Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/0/34352e362e3132302e302f32322d3234203d3e20323731373235.roa
File:                     34352e362e3132302e302f32322d3234203d3e20323731373235.roa (raw, json)
Hash identifier:          6IHjxdmAUsKT2PKS3W6pAuI/NmLBxEcy4KYGb1ng08w=
Subject key identifier:   A1:75:97:36:DF:07:E9:08:71:E7:94:E1:65:9E:70:2A:DA:9D:38:2E
Certificate issuer:       /CN=F911C685B58FA763052113E32AC5968065763E8A
Certificate serial:       27155CE6C551F63D35A7E6A92A51518B80493041
Authority key identifier: F9:11:C6:85:B5:8F:A7:63:05:21:13:E3:2A:C5:96:80:65:76:3E:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F911C685B58FA763052113E32AC5968065763E8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/0/34352e362e3132302e302f32322d3234203d3e20323731373235.roa
Signing time:             Tue 16 Jun 2026 13:28:15 +0000
ROA not before:           Tue 16 Jun 2026 13:23:15 +0000
ROA not after:            Tue 15 Jun 2027 13:28:15 +0000
asID:                     271725
IP address blocks:        45.6.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/0/F911C685B58FA763052113E32AC5968065763E8A.crl
                          rsync://rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/0/F911C685B58FA763052113E32AC5968065763E8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F911C685B58FA763052113E32AC5968065763E8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 00:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:15:5c:e6:c5:51:f6:3d:35:a7:e6:a9:2a:51:51:8b:80:49:30:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F911C685B58FA763052113E32AC5968065763E8A
        Validity
            Not Before: Jun 16 13:23:15 2026 GMT
            Not After : Jun 15 13:28:15 2027 GMT
        Subject: CN=A1759736DF07E90871E794E1659E702ADA9D382E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e4:ce:f7:3e:ca:d3:2a:f8:35:7c:3d:23:cc:
                    5a:e6:4f:cf:fd:00:e4:69:c0:57:a0:84:bb:a1:11:
                    b3:3f:cf:72:5e:75:37:f5:ab:d4:63:f6:4c:ce:2e:
                    ac:3b:9d:11:07:ec:c2:16:84:49:14:6d:9e:55:40:
                    b5:13:29:ad:74:fa:6d:6c:8d:d9:dc:3d:f6:4f:62:
                    2e:a2:97:cf:ec:22:47:5b:da:c4:b5:f7:15:0a:10:
                    9d:a7:e0:7b:e3:dd:53:87:67:50:05:91:1b:2a:81:
                    02:22:7e:b3:73:7f:2c:3f:06:a6:4f:75:6a:5a:27:
                    53:b6:3e:16:e6:29:d4:47:b1:fa:2b:b2:dc:b2:96:
                    9b:4b:1b:86:0d:b1:19:5d:15:68:08:f4:87:8c:98:
                    e3:d7:f8:7a:0a:cd:27:40:90:87:d0:62:8c:79:ae:
                    66:bf:4c:63:5d:5f:b7:6f:00:05:40:df:c8:03:70:
                    44:3f:0f:1b:1c:f1:4d:e3:fd:6a:3a:fa:76:b4:b7:
                    58:c3:5e:af:48:1a:24:db:90:52:b0:59:4a:2b:45:
                    90:4f:eb:39:88:17:c0:69:cc:04:3c:3d:1b:77:60:
                    63:a7:11:b9:cb:16:1d:6a:e0:d7:45:c6:53:6f:77:
                    80:8f:c2:ff:36:bd:fb:31:c6:0a:e6:17:5d:05:1c:
                    e8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:75:97:36:DF:07:E9:08:71:E7:94:E1:65:9E:70:2A:DA:9D:38:2E
            X509v3 Authority Key Identifier:
                keyid:F9:11:C6:85:B5:8F:A7:63:05:21:13:E3:2A:C5:96:80:65:76:3E:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/0/F911C685B58FA763052113E32AC5968065763E8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F911C685B58FA763052113E32AC5968065763E8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/0/34352e362e3132302e302f32322d3234203d3e20323731373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:68:db:19:c6:96:4b:a9:af:4a:5f:c8:39:0d:0a:81:f5:17:
         82:36:82:43:2e:fd:7c:2a:d7:69:70:17:01:ce:39:78:1b:12:
         ef:25:da:97:ef:49:5b:eb:3d:30:0e:14:71:86:63:d2:3c:de:
         39:37:8d:ec:76:1a:88:cf:27:96:84:f3:15:19:a2:ae:83:61:
         a1:da:87:78:41:4f:90:94:4f:d5:f0:cd:02:52:3a:31:0d:d0:
         95:36:3c:94:91:58:7f:7a:8f:89:8d:6e:af:6f:e3:20:eb:0b:
         68:6d:05:42:ee:84:fb:f9:74:4c:49:e2:73:0d:69:7d:cf:a5:
         ce:85:ce:80:df:8d:c4:fe:10:42:2d:ab:b8:c6:ab:26:ed:ee:
         34:52:92:a0:a8:f0:92:d5:ff:c1:d7:a1:80:60:4b:78:35:3f:
         65:79:b4:d6:9b:b8:1d:4b:c4:af:5a:1c:9f:cc:fe:60:0a:d4:
         d6:26:44:b1:03:08:21:35:80:14:9d:0b:71:70:f3:76:ed:cd:
         67:f2:b5:af:aa:2b:ae:d9:14:e5:a5:04:a4:27:70:1b:8e:47:
         62:b1:e1:6e:43:38:e0:e0:8a:10:5e:5d:2a:1c:e0:87:a4:53:
         d5:51:3e:4d:c0:b8:89:0b:aa:fd:53:12:44:c6:f6:82:cd:29:
         4e:d9:93:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:09:44 2026 by rpki-client