Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/34352e3233372e37322e302f32342d3332203d3e203631353931.roa
File:                     34352e3233372e37322e302f32342d3332203d3e203631353931.roa (raw, json)
Hash identifier:          pVxMPfymw20BA/1FGv8CH8jEuIgAEWbX933XWVy45ug=
Subject key identifier:   03:B7:02:03:DE:72:52:30:FA:7E:B2:64:0A:3E:DA:AD:DF:B1:59:67
Certificate issuer:       /CN=14490FD591932776F2F5F6CFB3C5431550A04F62
Certificate serial:       45C4DB061560436D2CD185051EE0C2F07154285D
Authority key identifier: 14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/34352e3233372e37322e302f32342d3332203d3e203631353931.roa
Signing time:             Mon 15 Jun 2026 21:00:00 +0000
ROA not before:           Mon 15 Jun 2026 20:55:00 +0000
ROA not after:            Mon 14 Jun 2027 21:00:00 +0000
asID:                     61591
IP address blocks:        45.237.72.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl
                          rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c4:db:06:15:60:43:6d:2c:d1:85:05:1e:e0:c2:f0:71:54:28:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14490FD591932776F2F5F6CFB3C5431550A04F62
        Validity
            Not Before: Jun 15 20:55:00 2026 GMT
            Not After : Jun 14 21:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:62:4f:2e:2b:84:2b:c4:36:d0:59:3b:98:01:
                    0c:12:c8:52:6c:44:78:50:aa:30:d3:eb:09:ea:78:
                    db:c5:c7:2d:0a:43:29:93:67:e8:72:ec:64:92:d4:
                    a2:cd:2f:0c:7c:14:8a:29:bb:86:e3:3b:a4:d9:fa:
                    c3:6e:64:b6:b9:99:5e:ff:d3:c4:9c:41:7d:13:a7:
                    a3:03:65:d7:cc:7d:e1:c1:dc:9b:f6:7d:3a:8c:59:
                    c7:06:64:9e:20:88:f1:5c:11:36:94:a1:61:7a:da:
                    95:08:24:9f:99:7c:08:3e:41:f7:9e:94:d9:4f:c1:
                    ef:33:ac:b2:94:df:aa:28:98:a2:fa:71:ee:4e:40:
                    0f:f3:a9:b7:2f:f8:30:e8:a0:2a:da:30:df:5e:05:
                    90:ee:7b:34:50:ed:2d:66:98:14:6f:71:df:1d:62:
                    14:66:cc:7b:29:72:f2:f8:13:43:ae:da:f8:a6:14:
                    39:b2:be:ba:6d:cb:1a:3b:51:45:44:c7:66:de:c6:
                    d4:a9:17:bc:10:59:51:c9:ba:a0:3f:4d:a3:f4:2f:
                    15:44:11:1b:d8:17:da:db:1e:9c:df:4d:fa:d1:59:
                    50:81:b2:35:b3:61:06:a4:0f:6a:40:66:d9:cf:d8:
                    b4:8e:d5:ee:e2:71:c6:a5:aa:b1:81:22:16:91:b6:
                    c3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B7:02:03:DE:72:52:30:FA:7E:B2:64:0A:3E:DA:AD:DF:B1:59:67
            X509v3 Authority Key Identifier:
                keyid:14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/34352e3233372e37322e302f32342d3332203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:80:33:cd:23:58:bb:12:f9:7b:34:22:e7:dd:ed:ea:5c:2d:
         cb:9f:12:d9:a1:f6:1e:a2:f8:1c:d8:ea:b6:4e:59:f8:aa:0a:
         94:32:84:6e:9d:87:31:ad:25:5c:19:ec:fa:27:8d:e6:fb:76:
         1d:69:83:98:be:1b:57:31:fd:e8:aa:96:0f:80:4d:61:69:32:
         12:06:41:e6:2b:63:64:8a:c0:90:de:b5:97:50:2c:c2:ef:1f:
         b6:1b:04:29:04:50:ca:14:69:26:90:8c:66:01:11:20:a8:6c:
         50:05:f3:b1:8d:47:c7:70:09:06:98:73:58:34:79:97:6f:75:
         b9:dd:3c:a9:dc:37:f6:01:ef:4a:1d:c0:54:8d:35:6f:bf:66:
         95:db:64:1b:1b:2b:d6:e7:3c:d8:94:11:46:a1:16:14:88:78:
         c9:e8:8d:97:0f:a5:7d:bd:5a:09:dc:cb:cf:0d:7b:01:1a:cb:
         31:c2:d3:34:ad:b7:a1:cc:d4:e9:84:a6:61:18:32:c2:d8:c8:
         8d:71:2e:63:c2:33:46:5e:38:41:8c:97:78:57:7c:3d:5c:5a:
         b4:f3:6e:8b:c5:ab:fe:d1:d5:c2:65:bf:de:eb:ac:3e:54:a8:
         41:a0:0c:ab:1a:1b:8d:2c:9b:0e:b6:8a:54:fe:b2:3f:5f:0b:
         17:c0:5f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 20:00:00 2026 by rpki-client