Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/34352e3233312e3139322e302f32322d3234203d3e20323637323234.roa
File:                     34352e3233312e3139322e302f32322d3234203d3e20323637323234.roa (raw, json)
Hash identifier:          YBxVklOy4bOBnPGo9xSCiuxY8oyUbOxOvFtj9aAzxPY=
Subject key identifier:   C8:E9:D6:C2:45:E2:40:8E:8D:23:C1:7D:89:ED:2B:DA:02:11:BF:65
Certificate issuer:       /CN=D392D06DAD0BA1CB860889043CB27A3AE10540B3
Certificate serial:       76727635E7CE04CC279019500DE106628BE8D0DC
Authority key identifier: D3:92:D0:6D:AD:0B:A1:CB:86:08:89:04:3C:B2:7A:3A:E1:05:40:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D392D06DAD0BA1CB860889043CB27A3AE10540B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/34352e3233312e3139322e302f32322d3234203d3e20323637323234.roa
Signing time:             Fri 03 Apr 2026 17:56:32 +0000
ROA not before:           Fri 03 Apr 2026 17:51:32 +0000
ROA not after:            Fri 02 Apr 2027 17:56:32 +0000
asID:                     267224
IP address blocks:        45.231.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/D392D06DAD0BA1CB860889043CB27A3AE10540B3.crl
                          rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/D392D06DAD0BA1CB860889043CB27A3AE10540B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D392D06DAD0BA1CB860889043CB27A3AE10540B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 Apr 2026 06:34:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:72:76:35:e7:ce:04:cc:27:90:19:50:0d:e1:06:62:8b:e8:d0:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D392D06DAD0BA1CB860889043CB27A3AE10540B3
        Validity
            Not Before: Apr  3 17:51:32 2026 GMT
            Not After : Apr  2 17:56:32 2027 GMT
        Subject: CN=C8E9D6C245E2408E8D23C17D89ED2BDA0211BF65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5b:b1:ac:67:04:65:a0:c7:b3:41:53:20:fd:
                    9e:78:dc:f5:15:48:76:8b:e7:c8:c5:24:3b:16:d7:
                    14:a0:6e:62:a3:12:d1:18:7e:48:d8:f2:74:6f:77:
                    ea:ed:6a:8f:35:2d:83:e6:d1:81:c4:60:6c:5b:a6:
                    3d:fe:fd:d8:c9:d0:df:69:be:25:65:ca:24:d5:d8:
                    db:02:a9:90:8b:5b:c6:84:4d:09:90:42:30:82:54:
                    d3:9b:85:a0:60:cf:b3:d9:44:27:91:81:c7:f4:de:
                    7c:b3:65:1a:95:e8:44:12:d0:c5:89:89:8b:94:71:
                    3f:c3:f5:cb:de:fc:7c:9d:f9:cd:1a:62:12:15:80:
                    ee:a8:d9:4f:42:ef:e3:6f:56:3d:6b:dd:f6:c5:62:
                    83:34:63:b2:d1:2a:c4:19:72:1e:8c:49:9e:e1:fc:
                    75:20:0d:73:7e:31:c8:6c:69:43:21:a4:db:42:71:
                    de:25:18:db:7a:3b:9d:67:3a:55:2a:b5:2a:01:7e:
                    34:81:0f:cf:14:82:a4:a5:dd:e4:2e:37:c8:9b:42:
                    c0:ec:09:4b:92:5e:bd:af:d3:c1:6c:fe:b9:07:7f:
                    6e:a3:3d:3f:e9:a7:31:ab:8a:e0:d3:2b:d7:c1:9d:
                    07:c1:6f:58:a6:c1:c0:80:79:e9:cf:07:59:69:a7:
                    82:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E9:D6:C2:45:E2:40:8E:8D:23:C1:7D:89:ED:2B:DA:02:11:BF:65
            X509v3 Authority Key Identifier:
                keyid:D3:92:D0:6D:AD:0B:A1:CB:86:08:89:04:3C:B2:7A:3A:E1:05:40:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/D392D06DAD0BA1CB860889043CB27A3AE10540B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D392D06DAD0BA1CB860889043CB27A3AE10540B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/34352e3233312e3139322e302f32322d3234203d3e20323637323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:6d:e3:fa:e5:18:b8:50:6a:6a:de:88:58:ab:d8:b7:7c:76:
         08:0c:f6:c7:77:d9:f3:11:12:fd:3b:a7:21:1e:d1:3d:fc:27:
         fd:fb:e2:82:af:a8:0a:8c:19:b7:ef:1f:c0:56:9d:f6:58:2f:
         d0:f9:ee:d1:8f:6e:2b:a4:0c:6c:11:b9:48:59:52:dc:6f:9b:
         1e:c7:3e:68:b5:3d:7a:a1:3d:53:44:e8:d8:20:08:0f:02:75:
         5c:76:b7:97:b8:bd:73:48:53:0d:ac:df:8e:e5:07:85:aa:dc:
         9e:49:7f:31:f0:ec:e5:aa:df:89:71:a1:a8:ad:41:94:b3:a1:
         11:a4:6e:90:07:4f:ea:e8:0f:77:bd:43:cc:2a:6a:be:77:80:
         64:fc:42:15:e1:9e:58:1c:ea:15:27:fe:5d:df:38:71:26:53:
         c7:d9:21:7d:c6:01:58:64:99:93:a6:fa:33:26:bf:42:cb:33:
         86:b8:ac:9a:85:2d:d3:b8:8d:b2:2d:e2:fd:46:be:8c:9a:58:
         d0:60:db:20:5b:d5:b0:8b:f4:fb:c1:e0:41:01:db:70:dd:a2:
         65:54:b7:bc:3a:3a:a5:e2:3c:19:eb:95:d2:58:b5:f6:17:13:
         7d:b0:9c:0d:7c:1f:0c:95:78:73:c5:9d:66:a5:39:4d:b7:15:
         07:33:e6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 10:41:31 2026 by rpki-client