Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/34352e3233342e3130342e302f32322d3232203d3e20323637333537.roa
File:                     34352e3233342e3130342e302f32322d3232203d3e20323637333537.roa (raw, json)
Hash identifier:          TVFXKO8Ynmxg0AWHjo2XWGrkkwZszKC2Xao4u9+ZdRQ=
Subject key identifier:   41:51:EE:9A:B1:6C:8B:93:C4:B6:8C:FE:5B:2E:04:8D:46:7B:CD:9D
Certificate issuer:       /CN=22003C7E7945DDECEA49DB4BC81112456EF56BF6
Certificate serial:       212D5A7A2E1EE670FF99C919D66F0864353814C5
Authority key identifier: 22:00:3C:7E:79:45:DD:EC:EA:49:DB:4B:C8:11:12:45:6E:F5:6B:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22003C7E7945DDECEA49DB4BC81112456EF56BF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/34352e3233342e3130342e302f32322d3232203d3e20323637333537.roa
Signing time:             Thu 02 Jul 2026 13:26:19 +0000
ROA not before:           Thu 02 Jul 2026 13:21:19 +0000
ROA not after:            Thu 01 Jul 2027 13:26:19 +0000
asID:                     267357
IP address blocks:        45.234.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/22003C7E7945DDECEA49DB4BC81112456EF56BF6.crl
                          rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/22003C7E7945DDECEA49DB4BC81112456EF56BF6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22003C7E7945DDECEA49DB4BC81112456EF56BF6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 11:59:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:2d:5a:7a:2e:1e:e6:70:ff:99:c9:19:d6:6f:08:64:35:38:14:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22003C7E7945DDECEA49DB4BC81112456EF56BF6
        Validity
            Not Before: Jul  2 13:21:19 2026 GMT
            Not After : Jul  1 13:26:19 2027 GMT
        Subject: CN=4151EE9AB16C8B93C4B68CFE5B2E048D467BCD9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b0:75:12:29:44:c7:1b:2a:fb:1c:82:60:f1:
                    e4:c1:0f:5b:21:7f:b8:24:eb:34:f1:4f:36:0b:de:
                    2a:2a:ec:b9:2e:df:76:4c:d5:9d:76:52:20:37:bc:
                    0d:c9:a2:47:d6:9f:ed:a9:a3:40:17:3a:54:ae:84:
                    78:2e:32:54:93:87:7b:76:c9:32:41:88:f7:b2:b4:
                    a8:4c:0a:a9:e7:b1:e9:07:18:c1:5a:88:7d:2e:c4:
                    5c:e0:0f:ec:93:c2:c9:1c:5a:45:c6:df:30:5d:4d:
                    81:e3:d4:e8:5e:80:ff:73:40:47:b0:77:7d:93:74:
                    70:0a:4e:5a:c4:ac:cf:05:ef:ed:a6:76:9a:2a:f8:
                    25:66:83:c7:11:ce:45:bd:6c:1f:17:4f:e4:49:89:
                    fe:91:a8:bf:8c:c4:11:7c:5f:9c:1d:84:88:1f:24:
                    38:1f:5d:df:82:d4:6a:e6:a5:a7:9c:1a:ed:2e:88:
                    a7:3f:58:53:81:c2:1a:b2:e2:78:72:c2:3a:5e:6d:
                    c4:8f:c1:98:c0:93:5a:08:7a:2e:1a:b7:32:25:af:
                    13:91:8f:2c:0d:a4:9b:c2:3b:0d:b9:7d:57:7c:fa:
                    63:22:29:b3:48:64:cf:a4:07:9d:c9:f5:77:4a:48:
                    6e:8b:2f:91:d2:fd:bf:98:d0:c6:e8:5d:79:cc:02:
                    be:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:51:EE:9A:B1:6C:8B:93:C4:B6:8C:FE:5B:2E:04:8D:46:7B:CD:9D
            X509v3 Authority Key Identifier:
                keyid:22:00:3C:7E:79:45:DD:EC:EA:49:DB:4B:C8:11:12:45:6E:F5:6B:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/22003C7E7945DDECEA49DB4BC81112456EF56BF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22003C7E7945DDECEA49DB4BC81112456EF56BF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/34352e3233342e3130342e302f32322d3232203d3e20323637333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:60:13:1c:09:4a:47:46:30:87:a0:5c:63:a6:66:11:8d:21:
         b3:74:df:39:97:4c:8a:28:fc:10:0c:7b:aa:fb:3d:5d:b4:d5:
         c0:59:7d:62:82:5d:fc:43:75:a8:6c:6b:ed:91:ea:40:95:43:
         ae:f4:2d:79:01:19:51:74:c7:36:ed:75:89:36:cc:f9:1c:92:
         e7:38:31:15:a9:1a:7a:de:51:67:16:f0:bd:7b:a1:bb:39:3f:
         37:71:68:6d:25:a7:d1:ad:be:e3:45:69:c0:0d:1a:bc:8b:00:
         e5:cb:89:52:38:9e:6a:3e:48:2a:2a:c5:da:4a:eb:17:1d:62:
         ad:4f:2e:4e:0d:55:c0:73:92:59:09:40:68:b6:a5:8f:2d:51:
         1b:a1:af:76:3c:91:f3:1a:f3:de:1d:ca:69:2f:68:a0:66:6a:
         2a:99:87:e3:47:a3:a4:c7:84:fb:02:22:d3:6f:4c:10:fd:7d:
         cb:28:da:05:44:5b:3c:57:2c:ff:55:b5:79:86:54:df:39:ea:
         97:eb:3b:29:46:55:6e:67:f1:2f:54:aa:a1:b0:d4:28:c3:5f:
         6f:23:7f:ed:9e:ea:8a:9b:e5:e8:00:5e:75:32:bc:28:da:f8:
         72:b6:0e:a4:bc:96:a6:b8:4a:1d:86:c5:80:a1:97:db:bb:16:
         e6:51:73:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:08:52 2026 by rpki-client