Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/34352e3137312e36382e302f32342d3234203d3e20323638313838.roa
File:                     34352e3137312e36382e302f32342d3234203d3e20323638313838.roa (raw, json)
Hash identifier:          u0g459zG3JKgWEQeSWKq5wiTevrwtUFKhUVVbt62dLQ=
Subject key identifier:   A3:6C:5C:66:FD:80:60:7D:34:64:5B:60:D2:E1:54:E0:C4:A5:10:9F
Certificate issuer:       /CN=6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2
Certificate serial:       61DAFA748307AEB9E45C7210D4D75C3E2E7910B9
Authority key identifier: 6A:D7:3C:62:7C:D5:5D:F9:A3:DA:F8:8D:8A:D2:45:16:9D:BD:F0:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/34352e3137312e36382e302f32342d3234203d3e20323638313838.roa
Signing time:             Thu 20 Aug 2026 23:30:35 +0000
ROA not before:           Thu 20 Aug 2026 23:25:35 +0000
ROA not after:            Thu 19 Aug 2027 23:30:35 +0000
asID:                     268188
IP address blocks:        45.171.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.crl
                          rsync://rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 03:29:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:da:fa:74:83:07:ae:b9:e4:5c:72:10:d4:d7:5c:3e:2e:79:10:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2
        Validity
            Not Before: Aug 20 23:25:35 2026 GMT
            Not After : Aug 19 23:30:35 2027 GMT
        Subject: CN=A36C5C66FD80607D34645B60D2E154E0C4A5109F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5a:88:8b:06:91:53:b9:34:7c:8a:fd:e6:d9:
                    97:02:93:f7:83:59:28:ca:48:56:27:60:7f:00:7e:
                    d2:c9:e0:6d:f4:66:d4:ca:21:c9:2a:2c:55:66:01:
                    e1:6b:bf:c8:7a:1f:ae:c0:8c:b4:bd:a9:0f:77:6e:
                    4c:eb:b9:1c:c3:ab:82:4e:dd:24:16:37:c9:c0:fc:
                    63:db:8c:c8:56:98:9d:d7:a3:cb:50:ab:09:de:d4:
                    b5:11:e7:e7:5c:59:27:7c:ae:e4:82:b1:9f:db:f5:
                    6e:9d:46:ec:f0:21:66:4e:91:15:bc:06:e8:53:4b:
                    83:c7:52:d5:8e:3a:59:1a:5b:17:4d:82:21:d7:c2:
                    54:a6:d0:e4:d3:fa:d1:66:3d:9a:6a:96:78:08:3d:
                    e0:e2:97:45:1c:7b:80:de:70:78:2d:8c:15:70:76:
                    4d:29:4e:9a:9f:81:a0:0e:c4:75:85:45:1b:55:48:
                    51:7f:95:26:11:aa:49:49:84:cb:16:7f:5e:5c:f4:
                    05:54:d6:cf:d2:dc:0b:04:0c:a7:d8:0c:88:11:ca:
                    34:09:01:97:1e:e1:33:ec:38:a4:5e:48:2e:7d:58:
                    52:15:e9:2e:6b:73:e1:1b:74:22:1c:f3:bd:6f:56:
                    f0:ec:3a:c8:3d:6b:be:33:be:b3:2f:60:d1:9e:c3:
                    03:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:6C:5C:66:FD:80:60:7D:34:64:5B:60:D2:E1:54:E0:C4:A5:10:9F
            X509v3 Authority Key Identifier:
                keyid:6A:D7:3C:62:7C:D5:5D:F9:A3:DA:F8:8D:8A:D2:45:16:9D:BD:F0:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/34352e3137312e36382e302f32342d3234203d3e20323638313838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:a1:04:92:22:6b:9d:86:33:5c:eb:b1:a1:ab:b0:ee:42:ee:
         cd:57:f6:50:db:a0:6d:c7:ca:58:ca:cb:db:3c:e1:4b:34:f2:
         68:23:aa:84:de:dc:b2:69:f5:a2:c2:77:b7:00:f3:df:1b:17:
         41:ab:c2:c6:60:81:79:fe:34:8c:65:36:93:cf:4f:4d:b5:cb:
         da:43:86:82:a4:18:49:5d:15:d7:c9:99:a5:f1:c4:c6:ab:8c:
         c7:ee:8b:ff:63:4b:40:9d:6e:4e:bb:d6:6e:56:0a:8c:d4:96:
         48:21:11:ba:25:cd:6e:f1:b8:df:66:8c:bd:37:99:76:92:e4:
         ad:78:06:cf:01:d7:ac:c7:34:87:f4:1e:ad:1f:a4:00:ba:3c:
         a9:67:0d:3d:cf:13:ae:69:b8:28:05:88:60:db:7c:d3:a9:eb:
         92:f7:cf:99:f0:8e:57:3d:b9:08:32:a8:97:0b:1f:52:87:70:
         e0:36:0e:f3:4c:0a:2b:bd:ee:87:cb:83:6d:c1:81:e0:9d:32:
         03:cc:24:a5:de:a2:96:9f:b1:3b:3a:c1:65:43:07:39:df:e4:
         c5:47:1f:12:61:4b:16:e8:a8:c1:ab:40:e5:80:0a:36:bc:e0:
         4b:db:13:49:11:3b:f5:bb:4f:26:24:d1:5c:f4:38:69:08:e1:
         5d:5f:e6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 08:25:41 2026 by rpki-client