Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/34352e3137312e3234342e302f32322d3332203d3e20323638393736.roa
File:                     34352e3137312e3234342e302f32322d3332203d3e20323638393736.roa (raw, json)
Hash identifier:          TsCYNgchGqiE1RkFuqNThSanj5qgDUtp3tPUwWEWcIM=
Subject key identifier:   99:CA:24:0A:56:28:DD:23:5E:01:50:EF:35:22:2D:13:A6:3E:CB:F4
Certificate issuer:       /CN=81693D2B616AFC0CE814A28BA2622B591A667447
Certificate serial:       7F312DD602D0E07B24E1E0238500088BDA3D6115
Authority key identifier: 81:69:3D:2B:61:6A:FC:0C:E8:14:A2:8B:A2:62:2B:59:1A:66:74:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81693D2B616AFC0CE814A28BA2622B591A667447.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/34352e3137312e3234342e302f32322d3332203d3e20323638393736.roa
Signing time:             Mon 06 Apr 2026 17:55:57 +0000
ROA not before:           Mon 06 Apr 2026 17:50:57 +0000
ROA not after:            Mon 05 Apr 2027 17:55:57 +0000
asID:                     268976
IP address blocks:        45.171.244.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/81693D2B616AFC0CE814A28BA2622B591A667447.crl
                          rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/81693D2B616AFC0CE814A28BA2622B591A667447.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81693D2B616AFC0CE814A28BA2622B591A667447.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 Apr 2026 09:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:31:2d:d6:02:d0:e0:7b:24:e1:e0:23:85:00:08:8b:da:3d:61:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81693D2B616AFC0CE814A28BA2622B591A667447
        Validity
            Not Before: Apr  6 17:50:57 2026 GMT
            Not After : Apr  5 17:55:57 2027 GMT
        Subject: CN=99CA240A5628DD235E0150EF35222D13A63ECBF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:85:9c:38:7d:f8:cc:1d:67:af:cb:39:7f:0d:
                    a2:38:0e:88:e8:4f:67:bf:16:db:8b:ee:ed:c8:90:
                    df:4e:a4:db:1a:db:10:a3:0b:b6:2e:d8:1e:f9:36:
                    2b:78:b4:3b:cb:a2:ae:99:c6:60:01:f3:e1:06:07:
                    90:f0:0a:b0:d0:79:c5:91:34:a0:9c:cf:27:4b:0d:
                    51:6e:af:ba:0f:5e:24:e4:96:fd:7d:5c:fb:b4:75:
                    25:b3:d6:db:36:25:bb:ce:dc:37:b9:39:80:0d:42:
                    51:0d:a2:e1:8c:66:06:13:59:ab:0e:8d:20:e2:17:
                    ed:b7:7b:2c:25:77:65:2e:26:37:3d:c0:8a:a8:a2:
                    b4:0e:c9:a4:36:73:87:05:8c:39:37:26:ba:cd:b2:
                    f8:9e:89:a0:ef:57:9b:e0:23:66:f0:f5:cb:41:d8:
                    24:aa:62:df:c4:99:b8:3d:65:cf:28:4c:2b:1c:24:
                    70:72:27:85:19:0c:2d:60:bf:e9:6d:c9:73:ca:d5:
                    bd:63:97:16:7b:66:15:f2:47:c2:c0:25:28:00:c2:
                    7f:10:86:06:5f:84:e4:09:4f:54:40:d9:32:92:9f:
                    dd:ee:e5:be:8e:be:94:06:16:39:28:30:de:0c:cc:
                    70:bb:fe:d3:a2:b2:91:bc:40:cf:01:1f:54:8d:c7:
                    47:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:CA:24:0A:56:28:DD:23:5E:01:50:EF:35:22:2D:13:A6:3E:CB:F4
            X509v3 Authority Key Identifier:
                keyid:81:69:3D:2B:61:6A:FC:0C:E8:14:A2:8B:A2:62:2B:59:1A:66:74:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/81693D2B616AFC0CE814A28BA2622B591A667447.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81693D2B616AFC0CE814A28BA2622B591A667447.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/34352e3137312e3234342e302f32322d3332203d3e20323638393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:23:5e:84:e0:69:0a:c8:7b:7c:7d:26:b1:78:13:11:6f:29:
         57:91:4d:74:7d:d4:9e:95:77:7a:17:17:c3:41:bf:06:6a:ef:
         3d:8b:a4:3d:a3:76:08:68:61:b3:14:57:04:e5:8a:5f:93:a0:
         09:3e:31:ab:5f:1f:cc:48:38:07:54:dc:aa:f6:d6:6c:96:fa:
         6d:37:aa:66:3a:7e:5d:56:26:2d:01:91:ee:94:0f:dc:e9:eb:
         10:6f:5d:f6:55:aa:18:d3:de:33:6c:e4:fa:5a:c4:a5:8d:b4:
         4b:07:d0:aa:78:f3:40:7e:ab:ba:3e:8c:3a:98:02:49:f6:c8:
         35:d1:9d:ab:35:8d:e7:c2:b1:40:63:a5:a3:3e:5f:49:0e:6c:
         d1:18:f1:69:95:47:56:03:c0:c9:ef:0c:ef:65:89:93:bc:aa:
         ee:6a:6f:48:6a:e5:46:36:a4:17:ed:c3:f2:67:e9:a3:81:e0:
         c4:1f:5b:33:17:4b:2d:02:4b:16:3c:89:f2:a9:29:2f:3c:bd:
         03:bd:96:97:76:00:22:8a:7c:0a:0d:ec:cc:1c:e1:33:fd:04:
         4f:0d:46:ae:32:a3:40:f8:1f:9c:8a:06:09:4c:7d:54:6f:a6:
         26:ac:d1:b6:c1:17:f6:a9:05:75:0b:3f:c8:22:fb:9e:5f:fd:
         91:1e:15:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 09:19:55 2026 by rpki-client