Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/34352e362e3234312e302f32342d3234203d3e20323634333836.roa
File:                     34352e362e3234312e302f32342d3234203d3e20323634333836.roa (raw, json)
Hash identifier:          Pjo3sCIYx7RazhjnLYDx4+T+CpZ3QmwQu+ElyHF5X3U=
Subject key identifier:   67:34:93:8D:F4:24:F9:09:94:0E:98:87:40:2E:32:96:18:47:84:C4
Certificate issuer:       /CN=67379271F7BEFF1C0ADF4F715F94E2CA2912DDED
Certificate serial:       3B9BD931146D0E328A3262153DE13CB25FC5D7D1
Authority key identifier: 67:37:92:71:F7:BE:FF:1C:0A:DF:4F:71:5F:94:E2:CA:29:12:DD:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67379271F7BEFF1C0ADF4F715F94E2CA2912DDED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/34352e362e3234312e302f32342d3234203d3e20323634333836.roa
Signing time:             Fri 21 Aug 2026 20:21:28 +0000
ROA not before:           Fri 21 Aug 2026 20:16:28 +0000
ROA not after:            Fri 20 Aug 2027 20:21:28 +0000
asID:                     264386
IP address blocks:        45.6.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/67379271F7BEFF1C0ADF4F715F94E2CA2912DDED.crl
                          rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/67379271F7BEFF1C0ADF4F715F94E2CA2912DDED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67379271F7BEFF1C0ADF4F715F94E2CA2912DDED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 07:14:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:9b:d9:31:14:6d:0e:32:8a:32:62:15:3d:e1:3c:b2:5f:c5:d7:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67379271F7BEFF1C0ADF4F715F94E2CA2912DDED
        Validity
            Not Before: Aug 21 20:16:28 2026 GMT
            Not After : Aug 20 20:21:28 2027 GMT
        Subject: CN=6734938DF424F909940E9887402E3296184784C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:98:65:54:9c:e0:75:0c:c4:06:08:c4:2b:9d:
                    29:5c:ad:6b:86:d2:16:54:da:f5:f8:98:8a:f1:0b:
                    ba:c0:9d:11:71:70:83:b4:d8:6b:0c:f3:03:3e:ed:
                    c1:08:8a:66:ff:3b:0d:6a:63:e2:94:cc:88:eb:04:
                    9a:ef:b6:88:83:bd:22:d0:42:88:52:af:ff:3d:9b:
                    46:05:e8:50:00:f3:28:89:92:92:e0:2f:3b:ae:1c:
                    6a:83:db:3c:29:31:55:43:a9:48:da:85:5c:03:5c:
                    46:77:90:0a:62:16:90:e1:2f:e0:98:f4:82:01:cb:
                    7a:21:92:bd:d9:34:92:1b:ee:16:e8:9a:8f:93:d9:
                    22:35:2c:ce:d1:6d:20:6b:3f:28:d5:76:87:c3:4d:
                    fc:25:de:77:07:79:be:69:e4:42:db:02:7e:1b:45:
                    81:50:d8:6d:03:07:62:ba:cd:c5:9f:58:35:1c:15:
                    42:ee:66:5f:67:aa:51:6e:bd:92:bb:d3:ba:c9:38:
                    0c:dc:4a:02:98:ce:b8:8f:5c:91:93:d8:21:21:c5:
                    16:9e:54:c9:4f:ee:e3:9b:a6:49:be:bd:7c:57:74:
                    31:6c:40:c8:e3:f8:a5:e9:8f:dc:6c:d6:2a:1d:da:
                    fa:a1:60:1f:e9:5a:bf:64:60:e8:99:a3:e0:87:3c:
                    27:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:34:93:8D:F4:24:F9:09:94:0E:98:87:40:2E:32:96:18:47:84:C4
            X509v3 Authority Key Identifier:
                keyid:67:37:92:71:F7:BE:FF:1C:0A:DF:4F:71:5F:94:E2:CA:29:12:DD:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/67379271F7BEFF1C0ADF4F715F94E2CA2912DDED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67379271F7BEFF1C0ADF4F715F94E2CA2912DDED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/34352e362e3234312e302f32342d3234203d3e20323634333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:9a:48:0d:41:27:26:8f:ee:7e:3b:f5:40:ad:8d:b3:56:ac:
         57:86:6c:6a:6a:3b:de:d1:eb:c2:01:a1:6a:e8:96:95:e7:68:
         6b:0a:38:62:74:e8:98:b1:8b:82:29:44:80:f4:56:c2:e6:c3:
         f2:20:90:60:d7:79:79:c6:cf:b5:e7:c0:45:c4:b3:92:e7:be:
         0d:ef:1b:7a:5c:10:b7:4e:e7:cd:b2:b5:7d:95:cd:78:8e:78:
         32:4f:1a:63:b6:62:66:a1:36:84:dd:00:64:71:24:b6:67:c9:
         07:9c:8f:d9:9f:0f:84:31:df:49:2c:96:8d:73:d1:9c:43:1c:
         de:2d:28:84:c1:41:c4:f7:f1:75:de:12:57:ec:27:99:2a:6e:
         72:ee:85:13:61:4b:15:4e:24:10:98:75:5b:be:b6:63:f4:cf:
         63:9a:b5:71:85:1c:b2:35:bb:a0:24:36:b3:29:ad:c0:17:fd:
         a4:01:5d:25:2d:60:d0:d2:61:79:5d:29:35:a9:17:83:c8:d6:
         65:af:0b:7a:71:a3:4e:05:f4:88:c4:b4:de:f2:84:9f:16:fb:
         a4:5a:eb:a2:33:c1:86:bc:cc:e3:79:0f:d4:ff:2f:e7:53:fe:
         04:5a:7e:33:fa:f0:25:53:cf:69:fb:41:8b:b1:79:dc:12:5c:
         02:90:5d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 14:53:37 2026 by rpki-client