Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/34352e3137362e3139362e302f32322d3234203d3e20323635323135.roa
File:                     34352e3137362e3139362e302f32322d3234203d3e20323635323135.roa (raw, json)
Hash identifier:          fo+GMng67/O0QE9/lvD790XYBLwfdCA2eo3lBqgJmTg=
Subject key identifier:   91:28:D0:9B:28:3C:B8:94:50:ED:E5:CE:17:1E:CE:C3:74:0E:52:D9
Certificate issuer:       /CN=CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691
Certificate serial:       462E6C9AE91B38929570A29BEF83053404B191D4
Authority key identifier: CA:3B:4A:24:30:DC:6A:1E:6D:28:1B:34:BA:D2:FA:E5:FC:41:46:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/34352e3137362e3139362e302f32322d3234203d3e20323635323135.roa
Signing time:             Tue 16 Jun 2026 19:09:39 +0000
ROA not before:           Tue 16 Jun 2026 19:04:39 +0000
ROA not after:            Tue 15 Jun 2027 19:09:39 +0000
asID:                     265215
IP address blocks:        45.176.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.crl
                          rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 07:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:2e:6c:9a:e9:1b:38:92:95:70:a2:9b:ef:83:05:34:04:b1:91:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691
        Validity
            Not Before: Jun 16 19:04:39 2026 GMT
            Not After : Jun 15 19:09:39 2027 GMT
        Subject: CN=9128D09B283CB89450EDE5CE171ECEC3740E52D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:04:60:04:18:79:8c:60:97:9e:5e:90:bc:5e:
                    7f:7a:e2:fd:c7:60:f0:08:f1:95:c8:98:45:1f:58:
                    32:db:6c:03:e2:b8:5d:ce:d8:f6:1a:14:d1:b7:a3:
                    dd:ce:a3:3b:2a:82:f4:57:5d:2b:6a:5c:7b:c5:18:
                    60:60:6b:46:74:72:92:8a:28:b4:55:80:7a:7f:d6:
                    a1:5b:4e:8f:e1:16:c4:4e:09:51:ee:80:26:3f:b6:
                    be:d4:67:66:3e:90:31:a4:d8:c1:38:be:62:e4:03:
                    29:f1:df:c4:48:cc:13:f3:25:e0:52:7f:2e:7c:1b:
                    9d:b9:a9:e6:79:1a:00:90:42:e4:59:30:73:2f:91:
                    23:69:d3:30:fa:ae:a3:c3:8f:a1:c9:31:b0:c9:96:
                    fa:20:f4:9b:86:0f:bb:a0:d6:de:f4:12:86:06:9b:
                    74:7e:8c:3e:fd:57:13:b8:04:75:1a:b1:7b:c8:ff:
                    45:bd:7b:c0:e0:2b:8a:04:2f:b1:aa:1d:39:38:9f:
                    2d:9a:5a:0b:b1:19:03:18:a9:ad:74:c4:db:38:fe:
                    18:86:8d:b4:60:5d:0f:74:55:f1:84:90:69:b9:e7:
                    d0:b5:d5:8a:69:f4:81:f7:3f:85:0c:ef:64:34:6a:
                    ee:2d:03:fd:1f:ad:68:f9:ea:d6:c4:d4:aa:d0:c5:
                    cb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:28:D0:9B:28:3C:B8:94:50:ED:E5:CE:17:1E:CE:C3:74:0E:52:D9
            X509v3 Authority Key Identifier:
                keyid:CA:3B:4A:24:30:DC:6A:1E:6D:28:1B:34:BA:D2:FA:E5:FC:41:46:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/34352e3137362e3139362e302f32322d3234203d3e20323635323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:d7:05:2f:96:d9:09:e6:6e:4c:12:56:13:14:d6:dd:dc:59:
         de:33:b9:cb:c6:eb:11:96:76:0a:1e:30:85:f9:07:50:c9:f4:
         76:41:56:2d:eb:1b:77:8b:32:9b:5d:6a:57:77:36:0a:ee:f9:
         98:ec:76:09:ff:1c:4c:84:ed:04:f9:1e:04:8b:82:b2:8f:cb:
         72:5c:9c:6f:3c:1a:96:e2:8b:92:fe:15:e6:e6:70:14:52:74:
         e6:0a:d7:b2:8a:1e:ea:3c:77:28:4a:14:17:22:d2:9c:69:89:
         a0:71:7e:96:d6:b2:49:f0:a9:45:20:ba:a4:25:ba:5c:9e:dc:
         b7:29:33:36:a3:d4:81:98:7f:8c:6f:22:7c:e3:98:ef:f8:28:
         c4:b3:99:31:79:0e:a1:0f:25:5b:55:9f:dc:7f:b3:45:db:ce:
         ff:1e:5f:d8:14:5f:1e:a3:4c:97:78:2b:79:08:11:57:71:cb:
         02:43:15:b0:89:ac:61:72:e9:1c:c4:5e:82:29:20:36:71:1d:
         d6:10:aa:77:ce:e8:b4:bc:d7:af:a2:a7:41:a5:78:a3:4e:72:
         df:cb:5c:91:26:69:a2:e4:96:a1:09:12:86:c8:87:f6:d8:f8:
         99:72:5c:5d:0d:82:11:51:c8:ba:79:57:bb:1b:60:3c:6c:83:
         7d:3c:ce:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:10:45 2026 by rpki-client