Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/34352e3137312e37312e302f32342d3234203d3e20323638313838.roa
File:                     34352e3137312e37312e302f32342d3234203d3e20323638313838.roa (raw, json)
Hash identifier:          L3EJYGVHhZHdGwqxXwash2DozQFg1Wgp5KEnMz2zBZc=
Subject key identifier:   E7:33:05:E7:50:44:F3:65:83:79:D5:08:47:B9:7B:A1:7D:9B:BC:B6
Certificate issuer:       /CN=6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2
Certificate serial:       2ECAE374538CECBDA35EE0D9D7FC3399127D73A1
Authority key identifier: 6A:D7:3C:62:7C:D5:5D:F9:A3:DA:F8:8D:8A:D2:45:16:9D:BD:F0:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/34352e3137312e37312e302f32342d3234203d3e20323638313838.roa
Signing time:             Thu 20 Aug 2026 23:30:34 +0000
ROA not before:           Thu 20 Aug 2026 23:25:34 +0000
ROA not after:            Thu 19 Aug 2027 23:30:34 +0000
asID:                     268188
IP address blocks:        45.171.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.crl
                          rsync://rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 03:29:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ca:e3:74:53:8c:ec:bd:a3:5e:e0:d9:d7:fc:33:99:12:7d:73:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2
        Validity
            Not Before: Aug 20 23:25:34 2026 GMT
            Not After : Aug 19 23:30:34 2027 GMT
        Subject: CN=E73305E75044F3658379D50847B97BA17D9BBCB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5c:59:3a:5b:81:a1:92:0e:01:51:db:89:15:
                    50:b7:c3:41:8f:e8:78:9d:f6:32:d6:ff:eb:a0:45:
                    75:15:9c:4c:14:6c:eb:fe:0a:72:df:22:38:80:a9:
                    26:29:ce:1d:97:5d:22:7b:24:29:fe:14:b8:ce:12:
                    fa:57:d4:69:da:28:11:54:e8:63:16:e6:07:c9:bb:
                    77:25:28:49:f5:96:67:d5:4a:3f:68:1f:0b:48:21:
                    4e:56:53:85:b3:5d:03:86:2b:46:23:33:56:87:b4:
                    86:22:73:97:21:5e:ed:0f:b1:99:e8:25:63:9f:dc:
                    50:18:10:d4:24:ad:9b:ff:f0:01:3d:4c:04:71:37:
                    26:36:03:28:3b:2e:73:14:b5:4f:5f:1d:98:52:3b:
                    23:61:ee:17:08:6f:1a:79:47:c4:9c:af:4c:46:3f:
                    ee:e2:f7:0b:bd:0f:4b:2e:1a:78:e8:76:dc:65:62:
                    2c:63:2e:27:4c:25:d6:e0:10:bd:4a:b1:cc:dd:cd:
                    23:7a:03:a5:dc:54:04:20:96:fd:33:78:24:62:b6:
                    f7:74:de:97:fb:12:e5:6a:b6:fc:ba:a5:3c:45:98:
                    e9:d4:fb:7a:33:84:77:a3:25:94:f6:b0:fd:d6:68:
                    b1:33:26:ca:1a:50:c8:37:7e:5a:e7:b4:cd:08:36:
                    72:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:33:05:E7:50:44:F3:65:83:79:D5:08:47:B9:7B:A1:7D:9B:BC:B6
            X509v3 Authority Key Identifier:
                keyid:6A:D7:3C:62:7C:D5:5D:F9:A3:DA:F8:8D:8A:D2:45:16:9D:BD:F0:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/34352e3137312e37312e302f32342d3234203d3e20323638313838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:06:a6:10:6c:f5:61:42:40:93:f2:1b:44:f8:d4:05:57:61:
         36:49:03:bd:ce:ae:8c:f4:f3:92:a0:92:2c:73:0f:f0:1d:96:
         29:b6:c7:78:19:63:8c:f0:de:6a:dd:b0:3d:9e:62:64:21:73:
         86:9f:69:aa:df:4f:83:ff:fd:4a:6b:00:4b:06:72:45:08:9b:
         70:9a:ac:a6:ea:b8:05:58:e5:80:d7:a2:28:14:a0:95:72:74:
         6e:97:a6:be:e1:88:61:78:8a:eb:78:ec:3e:fc:e0:3a:67:aa:
         b1:46:ec:5b:0a:e4:3c:5d:b2:21:20:4a:24:4e:7f:91:c3:48:
         ff:ee:e9:33:0e:30:d1:56:e3:88:d8:ca:bd:45:09:e1:56:ae:
         40:a4:0e:59:fd:6e:ce:54:54:d3:4f:43:c7:64:bc:8f:40:4d:
         d0:2a:c8:5f:bc:89:c7:7e:ae:79:19:8c:fc:18:b8:79:70:66:
         6f:87:5b:65:35:30:82:33:5a:b7:58:93:c7:87:f1:fa:b4:6a:
         4d:2a:3c:b0:db:d2:02:d0:0d:fc:6a:97:bf:5f:e8:59:c6:43:
         94:ee:cd:c6:44:30:e7:40:10:83:bf:04:aa:54:e0:b1:d2:c3:
         8e:e5:51:2a:ef:5e:37:f0:39:99:27:f3:55:a9:e4:d8:23:67:
         69:35:e1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 08:25:39 2026 by rpki-client