Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6YD6Fppg8iC5EUd2ZrkA14TbkXqsveJxXMACT1Ym8by3/0/34352e3232372e34362e302f32342d3234203d3e20323735363734.roa
File:                     34352e3232372e34362e302f32342d3234203d3e20323735363734.roa (raw, json)
Hash identifier:          0a0hChJgYZwIMWYP5WzHXfb7uMs6xONH9l7C0s0CBiI=
Subject key identifier:   5C:F6:44:55:75:5F:29:DD:78:E2:F3:09:A3:31:DE:D6:42:1E:A9:D9
Certificate issuer:       /CN=2EDC59CDE13543B69725E1F6928F157875970BD2
Certificate serial:       735DD66BBA6B176BCCE1776CA9912FF81D202E1E
Authority key identifier: 2E:DC:59:CD:E1:35:43:B6:97:25:E1:F6:92:8F:15:78:75:97:0B:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EDC59CDE13543B69725E1F6928F157875970BD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YD6Fppg8iC5EUd2ZrkA14TbkXqsveJxXMACT1Ym8by3/0/34352e3232372e34362e302f32342d3234203d3e20323735363734.roa
Signing time:             Mon 06 Apr 2026 11:59:12 +0000
ROA not before:           Mon 06 Apr 2026 11:54:12 +0000
ROA not after:            Mon 05 Apr 2027 11:59:12 +0000
asID:                     275674
IP address blocks:        45.227.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6YD6Fppg8iC5EUd2ZrkA14TbkXqsveJxXMACT1Ym8by3/0/2EDC59CDE13543B69725E1F6928F157875970BD2.crl
                          rsync://rpki-repo.registro.br/repo/6YD6Fppg8iC5EUd2ZrkA14TbkXqsveJxXMACT1Ym8by3/0/2EDC59CDE13543B69725E1F6928F157875970BD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EDC59CDE13543B69725E1F6928F157875970BD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 14:35:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:5d:d6:6b:ba:6b:17:6b:cc:e1:77:6c:a9:91:2f:f8:1d:20:2e:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EDC59CDE13543B69725E1F6928F157875970BD2
        Validity
            Not Before: Apr  6 11:54:12 2026 GMT
            Not After : Apr  5 11:59:12 2027 GMT
        Subject: CN=5CF64455755F29DD78E2F309A331DED6421EA9D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:15:e6:83:7b:6b:18:59:cb:ef:07:61:9e:5b:
                    81:05:76:83:60:7f:ff:51:41:80:81:3d:4b:48:95:
                    b2:6f:c2:21:7e:6b:c2:a8:54:9e:92:f0:05:c7:cf:
                    a1:1d:35:e3:cc:5e:fd:50:56:4e:be:04:6b:14:8b:
                    c2:22:fd:8b:2d:82:30:ec:13:64:00:f3:29:8f:66:
                    81:21:ba:7a:ab:10:7b:98:9e:41:9b:62:ab:f9:b3:
                    c8:6e:05:4f:20:dd:c7:5d:71:4c:38:11:da:89:e8:
                    19:c5:5c:64:7c:5c:17:51:19:88:c9:2e:7e:6a:9a:
                    da:90:d5:22:4f:c4:f3:b4:62:51:38:69:d9:67:cc:
                    dd:a3:e2:f3:8f:ba:8e:ee:2b:61:93:aa:5f:10:17:
                    fd:58:bd:0b:aa:2a:6e:a2:9e:3f:3a:34:80:e0:fa:
                    3f:1e:d3:0e:b2:d0:e7:6f:41:e1:72:4f:c5:93:43:
                    02:9d:f2:27:ba:3a:32:19:41:c8:13:a6:38:10:41:
                    d9:54:83:f1:a7:2e:3a:4e:0e:a4:a0:34:83:ae:9f:
                    d1:dc:07:90:6c:c6:da:ab:d8:6e:f5:53:9a:ed:ac:
                    77:08:3c:f5:bf:09:03:1b:06:5d:74:3d:b9:24:08:
                    99:3e:f6:35:29:fa:40:ef:17:47:21:59:f9:14:4c:
                    8e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F6:44:55:75:5F:29:DD:78:E2:F3:09:A3:31:DE:D6:42:1E:A9:D9
            X509v3 Authority Key Identifier:
                keyid:2E:DC:59:CD:E1:35:43:B6:97:25:E1:F6:92:8F:15:78:75:97:0B:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YD6Fppg8iC5EUd2ZrkA14TbkXqsveJxXMACT1Ym8by3/0/2EDC59CDE13543B69725E1F6928F157875970BD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EDC59CDE13543B69725E1F6928F157875970BD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YD6Fppg8iC5EUd2ZrkA14TbkXqsveJxXMACT1Ym8by3/0/34352e3232372e34362e302f32342d3234203d3e20323735363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:1b:8d:7c:98:38:f6:50:da:f2:ad:01:d3:c9:5c:d3:43:5e:
         21:b1:66:60:bb:54:cd:e5:16:7c:6b:ad:6a:b0:4a:2f:5f:b5:
         67:30:8b:0c:45:d1:69:af:21:b2:32:26:ce:ac:99:9a:96:f5:
         1d:65:6a:ab:d3:9d:6a:bd:f9:79:42:0e:be:5e:4c:2a:c2:da:
         82:91:cf:69:ec:83:3a:00:57:99:0d:0f:1f:ff:72:a3:da:60:
         05:b1:2f:c8:43:7b:c5:2a:e1:50:c3:c2:d8:84:73:11:3c:08:
         dd:43:84:45:97:13:b2:42:f5:38:bb:fb:64:56:aa:49:5d:34:
         93:96:1d:aa:df:28:45:08:ec:04:85:64:f8:ff:7f:7e:ca:14:
         ea:79:9c:7b:1f:09:0b:bc:c2:27:ea:60:a2:67:ff:d4:24:55:
         f7:42:de:19:9e:ba:a9:e9:8b:1e:ea:b2:93:94:10:48:8c:89:
         92:31:a2:40:87:f7:e4:43:b0:00:69:65:0c:9c:45:c9:05:ee:
         7c:48:da:1b:10:85:15:c5:52:74:32:74:c6:91:cc:7e:38:ed:
         20:72:af:7a:06:77:6b:7f:ec:f3:4c:ed:bc:1c:d5:07:5d:10:
         a2:f4:b3:37:e9:fc:02:dc:7d:dc:5a:1f:0e:74:b0:3c:85:f5:
         c9:67:cf:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 17:57:29 2026 by rpki-client