Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/0/34352e3136302e3132302e302f32342d3234203d3e20323638343138.roa
File:                     34352e3136302e3132302e302f32342d3234203d3e20323638343138.roa (raw, json)
Hash identifier:          RFUOvkWpsAE7sOu0D+suThhgMtxbhih+YJl2qP8fZ70=
Subject key identifier:   C7:33:CD:4F:F4:65:96:D8:85:C2:46:58:85:8F:18:1B:9E:7A:64:5F
Certificate issuer:       /CN=4023BE6ADD8783F9160B4934CD4E0C5DF5F8F3B2
Certificate serial:       01A7B59CCCE0D3888670B6A43BB9C7399AEC19FB
Authority key identifier: 40:23:BE:6A:DD:87:83:F9:16:0B:49:34:CD:4E:0C:5D:F5:F8:F3:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4023BE6ADD8783F9160B4934CD4E0C5DF5F8F3B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/0/34352e3136302e3132302e302f32342d3234203d3e20323638343138.roa
Signing time:             Thu 11 Jun 2026 18:06:13 +0000
ROA not before:           Thu 11 Jun 2026 18:01:13 +0000
ROA not after:            Thu 10 Jun 2027 18:06:13 +0000
asID:                     268418
IP address blocks:        45.160.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/0/4023BE6ADD8783F9160B4934CD4E0C5DF5F8F3B2.crl
                          rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/0/4023BE6ADD8783F9160B4934CD4E0C5DF5F8F3B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4023BE6ADD8783F9160B4934CD4E0C5DF5F8F3B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 18:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a7:b5:9c:cc:e0:d3:88:86:70:b6:a4:3b:b9:c7:39:9a:ec:19:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4023BE6ADD8783F9160B4934CD4E0C5DF5F8F3B2
        Validity
            Not Before: Jun 11 18:01:13 2026 GMT
            Not After : Jun 10 18:06:13 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3c:b8:a5:1a:78:6a:bd:f5:b1:cb:28:15:c9:
                    3b:86:3e:cd:69:eb:e0:b9:32:75:2f:64:60:1e:36:
                    11:57:f0:2b:43:10:db:0b:82:bb:21:ac:95:90:44:
                    20:09:04:28:6d:52:b0:81:1a:09:7a:71:ae:22:1e:
                    cc:43:6f:4b:18:92:32:00:9e:88:e3:c7:5e:c9:8f:
                    12:02:04:8b:ad:4b:e3:ea:e9:5c:6c:d0:de:c5:3f:
                    79:95:a7:df:97:a2:7b:f7:1e:39:6d:b8:14:ed:2e:
                    f8:cf:5f:e9:93:7e:22:9c:cf:67:e1:20:08:8f:9c:
                    f4:ea:4e:ac:a8:b4:48:04:2a:e0:dd:ac:30:a7:5f:
                    54:b3:d8:1b:83:e4:9e:27:eb:29:d5:d4:e8:30:2a:
                    62:ee:03:64:b2:f7:29:45:c0:3e:85:75:75:f1:b1:
                    da:9a:eb:b7:1e:d6:37:75:e0:33:e3:1d:eb:82:af:
                    9f:fb:40:f4:63:05:f4:cc:60:fc:10:53:a4:ea:74:
                    51:3e:1e:97:0c:de:63:75:a1:ae:76:c1:5f:93:58:
                    34:40:a6:1b:06:8c:58:ca:69:ed:a4:80:70:22:04:
                    53:4e:ab:13:cf:32:b3:cf:ae:91:00:f2:3b:d8:01:
                    a0:99:66:28:d7:5a:3c:17:86:f8:a9:36:01:e0:cd:
                    b0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:33:CD:4F:F4:65:96:D8:85:C2:46:58:85:8F:18:1B:9E:7A:64:5F
            X509v3 Authority Key Identifier:
                keyid:40:23:BE:6A:DD:87:83:F9:16:0B:49:34:CD:4E:0C:5D:F5:F8:F3:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/0/4023BE6ADD8783F9160B4934CD4E0C5DF5F8F3B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4023BE6ADD8783F9160B4934CD4E0C5DF5F8F3B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/0/34352e3136302e3132302e302f32342d3234203d3e20323638343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:29:0e:22:df:89:07:3c:38:ad:ee:3d:7b:81:0a:51:25:ad:
         f3:01:b5:27:01:fa:79:a2:e9:44:8c:b0:e2:9b:4a:2f:7c:9a:
         90:97:53:47:ce:56:10:32:8a:05:c2:7e:84:07:87:c0:e3:07:
         3b:30:69:23:aa:dc:b8:d7:84:0f:af:48:0e:79:08:30:80:8f:
         ae:56:7a:21:6f:70:08:b7:22:49:91:16:72:1e:33:42:1b:f0:
         8f:bf:3c:8c:f4:3f:5b:b3:a6:a7:21:1f:ea:e3:70:c7:c9:67:
         11:96:18:9a:4e:08:c0:2d:21:12:f9:8b:a7:09:45:83:07:14:
         c3:85:c2:5d:28:f9:d3:34:da:6b:e9:ec:4e:e8:e1:be:21:9a:
         1a:ab:10:74:42:a5:fb:4f:b5:d5:0b:07:40:4d:50:64:9d:7a:
         29:b4:7c:1e:e9:10:77:04:cd:cb:08:15:86:a0:db:ad:fc:4e:
         43:dc:28:8b:99:2b:55:d1:ed:bf:70:7b:9d:69:ca:d6:e7:d4:
         77:57:09:da:5f:e5:cb:26:b3:0b:a5:d2:99:21:ad:bd:01:76:
         b3:16:32:26:d5:0f:b5:54:a2:fa:7a:57:b5:65:4c:77:ba:2c:
         54:70:c8:2c:aa:4a:1e:04:36:2d:cf:7e:02:c8:39:93:c1:18:
         16:89:e4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:32:34 2026 by rpki-client