Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/34352e3233372e37322e302f32322d3232203d3e203631353931.roa
File:                     34352e3233372e37322e302f32322d3232203d3e203631353931.roa (raw, json)
Hash identifier:          aMzxe4otkWhQsRdkzIpdpFt4G+7bKhpc+lQAXXQ30GA=
Subject key identifier:   A8:9A:9A:28:8D:36:F9:AE:E1:A3:E2:A0:0F:9C:9E:AE:EA:78:D9:1B
Certificate issuer:       /CN=14490FD591932776F2F5F6CFB3C5431550A04F62
Certificate serial:       1886DDDFB43E6E977B36A16D090A914B18054A87
Authority key identifier: 14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/34352e3233372e37322e302f32322d3232203d3e203631353931.roa
Signing time:             Mon 15 Jun 2026 22:00:00 +0000
ROA not before:           Mon 15 Jun 2026 21:55:00 +0000
ROA not after:            Mon 14 Jun 2027 22:00:00 +0000
asID:                     61591
IP address blocks:        45.237.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl
                          rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:86:dd:df:b4:3e:6e:97:7b:36:a1:6d:09:0a:91:4b:18:05:4a:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14490FD591932776F2F5F6CFB3C5431550A04F62
        Validity
            Not Before: Jun 15 21:55:00 2026 GMT
            Not After : Jun 14 22:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:17:3d:da:42:81:6c:b1:91:00:aa:58:34:b9:
                    bf:dd:9a:47:ac:54:51:4c:76:2a:ac:9b:1a:9e:87:
                    d8:ed:96:c2:ab:af:2f:a8:66:63:60:44:a1:6f:35:
                    0f:d0:70:59:b7:44:25:b8:04:4e:82:b0:52:ca:76:
                    ea:22:7a:1e:af:06:1e:bc:3c:0c:8d:43:d9:92:2f:
                    ed:f8:1d:bc:eb:3e:c0:6e:cc:47:c0:39:38:62:50:
                    85:a2:e3:d4:0a:be:7b:c7:bf:e3:ed:e7:c9:8d:cc:
                    26:ea:73:85:07:7d:2c:96:ae:74:64:09:3b:b1:d8:
                    21:f0:01:af:db:fc:da:9c:28:9a:89:ce:d3:1e:e4:
                    3a:b3:12:cf:01:49:f0:c0:40:55:81:a6:4e:7f:7d:
                    f1:88:ce:b4:47:9f:fb:37:4f:c9:2c:0a:ad:e2:6a:
                    9f:77:39:fc:65:37:95:33:c9:34:55:2d:87:fd:81:
                    a5:96:30:26:58:7e:7c:6e:a5:c5:55:47:e1:d7:d7:
                    8a:8d:49:fa:33:5a:8c:da:b8:d1:c4:9a:15:d8:27:
                    8c:9f:da:c4:f1:6e:9b:db:e5:d7:c4:e7:33:db:31:
                    26:a2:83:d4:d5:7d:15:2f:76:b4:b1:12:45:75:e2:
                    13:7f:e0:07:89:c1:a4:d4:b0:1a:20:c3:c9:4a:27:
                    ed:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:9A:9A:28:8D:36:F9:AE:E1:A3:E2:A0:0F:9C:9E:AE:EA:78:D9:1B
            X509v3 Authority Key Identifier:
                keyid:14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/34352e3233372e37322e302f32322d3232203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:61:25:32:87:96:8e:d5:6a:d2:43:e2:b6:1b:d1:f1:43:d9:
         bd:f7:2d:1b:36:9b:5a:41:6c:36:f6:81:df:ce:7e:a0:86:ab:
         1b:d7:d7:4d:7e:82:c5:50:49:38:fb:23:91:40:25:1a:51:48:
         6d:31:6e:8f:26:da:fa:10:9a:78:04:81:19:db:f3:ab:5a:ff:
         ec:1a:71:73:42:8e:21:7e:e0:15:ac:94:90:f8:f4:f6:5f:eb:
         4d:0f:a6:1e:f5:f9:24:2d:c4:54:3b:04:73:1b:32:e5:21:b0:
         56:58:5c:a6:fb:05:29:84:cb:e0:00:47:8e:b4:b6:ba:6e:8a:
         7d:d4:69:b2:f0:fd:ab:04:aa:14:30:80:49:82:cc:49:b9:fb:
         75:ed:f0:3f:66:0d:71:fa:84:c2:37:e9:26:b3:12:5b:50:a7:
         a3:98:fb:52:ea:14:2d:b2:7d:8d:31:ee:16:e4:a0:22:1a:6a:
         51:86:a8:f4:64:e0:fa:10:56:49:07:35:1b:dc:4b:4d:e8:21:
         fd:c0:d6:a9:ba:88:eb:1e:77:bc:d6:97:09:85:4b:e0:55:29:
         ec:e6:6d:be:6b:08:13:87:60:0c:ab:fc:15:d4:2e:bd:44:cf:
         0f:50:90:bc:c9:b0:08:cb:8d:b2:c1:9a:f0:4b:06:69:a0:c9:
         d0:34:53:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 21:07:20 2026 by rpki-client