
         7f:b8:89:4b:24:95:0b:89:d8:18:57:30:78:21:1e:0d:07:14:
         d2:76:b4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 10:04:05 2026 by rpki-client