Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/34352e3136342e3138382e302f32322d3234203d3e20323638363238.roa
File:                     34352e3136342e3138382e302f32322d3234203d3e20323638363238.roa (raw, json)
Hash identifier:          3hYoya6ANFaKoW535qdPR6jcR6oCfDWHaBQds8AayKg=
Subject key identifier:   FA:FC:35:31:15:A9:BD:9D:EC:0C:1A:48:23:4C:3D:6C:2C:1F:99:24
Certificate issuer:       /CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB
Certificate serial:       4822FAD747DF1481E6EF5092B5A84ACC7FD39D18
Authority key identifier: 2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/34352e3136342e3138382e302f32322d3234203d3e20323638363238.roa
Signing time:             Fri 03 Apr 2026 14:14:56 +0000
ROA not before:           Fri 03 Apr 2026 14:09:56 +0000
ROA not after:            Fri 02 Apr 2027 14:14:56 +0000
asID:                     268628
IP address blocks:        45.164.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl
                          rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 09:36:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:22:fa:d7:47:df:14:81:e6:ef:50:92:b5:a8:4a:cc:7f:d3:9d:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB
        Validity
            Not Before: Apr  3 14:09:56 2026 GMT
            Not After : Apr  2 14:14:56 2027 GMT
        Subject: CN=FAFC353115A9BD9DEC0C1A48234C3D6C2C1F9924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a3:b2:55:3d:bb:18:a4:6e:15:8b:62:6a:83:
                    05:66:b0:42:9e:60:d2:99:3a:0b:23:64:2a:65:92:
                    a0:f1:8c:29:e4:07:97:d8:b7:10:22:2c:c4:72:a6:
                    4c:02:aa:7f:3a:09:c9:9d:74:a6:99:9b:b0:3a:fd:
                    89:1a:34:33:e6:e3:a5:e9:f6:2f:12:c0:2c:9a:e6:
                    a8:ed:40:f6:0f:f1:3a:d8:d6:e6:d7:44:0c:28:61:
                    bf:a0:1a:8e:5f:50:45:f7:63:98:73:d0:14:99:f7:
                    e6:70:9b:30:0b:83:6b:66:8c:39:66:30:b2:67:a4:
                    3b:f3:95:a4:8d:5a:32:9a:7e:6c:d7:4d:9f:8c:05:
                    a5:ff:c8:6c:40:8a:b5:83:35:b8:e5:e1:61:25:0d:
                    70:3a:b9:7a:b1:55:e5:b2:e9:62:48:5d:92:a9:37:
                    0c:eb:c5:f7:d5:c3:26:a7:ce:f9:63:30:45:82:3a:
                    1f:c2:20:38:63:a3:ab:9c:2c:17:33:b3:6a:ea:a0:
                    f8:16:ee:7f:cc:07:3f:ef:1b:3a:4f:07:46:e3:a9:
                    fa:5c:91:03:d7:21:41:96:38:20:93:f6:86:cc:fa:
                    5b:a6:07:15:08:58:dd:66:7a:68:c2:24:35:22:17:
                    d0:2e:5d:9d:1d:c8:49:d4:23:a3:21:bd:76:e1:f8:
                    52:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:FC:35:31:15:A9:BD:9D:EC:0C:1A:48:23:4C:3D:6C:2C:1F:99:24
            X509v3 Authority Key Identifier:
                keyid:2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/34352e3136342e3138382e302f32322d3234203d3e20323638363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:09:6c:d6:48:6a:ff:a9:26:ac:59:3e:e6:c3:29:8d:22:42:
         29:ef:53:31:43:05:f2:de:f0:89:58:a8:95:5f:42:ec:c6:c1:
         b7:32:4f:83:07:00:99:67:12:6c:41:22:da:2e:f7:78:6e:e3:
         e1:04:a6:d1:80:b4:2f:71:e3:a7:ff:e0:0e:9c:7c:5a:66:cd:
         78:ed:41:78:4b:a0:57:95:99:86:df:dc:88:66:e7:90:fd:4d:
         6d:f1:ee:1b:19:d8:a4:ef:0a:8a:ae:f5:06:f1:a2:fd:3a:8e:
         31:0c:11:43:0d:e1:8a:10:65:7c:9c:78:4c:66:b5:69:f0:1b:
         c4:d3:db:41:91:f0:47:ae:4a:de:41:e6:9a:00:76:11:6f:9e:
         d3:c6:00:2b:73:11:f5:f9:06:db:cb:40:19:75:fe:2f:14:de:
         ea:20:4a:84:bc:c2:64:22:8a:1b:97:48:1c:32:57:e1:ab:b4:
         ed:a8:51:ce:3b:a7:a2:8e:3f:64:98:ff:99:bc:c9:ac:a2:11:
         9d:dc:b4:d6:4e:d2:7b:70:2b:cf:06:cb:dd:0b:8e:00:12:fe:
         ea:9d:3f:c2:93:dd:50:b5:35:c8:f2:6c:e7:a2:be:4b:37:35:
         6b:16:9f:dd:c4:c4:8b:96:d9:15:d8:75:42:64:61:af:7c:dc:
         e7:e8:26:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 13:07:58 2026 by rpki-client