Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/34352e3136382e31322e302f32332d3233203d3e20323638303335.roa
File:                     34352e3136382e31322e302f32332d3233203d3e20323638303335.roa (raw, json)
Hash identifier:          i7gdAw0e9qvhYP4gfD3V/ZDopW+Ufdpo1LZKeVaH7uM=
Subject key identifier:   99:66:C5:04:40:67:6C:6E:2B:58:D4:6E:15:ED:E3:28:34:5C:1F:E4
Certificate issuer:       /CN=746F62E0AEFCCD80381655BD82E017B375D2EC7E
Certificate serial:       15D3A65AD6770E14D2644A72EC72908C261C8A15
Authority key identifier: 74:6F:62:E0:AE:FC:CD:80:38:16:55:BD:82:E0:17:B3:75:D2:EC:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/746F62E0AEFCCD80381655BD82E017B375D2EC7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/34352e3136382e31322e302f32332d3233203d3e20323638303335.roa
Signing time:             Fri 27 Mar 2026 18:36:37 +0000
ROA not before:           Fri 27 Mar 2026 18:31:37 +0000
ROA not after:            Fri 26 Mar 2027 18:36:37 +0000
asID:                     268035
IP address blocks:        45.168.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/746F62E0AEFCCD80381655BD82E017B375D2EC7E.crl
                          rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/746F62E0AEFCCD80381655BD82E017B375D2EC7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/746F62E0AEFCCD80381655BD82E017B375D2EC7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 04:04:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d3:a6:5a:d6:77:0e:14:d2:64:4a:72:ec:72:90:8c:26:1c:8a:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746F62E0AEFCCD80381655BD82E017B375D2EC7E
        Validity
            Not Before: Mar 27 18:31:37 2026 GMT
            Not After : Mar 26 18:36:37 2027 GMT
        Subject: CN=9966C50440676C6E2B58D46E15EDE328345C1FE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c7:6e:9a:7e:76:0a:7d:ec:aa:ea:0b:2d:de:
                    4a:d9:30:a2:9e:81:8e:f5:81:5f:a0:f2:ce:1d:ef:
                    92:29:58:8b:1d:d2:2a:3b:d2:af:58:d2:a7:80:26:
                    d0:a4:3a:bc:1b:6f:37:e4:0a:63:15:eb:17:90:f9:
                    62:dd:0b:fc:36:7b:fa:8e:77:57:cb:e7:1a:6b:83:
                    0c:23:02:1f:dd:de:e6:a7:00:d1:5f:7d:df:f9:40:
                    45:0b:26:8a:1e:4b:d0:35:c9:3a:84:ed:ea:65:c1:
                    d3:65:78:35:55:0f:c1:0e:16:a6:64:45:f1:b0:3e:
                    0c:d4:1c:e2:a3:b7:db:9b:90:37:23:6e:47:93:fb:
                    f8:8c:ab:10:dd:67:01:e5:de:b4:2b:fa:2c:9e:0a:
                    2e:e4:ad:f9:e3:98:6e:da:72:b5:46:fb:00:6f:90:
                    47:a2:5f:ba:12:08:99:2a:f1:e0:67:3f:0f:06:a0:
                    89:b7:e2:62:7b:6c:cb:31:1e:ad:71:af:db:78:92:
                    7f:56:af:0b:ec:09:1a:1c:5a:81:76:34:70:92:eb:
                    69:5d:90:d7:b8:ec:b5:a2:a4:d2:56:4f:8f:d7:f9:
                    21:5d:3e:e9:6c:32:86:6a:89:c7:4a:c6:b4:2b:33:
                    2f:a0:cf:66:e1:94:28:a8:8b:27:55:30:e7:7b:fb:
                    28:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:66:C5:04:40:67:6C:6E:2B:58:D4:6E:15:ED:E3:28:34:5C:1F:E4
            X509v3 Authority Key Identifier:
                keyid:74:6F:62:E0:AE:FC:CD:80:38:16:55:BD:82:E0:17:B3:75:D2:EC:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/746F62E0AEFCCD80381655BD82E017B375D2EC7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/746F62E0AEFCCD80381655BD82E017B375D2EC7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/34352e3136382e31322e302f32332d3233203d3e20323638303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:9a:3a:c5:b6:12:50:cd:3c:cc:3c:f3:ce:e9:a0:e2:c2:da:
         78:bb:f5:02:f4:98:1d:13:c2:1e:88:1b:4c:e2:b9:90:87:7d:
         a2:58:39:54:72:7c:1b:e7:3d:9b:0a:bd:00:83:97:ac:59:f7:
         60:47:dc:2a:13:0f:a7:b2:48:a8:a7:95:c3:06:69:93:fa:51:
         aa:d8:02:d9:f4:68:17:17:27:57:bd:1f:c8:81:b9:fb:c4:55:
         74:2c:dc:d0:d9:9f:8b:1f:39:d5:46:13:97:73:f2:0a:7a:8f:
         1a:fb:a9:34:01:83:a6:cb:f0:c6:d8:cf:02:61:fd:69:bd:ab:
         11:0f:cd:ca:93:a8:4c:1e:65:f5:6d:91:cd:e1:12:fd:1b:8e:
         c5:a4:00:5e:b8:7d:cf:53:c0:87:47:26:0f:7e:3a:0d:88:7e:
         5b:33:42:60:22:cb:49:52:26:1c:4b:65:d2:cc:36:4c:01:65:
         68:fc:81:59:a3:7b:63:3e:3b:3f:34:61:c0:ee:76:c8:bb:ba:
         20:f6:a3:60:7e:4e:72:47:5c:67:33:e0:0e:2e:bf:99:9f:f4:
         88:98:ed:0d:04:20:71:2f:e8:a5:5e:61:31:0d:59:65:f0:b0:
         be:3e:83:06:d7:45:ad:47:6b:56:aa:8e:d3:f1:1f:ba:dd:85:
         c2:fb:a3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 07:44:29 2026 by rpki-client