Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C2cXFp7J6L8ToiQmxGyG69UN35LtWs5jJFmWB9kGKMm6/0/34352e3138312e32302e302f32342d3234203d3e20323639313636.roa
File:                     34352e3138312e32302e302f32342d3234203d3e20323639313636.roa (raw, json)
Hash identifier:          x6IZzlv+DoDREZ9xvGXErgQWgHv3A8HqvS+yZk6O5cQ=
Subject key identifier:   C1:5C:CC:C4:43:A8:B4:96:D6:C5:54:64:34:12:E0:CC:45:D1:1B:1F
Certificate issuer:       /CN=D357DC68A05ED575BA6451EB468F237AA28B467D
Certificate serial:       7A18E1E1490676911AE48F644F7B49076DC57986
Authority key identifier: D3:57:DC:68:A0:5E:D5:75:BA:64:51:EB:46:8F:23:7A:A2:8B:46:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D357DC68A05ED575BA6451EB468F237AA28B467D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C2cXFp7J6L8ToiQmxGyG69UN35LtWs5jJFmWB9kGKMm6/0/34352e3138312e32302e302f32342d3234203d3e20323639313636.roa
Signing time:             Mon 30 Mar 2026 19:09:10 +0000
ROA not before:           Mon 30 Mar 2026 19:04:10 +0000
ROA not after:            Mon 29 Mar 2027 19:09:10 +0000
asID:                     269166
IP address blocks:        45.181.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C2cXFp7J6L8ToiQmxGyG69UN35LtWs5jJFmWB9kGKMm6/0/D357DC68A05ED575BA6451EB468F237AA28B467D.crl
                          rsync://rpki-repo.registro.br/repo/C2cXFp7J6L8ToiQmxGyG69UN35LtWs5jJFmWB9kGKMm6/0/D357DC68A05ED575BA6451EB468F237AA28B467D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D357DC68A05ED575BA6451EB468F237AA28B467D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 23:36:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:18:e1:e1:49:06:76:91:1a:e4:8f:64:4f:7b:49:07:6d:c5:79:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D357DC68A05ED575BA6451EB468F237AA28B467D
        Validity
            Not Before: Mar 30 19:04:10 2026 GMT
            Not After : Mar 29 19:09:10 2027 GMT
        Subject: CN=C15CCCC443A8B496D6C554643412E0CC45D11B1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d7:45:e6:7d:39:5f:fa:44:57:20:d9:89:93:
                    61:5c:de:29:56:6f:48:4a:75:1b:9a:e7:a6:1c:4c:
                    d2:87:1d:b1:10:f8:71:55:48:ca:76:0d:89:a6:31:
                    1b:57:f5:8e:78:47:48:fd:f7:a4:05:ee:fc:88:18:
                    f1:05:f0:a1:02:a5:85:d5:41:e9:1a:01:a8:83:38:
                    40:8f:18:93:83:98:42:53:8d:c7:58:cd:52:76:d4:
                    ac:2f:eb:b9:90:b0:53:e6:5e:6d:94:6e:d7:6f:b9:
                    51:d9:9a:d5:cf:34:00:2f:66:ab:16:d6:36:4b:e6:
                    9d:6c:e4:88:73:e5:0a:d9:24:93:bc:d1:3a:ec:a6:
                    49:14:60:2a:18:b5:c4:13:53:a9:48:47:1c:62:67:
                    5b:e6:8f:fb:17:c4:87:5d:fc:0b:7a:3c:9b:d8:98:
                    d8:98:0c:e5:04:a0:2e:f7:01:16:56:7f:a5:7b:fb:
                    c1:84:10:02:48:14:95:48:61:51:11:bc:af:c8:e8:
                    d7:b4:23:ac:5d:94:91:b4:a4:97:9b:b6:1d:fa:51:
                    6f:d6:72:68:21:f3:25:fd:7d:d8:9f:f2:40:88:5a:
                    b0:bb:07:e7:9c:94:91:f9:e5:c0:f9:c1:0e:5e:a7:
                    4a:25:eb:9f:80:da:ab:cc:68:9c:d9:96:e3:4e:7c:
                    ed:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:5C:CC:C4:43:A8:B4:96:D6:C5:54:64:34:12:E0:CC:45:D1:1B:1F
            X509v3 Authority Key Identifier:
                keyid:D3:57:DC:68:A0:5E:D5:75:BA:64:51:EB:46:8F:23:7A:A2:8B:46:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C2cXFp7J6L8ToiQmxGyG69UN35LtWs5jJFmWB9kGKMm6/0/D357DC68A05ED575BA6451EB468F237AA28B467D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D357DC68A05ED575BA6451EB468F237AA28B467D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C2cXFp7J6L8ToiQmxGyG69UN35LtWs5jJFmWB9kGKMm6/0/34352e3138312e32302e302f32342d3234203d3e20323639313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:6f:eb:3b:53:69:b2:66:94:3b:f1:36:99:57:aa:a4:13:fb:
         7d:b3:8b:01:1b:e7:6f:a4:73:1c:57:b5:bc:a3:5f:3a:1f:fc:
         af:74:b2:fb:ef:b5:c8:0d:22:e5:62:f6:e1:30:4d:b8:83:f4:
         bf:92:82:4e:3c:c4:08:09:af:95:64:7a:e5:99:80:6b:89:61:
         a6:5c:5f:7a:c5:77:03:d2:11:0c:03:bd:e0:5b:af:cf:83:6a:
         ee:dd:69:80:99:79:ca:68:5d:42:d7:2f:dd:3a:19:91:a2:6f:
         ee:c3:7a:de:75:87:99:69:35:9b:3b:2f:2c:e3:3e:49:fd:17:
         28:08:14:e0:4f:f2:86:47:64:de:74:f6:3f:41:72:ac:05:b0:
         0c:6b:0b:ba:9d:c6:72:ee:92:7a:61:6c:88:62:b6:95:68:35:
         bb:e4:78:96:91:ed:41:cf:fb:ff:19:36:30:26:f5:b3:ea:69:
         f7:b4:41:14:3d:93:a3:db:b0:65:c0:60:91:60:47:0b:a2:03:
         bc:fe:0f:17:20:a9:e2:bd:a6:8b:3f:55:d5:47:e9:df:ca:70:
         77:e5:c5:2e:9e:41:cb:cf:fe:d4:aa:36:63:a0:92:dc:01:a8:
         a7:d6:aa:ec:57:22:e1:d5:5e:67:d3:88:0e:67:f6:a2:cc:0a:
         7f:84:16:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 16:40:27 2026 by rpki-client