Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/34352e362e3131382e302f32342d3234203d3e20323734353138.roa
File:                     34352e362e3131382e302f32342d3234203d3e20323734353138.roa (raw, json)
Hash identifier:          ve4fLz0B2mal5lzFXG/y6J3v/V9Sy+iRx6Bl6B2bVWs=
Subject key identifier:   9B:76:D1:AD:1F:E2:BB:DD:86:EE:77:D1:AD:56:E6:45:E9:F6:97:8B
Certificate issuer:       /CN=CDD7619BD4F71987C247C8670D9064F291B3E36F
Certificate serial:       138331CA7777079D28B53601C127AAF8FCE05616
Authority key identifier: CD:D7:61:9B:D4:F7:19:87:C2:47:C8:67:0D:90:64:F2:91:B3:E3:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDD7619BD4F71987C247C8670D9064F291B3E36F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/34352e362e3131382e302f32342d3234203d3e20323734353138.roa
Signing time:             Wed 24 Jun 2026 14:14:59 +0000
ROA not before:           Wed 24 Jun 2026 14:09:59 +0000
ROA not after:            Wed 23 Jun 2027 14:14:59 +0000
asID:                     274518
IP address blocks:        45.6.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.crl
                          rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDD7619BD4F71987C247C8670D9064F291B3E36F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 00:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:83:31:ca:77:77:07:9d:28:b5:36:01:c1:27:aa:f8:fc:e0:56:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDD7619BD4F71987C247C8670D9064F291B3E36F
        Validity
            Not Before: Jun 24 14:09:59 2026 GMT
            Not After : Jun 23 14:14:59 2027 GMT
        Subject: CN=9B76D1AD1FE2BBDD86EE77D1AD56E645E9F6978B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7c:69:b4:3a:99:f4:c2:2d:df:20:0e:73:3f:
                    a3:d4:ff:06:c9:d3:ab:b3:51:30:8a:c1:68:42:fa:
                    75:bb:51:e4:b6:1c:10:37:83:93:61:2c:32:a5:50:
                    6b:5b:8c:77:c1:31:47:b9:e6:69:ff:ff:06:58:29:
                    a5:fb:4b:22:85:d6:38:77:9d:9a:d2:35:b1:00:0a:
                    44:6d:3a:41:a4:40:6a:60:4e:52:47:9a:3d:0c:b2:
                    81:d3:e3:57:03:39:73:59:b5:35:df:ad:2a:ed:74:
                    73:ba:11:a3:03:e6:87:55:e3:0d:dc:6b:46:d5:d1:
                    8d:14:ed:3b:ae:d1:08:86:26:16:bd:1a:23:c0:9f:
                    a5:ac:fe:50:c9:eb:d7:10:7b:49:23:fc:4f:96:c7:
                    98:47:65:d3:bb:d0:e5:86:45:1d:fd:d1:97:83:54:
                    28:c9:ce:16:ca:71:9f:b9:02:ba:d0:f0:48:e1:ab:
                    38:7d:32:ac:a2:b6:93:bb:8a:db:f5:d5:2a:f5:69:
                    bc:62:91:5c:14:1e:87:a8:ca:d2:ee:ab:a0:f6:63:
                    2f:f6:51:25:6c:df:fd:64:ac:4b:e8:d8:b5:8d:86:
                    1c:5d:ce:55:e3:04:8e:3e:2e:fc:61:fc:43:ae:d9:
                    c3:4c:94:f1:f6:cf:43:8b:7b:29:35:a1:cf:3c:cf:
                    9e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:76:D1:AD:1F:E2:BB:DD:86:EE:77:D1:AD:56:E6:45:E9:F6:97:8B
            X509v3 Authority Key Identifier:
                keyid:CD:D7:61:9B:D4:F7:19:87:C2:47:C8:67:0D:90:64:F2:91:B3:E3:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDD7619BD4F71987C247C8670D9064F291B3E36F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/34352e362e3131382e302f32342d3234203d3e20323734353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:63:57:df:f2:34:a3:cb:66:ab:a0:8d:85:1d:51:e4:fa:4a:
         78:a1:da:f5:4c:25:2e:d9:a9:e3:5a:1a:8f:33:16:99:25:08:
         9d:5f:17:8b:7e:4d:8d:4f:3b:2d:0e:32:bc:db:cf:16:4f:65:
         9f:ca:1d:de:7a:20:b3:eb:a5:1a:44:00:00:46:dc:74:87:52:
         f2:ed:66:85:7f:2c:a1:0e:97:6d:58:ae:0b:af:b3:a1:54:10:
         74:1c:7c:93:96:40:a9:89:17:c8:15:ee:4c:83:6a:08:c7:f1:
         66:a1:c4:58:c6:1c:d4:19:75:c0:ec:7c:98:b1:78:63:e5:cc:
         2b:1d:0c:05:2c:0a:8f:fe:0a:fc:5c:88:6a:6b:9b:c1:4c:3e:
         35:90:54:02:46:d8:2c:b6:59:08:f4:f4:f2:fe:dd:93:ca:9d:
         6c:e7:79:5e:a8:d2:6d:54:09:91:25:a1:0c:5b:46:4d:bc:99:
         79:1e:cd:d8:ea:2f:f6:c7:11:6f:40:01:ba:04:f7:e3:1e:82:
         c5:17:fa:8a:3a:05:d2:3a:ec:72:8b:cf:47:0d:dd:57:78:15:
         ed:47:a6:3d:af:91:99:e8:75:cd:4b:e9:a4:0d:62:50:37:7b:
         fa:d6:15:4a:54:14:d5:30:26:23:38:c2:fa:8e:0b:47:cf:c0:
         3a:8d:aa:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:09:37 2026 by rpki-client