Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/0/34352e3136302e3132322e302f32332d3233203d3e20323638343138.roa
File:                     34352e3136302e3132322e302f32332d3233203d3e20323638343138.roa (raw, json)
Hash identifier:          8H0ydxqYHd/te6tmVSD6RTTlDkJqQT2q8f5Nvnm/4II=
Subject key identifier:   50:6A:30:4A:FE:4C:2F:B9:7C:32:E7:13:7F:A4:FB:BA:9A:DB:93:7C
Certificate issuer:       /CN=4023BE6ADD8783F9160B4934CD4E0C5DF5F8F3B2
Certificate serial:       5C41D64E491513BF97887EBCB849A325623EC516
Authority key identifier: 40:23:BE:6A:DD:87:83:F9:16:0B:49:34:CD:4E:0C:5D:F5:F8:F3:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4023BE6ADD8783F9160B4934CD4E0C5DF5F8F3B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/0/34352e3136302e3132322e302f32332d3233203d3e20323638343138.roa
Signing time:             Thu 11 Jun 2026 18:06:13 +0000
ROA not before:           Thu 11 Jun 2026 18:01:13 +0000
ROA not after:            Thu 10 Jun 2027 18:06:13 +0000
asID:                     268418
IP address blocks:        45.160.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/0/4023BE6ADD8783F9160B4934CD4E0C5DF5F8F3B2.crl
                          rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/0/4023BE6ADD8783F9160B4934CD4E0C5DF5F8F3B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4023BE6ADD8783F9160B4934CD4E0C5DF5F8F3B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 18:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:41:d6:4e:49:15:13:bf:97:88:7e:bc:b8:49:a3:25:62:3e:c5:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4023BE6ADD8783F9160B4934CD4E0C5DF5F8F3B2
        Validity
            Not Before: Jun 11 18:01:13 2026 GMT
            Not After : Jun 10 18:06:13 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9c:27:18:ef:cc:cd:2f:86:af:0c:58:67:18:
                    f9:24:9d:9c:40:69:98:c1:86:71:92:42:d8:18:70:
                    1b:06:d3:01:bd:8a:21:1c:3f:cd:09:47:c6:17:cd:
                    f2:a8:ea:0f:c9:ba:27:4f:3a:88:34:c0:b5:b4:8c:
                    73:10:eb:bf:a8:71:36:67:71:10:d4:87:ef:dd:a6:
                    2e:d4:5d:45:9a:12:39:ec:b2:27:7c:34:29:3b:42:
                    1a:a4:a1:dc:d3:4c:7e:31:86:77:31:71:d4:79:bd:
                    17:e1:ef:77:ce:c6:28:ff:03:95:ec:a3:e8:b7:59:
                    63:ed:78:58:69:97:bc:af:68:ac:11:2f:27:04:26:
                    5e:2a:fb:33:93:08:f6:c9:61:2a:c8:a3:03:be:fb:
                    4f:3d:5e:ed:7b:c6:90:1a:05:4d:a1:8f:89:d3:1c:
                    0b:93:29:20:68:ad:f4:b2:68:6f:88:af:b3:b2:1d:
                    ac:b6:db:4e:b3:ad:3f:ff:df:a6:0a:fa:d6:ed:e9:
                    2a:de:d5:41:e8:36:58:89:f6:e7:bb:25:bf:f1:be:
                    24:45:f0:84:d2:aa:1c:76:1b:a3:02:b6:19:2b:ca:
                    41:2d:2f:2c:e2:8d:e1:82:42:88:91:62:0e:10:0b:
                    95:cf:d8:41:e7:78:33:fd:7f:f2:47:76:13:a8:e2:
                    26:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:6A:30:4A:FE:4C:2F:B9:7C:32:E7:13:7F:A4:FB:BA:9A:DB:93:7C
            X509v3 Authority Key Identifier:
                keyid:40:23:BE:6A:DD:87:83:F9:16:0B:49:34:CD:4E:0C:5D:F5:F8:F3:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/0/4023BE6ADD8783F9160B4934CD4E0C5DF5F8F3B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4023BE6ADD8783F9160B4934CD4E0C5DF5F8F3B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/0/34352e3136302e3132322e302f32332d3233203d3e20323638343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:b1:d7:bc:f3:cf:22:ff:ed:b8:bd:1a:23:5b:fc:9a:be:98:
         93:33:96:ef:78:5f:56:e2:12:89:e5:5d:7e:ea:5c:d0:1e:2a:
         81:14:88:27:03:dc:af:bf:db:53:80:fa:f8:d1:a9:73:3b:66:
         2a:58:21:47:6d:4d:df:83:cf:e0:75:86:24:27:1f:61:70:e1:
         1e:d9:56:47:cd:dc:34:b9:ca:c6:51:19:bd:0a:0f:af:c9:b1:
         9a:e9:67:cf:ce:9a:4c:c2:83:cd:fe:12:23:8c:44:0f:5c:b0:
         f2:cc:45:48:61:7c:26:42:ab:51:dd:8a:eb:68:70:90:d9:8a:
         ff:1b:b2:66:13:b7:89:d2:96:24:78:34:fd:5b:f7:0d:97:10:
         25:3d:f3:76:33:61:94:e9:86:5e:36:6c:96:30:3b:66:f6:0d:
         c6:86:4b:04:d0:11:df:4b:6c:b0:78:5e:41:41:d7:7b:db:fc:
         9e:26:11:c3:dc:75:00:26:8a:47:c2:23:b1:ed:f7:a8:18:47:
         18:4c:55:b0:ae:57:97:ec:4c:51:a9:06:a6:79:4a:e9:f6:7a:
         c1:7d:16:42:9d:70:e4:8e:09:78:d1:ed:de:9c:68:97:2e:ae:
         68:f7:12:bd:bb:21:c0:6e:e9:48:93:70:71:2b:f6:6b:46:29:
         1b:8b:8f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:32:34 2026 by rpki-client