Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/34352e3136392e3137362e302f32342d3234203d3e20323634393834.roa
File:                     34352e3136392e3137362e302f32342d3234203d3e20323634393834.roa (raw, json)
Hash identifier:          B5xdvVgstNlYxQGkCNzTsBeom34dXOLdRXQ1ZNP1noM=
Subject key identifier:   88:11:BE:AE:B0:51:E4:C8:0F:01:4A:61:99:58:0B:59:91:7F:79:14
Certificate issuer:       /CN=42C699479C53A3D36D21D10779B08C5EFF648DD6
Certificate serial:       62258CB4024F86F5A1278A77D902C4B3879811A6
Authority key identifier: 42:C6:99:47:9C:53:A3:D3:6D:21:D1:07:79:B0:8C:5E:FF:64:8D:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42C699479C53A3D36D21D10779B08C5EFF648DD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/34352e3136392e3137362e302f32342d3234203d3e20323634393834.roa
Signing time:             Wed 17 Jun 2026 15:17:06 +0000
ROA not before:           Wed 17 Jun 2026 15:12:06 +0000
ROA not after:            Wed 16 Jun 2027 15:17:06 +0000
asID:                     264984
IP address blocks:        45.169.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/42C699479C53A3D36D21D10779B08C5EFF648DD6.crl
                          rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/42C699479C53A3D36D21D10779B08C5EFF648DD6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42C699479C53A3D36D21D10779B08C5EFF648DD6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 07:11:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:25:8c:b4:02:4f:86:f5:a1:27:8a:77:d9:02:c4:b3:87:98:11:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42C699479C53A3D36D21D10779B08C5EFF648DD6
        Validity
            Not Before: Jun 17 15:12:06 2026 GMT
            Not After : Jun 16 15:17:06 2027 GMT
        Subject: CN=8811BEAEB051E4C80F014A6199580B59917F7914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:71:85:70:56:2d:0c:9b:b2:47:dd:80:68:0d:
                    70:60:9f:b2:d4:31:7c:c2:d8:e7:e6:18:50:b3:c3:
                    8d:e4:7c:07:46:b4:c5:b5:ea:c4:84:f5:3e:ec:65:
                    5a:0f:c3:3b:ff:40:bf:8e:b9:cb:20:9e:21:2f:31:
                    24:0a:c2:fc:6e:7d:d0:07:7f:15:74:23:5d:16:4c:
                    04:b8:74:51:37:4e:fe:ce:36:67:98:1b:dd:fd:7e:
                    f7:8d:f5:7b:7a:8f:51:5b:c6:f8:cc:38:01:2d:66:
                    a5:da:53:d1:3b:55:e4:cb:88:65:d4:b1:d3:d0:65:
                    26:7c:26:3b:6b:ea:45:5f:75:f4:ea:e4:a3:f6:cb:
                    1d:b1:72:59:e8:38:7d:6a:18:b7:35:83:36:79:a8:
                    e1:69:16:4e:47:bd:65:02:9b:69:b9:f4:4c:41:2d:
                    18:21:b5:6f:4d:86:7f:56:26:1e:d4:68:20:94:1e:
                    d4:ad:a3:ed:ae:19:81:00:1d:a5:00:ec:8d:65:cd:
                    43:46:54:52:bc:6d:c4:f6:04:82:3d:0c:03:42:72:
                    e9:1e:cc:e7:d6:78:78:bb:43:ce:27:d0:b3:e2:26:
                    1b:85:16:0c:e4:35:9a:1a:68:f9:c1:0c:b7:30:4a:
                    8f:9b:ba:53:03:54:d8:14:78:1f:44:fc:27:95:35:
                    b3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:11:BE:AE:B0:51:E4:C8:0F:01:4A:61:99:58:0B:59:91:7F:79:14
            X509v3 Authority Key Identifier:
                keyid:42:C6:99:47:9C:53:A3:D3:6D:21:D1:07:79:B0:8C:5E:FF:64:8D:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/42C699479C53A3D36D21D10779B08C5EFF648DD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42C699479C53A3D36D21D10779B08C5EFF648DD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/34352e3136392e3137362e302f32342d3234203d3e20323634393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:a3:78:8b:2e:93:37:f2:77:d7:86:44:ff:7e:19:0f:de:b5:
         f8:23:48:fe:f8:13:a6:81:bf:65:f9:a0:36:c3:62:74:da:08:
         f8:7b:75:2c:a9:9a:b8:63:68:20:e0:9c:44:bf:64:1a:8e:a2:
         ad:38:2a:b5:c7:8c:94:dd:8d:69:46:7a:b1:fa:9d:c2:09:79:
         48:f4:ae:c2:6f:bd:fa:fb:53:a2:16:e8:a3:7d:e6:19:5e:c0:
         49:45:0a:a9:f7:67:1b:42:91:73:09:44:b9:2d:d4:49:a0:20:
         94:2c:8d:05:d8:50:4a:a1:ad:b2:dd:95:46:25:fa:76:1c:e2:
         b1:c9:f5:6a:0d:57:e9:31:47:e1:0d:0b:af:75:a8:9a:b8:91:
         c3:6a:4c:8b:66:20:d8:a4:0a:f4:be:32:b7:c9:c9:31:dc:d3:
         f7:c2:b7:c3:57:4b:d7:13:81:a0:07:37:25:32:34:fc:3c:99:
         2f:2b:e5:c1:4e:17:74:6a:f9:44:00:5b:17:ea:7c:06:ee:29:
         22:fc:2c:f5:0b:01:71:43:28:fe:a3:eb:86:a5:8a:57:fd:a1:
         c1:d6:b7:1a:f2:66:c6:a2:02:29:55:a4:b2:e9:c5:80:4c:5d:
         25:c3:d2:07:87:a3:e6:73:23:0d:86:ee:70:44:4d:1c:79:6b:
         47:47:e2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:10:52 2026 by rpki-client