Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/34352e372e37322e302f32322d3234203d3e20323633303034.roa
File:                     34352e372e37322e302f32322d3234203d3e20323633303034.roa (raw, json)
Hash identifier:          nrkhRZlVH53g9BZyNHTW8X+eY5ioFAECqEK/tvyCt1s=
Subject key identifier:   74:D4:46:E9:6D:26:D3:A2:4F:2E:04:7A:CB:D7:33:B9:33:9B:C0:6B
Certificate issuer:       /CN=71E336AA1EADBE4A610866EDB4141D36A5B77C52
Certificate serial:       4A49E6830AF12CC151073785D78F0FCE1641E4FC
Authority key identifier: 71:E3:36:AA:1E:AD:BE:4A:61:08:66:ED:B4:14:1D:36:A5:B7:7C:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/34352e372e37322e302f32322d3234203d3e20323633303034.roa
Signing time:             Tue 23 Jun 2026 13:47:52 +0000
ROA not before:           Tue 23 Jun 2026 13:42:52 +0000
ROA not after:            Tue 22 Jun 2027 13:47:52 +0000
asID:                     263004
IP address blocks:        45.7.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.crl
                          rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:45:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:49:e6:83:0a:f1:2c:c1:51:07:37:85:d7:8f:0f:ce:16:41:e4:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71E336AA1EADBE4A610866EDB4141D36A5B77C52
        Validity
            Not Before: Jun 23 13:42:52 2026 GMT
            Not After : Jun 22 13:47:52 2027 GMT
        Subject: CN=74D446E96D26D3A24F2E047ACBD733B9339BC06B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d6:0b:91:72:40:8e:4e:a7:87:bc:da:dd:bd:
                    ab:d8:4a:b3:a2:46:f4:b5:6a:e6:58:21:23:f3:00:
                    f3:93:45:01:e9:15:f1:74:61:b2:6c:48:68:0b:6c:
                    36:8f:a5:f9:79:d8:fb:6d:3a:00:d5:f3:17:c8:19:
                    ea:0c:52:00:78:97:60:85:90:cf:83:b8:3c:ef:9c:
                    c2:ed:73:b1:28:b0:1d:0d:e0:19:19:8b:c4:fc:f2:
                    25:4e:9d:c7:56:8c:18:fe:36:ae:09:ca:e7:93:e6:
                    7c:e6:d2:16:6d:b4:43:b0:6e:81:d3:63:c6:32:a0:
                    61:ee:31:5c:12:91:b9:26:0e:dc:43:f1:5f:58:ee:
                    f4:0f:01:1e:f0:31:ae:1b:9f:12:0d:4a:86:ad:a0:
                    f6:80:3f:b1:64:5a:6e:d8:62:9e:f2:65:14:08:68:
                    b2:72:df:4f:98:73:dd:5f:bf:a5:ef:2d:eb:75:4d:
                    1a:3b:c3:16:6c:0e:01:1a:3b:68:cf:e2:eb:fb:30:
                    3a:a6:16:fd:4e:8f:c2:28:62:da:28:25:43:50:9a:
                    76:0a:ad:56:0c:ac:81:9d:ad:5c:56:bd:c4:41:e9:
                    59:b8:bb:b3:b8:9f:19:76:98:86:cc:a3:bc:c5:b7:
                    c3:04:6e:ce:12:54:18:c1:df:6a:14:e5:41:c6:c5:
                    74:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D4:46:E9:6D:26:D3:A2:4F:2E:04:7A:CB:D7:33:B9:33:9B:C0:6B
            X509v3 Authority Key Identifier:
                keyid:71:E3:36:AA:1E:AD:BE:4A:61:08:66:ED:B4:14:1D:36:A5:B7:7C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/34352e372e37322e302f32322d3234203d3e20323633303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:f0:42:10:9d:b4:21:d7:94:57:61:54:ee:b4:28:4a:77:1d:
         7e:c3:70:9d:46:aa:3c:4d:79:f4:25:e9:9b:0f:98:a5:fb:0e:
         05:24:f1:db:d7:e6:7e:bf:f9:df:f5:e8:e5:56:88:dc:0a:2b:
         5e:12:61:e9:4b:f5:a2:34:fd:8d:2d:70:eb:44:34:94:c2:a6:
         a3:34:ca:43:04:43:a4:b4:e4:00:2e:71:df:08:49:f8:f1:16:
         2c:98:eb:03:b1:3b:f9:6a:a0:91:00:cc:ab:b4:d3:86:74:a7:
         5c:9a:6b:42:21:9f:06:06:c4:94:ab:28:9b:88:31:69:9a:a8:
         91:cb:fe:07:c6:9b:3e:1c:c9:62:67:e6:8f:16:3f:e3:fb:91:
         40:f1:78:74:23:1b:79:82:dd:ba:a4:54:6f:82:53:d4:e2:4c:
         85:85:4a:80:1a:96:64:9a:51:28:a4:74:ca:0d:29:1a:f4:08:
         d1:59:12:df:3a:60:cc:a4:6b:66:c5:69:22:91:cc:b9:d1:a2:
         bb:61:a2:f4:c0:2a:69:61:94:26:21:3f:fb:14:94:25:84:b8:
         e7:b4:44:91:d9:13:ec:30:99:77:73:86:55:8b:69:3c:46:a2:
         b9:89:0c:d7:f5:d5:33:0b:a0:57:a2:2d:35:5d:a0:85:bf:4f:
         91:2f:bc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 21:21:06 2026 by rpki-client