Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/34352e3233342e3130342e302f32342d3234203d3e20323637333537.roa
File:                     34352e3233342e3130342e302f32342d3234203d3e20323637333537.roa (raw, json)
Hash identifier:          dcAzhJ7mzoRu4wed3lSu/z2necU/V+SUBxzfqo69j90=
Subject key identifier:   1F:E4:5E:B9:ED:49:16:8C:F2:B3:E4:CE:8F:9E:23:A2:79:53:8F:41
Certificate issuer:       /CN=22003C7E7945DDECEA49DB4BC81112456EF56BF6
Certificate serial:       4A02C7C1CECB0E08B2F3F35D7D19A870F6CA341B
Authority key identifier: 22:00:3C:7E:79:45:DD:EC:EA:49:DB:4B:C8:11:12:45:6E:F5:6B:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22003C7E7945DDECEA49DB4BC81112456EF56BF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/34352e3233342e3130342e302f32342d3234203d3e20323637333537.roa
Signing time:             Thu 02 Jul 2026 13:26:20 +0000
ROA not before:           Thu 02 Jul 2026 13:21:20 +0000
ROA not after:            Thu 01 Jul 2027 13:26:20 +0000
asID:                     267357
IP address blocks:        45.234.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/22003C7E7945DDECEA49DB4BC81112456EF56BF6.crl
                          rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/22003C7E7945DDECEA49DB4BC81112456EF56BF6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22003C7E7945DDECEA49DB4BC81112456EF56BF6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 11:59:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:02:c7:c1:ce:cb:0e:08:b2:f3:f3:5d:7d:19:a8:70:f6:ca:34:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22003C7E7945DDECEA49DB4BC81112456EF56BF6
        Validity
            Not Before: Jul  2 13:21:20 2026 GMT
            Not After : Jul  1 13:26:20 2027 GMT
        Subject: CN=1FE45EB9ED49168CF2B3E4CE8F9E23A279538F41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0e:74:79:ba:01:03:08:f5:ba:b8:47:79:42:
                    16:8e:8f:d8:f0:e0:0b:90:b6:14:0f:37:f9:7f:10:
                    ee:fd:e5:3e:b0:21:c5:d2:6b:6c:92:36:b1:93:81:
                    15:67:a9:35:0a:f6:18:86:0a:b5:9a:d5:9d:9c:a7:
                    3d:86:00:6e:7b:0a:2d:5e:af:57:fe:88:09:ee:84:
                    3b:66:63:dd:b6:7c:a7:9d:21:89:73:11:7a:8a:d0:
                    f9:39:ea:ae:92:37:32:13:8a:d2:c5:da:80:f7:62:
                    2b:88:81:25:da:58:41:02:0f:5e:2b:dd:b0:cb:1a:
                    c5:2d:9d:c8:e2:7d:97:fe:39:da:a5:ed:f7:3d:b7:
                    a2:cc:f7:19:d4:44:c5:d2:ff:63:9a:cb:98:5f:a2:
                    b9:71:9a:cf:36:65:5f:76:05:34:d9:60:74:d2:a1:
                    eb:0d:02:83:04:4d:bc:44:cf:7f:13:e7:97:97:f0:
                    14:c6:4a:c6:03:01:e0:b5:90:db:2a:f4:c8:9e:04:
                    79:f1:57:8f:50:4b:a7:20:8a:48:40:c9:12:36:62:
                    c7:0a:91:7e:ff:99:9d:04:3d:24:82:a2:62:d7:79:
                    8e:c0:ed:fb:1c:8f:81:d4:18:20:d8:75:ac:d9:25:
                    56:cb:2a:38:2f:0d:c8:71:a8:1c:90:91:8e:c5:ba:
                    b0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E4:5E:B9:ED:49:16:8C:F2:B3:E4:CE:8F:9E:23:A2:79:53:8F:41
            X509v3 Authority Key Identifier:
                keyid:22:00:3C:7E:79:45:DD:EC:EA:49:DB:4B:C8:11:12:45:6E:F5:6B:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/22003C7E7945DDECEA49DB4BC81112456EF56BF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22003C7E7945DDECEA49DB4BC81112456EF56BF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/34352e3233342e3130342e302f32342d3234203d3e20323637333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:b4:a3:62:fc:5c:43:af:ee:48:ec:cb:3b:27:d4:86:a2:55:
         b4:d1:a9:38:ad:01:da:03:04:8a:d8:ac:44:fa:d0:ab:9a:69:
         0a:41:09:6b:03:1d:97:31:fd:55:3d:10:11:2c:45:db:7e:3e:
         13:51:bd:27:f8:a1:f6:ae:d0:ca:55:7c:c0:9e:53:ca:4f:3a:
         30:e8:0f:c8:e0:70:f5:4c:7a:2c:ce:f1:2e:00:2e:3e:ae:b8:
         9f:5f:5b:df:e0:8d:cd:76:09:1e:2f:6f:55:b4:94:74:06:71:
         75:1b:24:ef:ab:32:ae:84:7d:f1:f3:38:ea:e8:02:4a:3d:b4:
         f6:ff:8f:64:e1:c2:19:72:7f:5e:e7:fe:9c:f8:72:54:0b:f6:
         95:d9:f5:de:31:ef:bc:80:fe:48:e4:1e:ef:7f:f9:61:76:85:
         af:db:ba:64:af:1a:3c:6f:db:9a:d9:53:49:a2:4c:91:02:ef:
         4d:54:95:ca:3b:b8:e4:1e:23:db:b0:4c:5a:d8:8a:13:04:35:
         00:c8:65:09:02:3a:6b:23:34:6d:39:33:ac:2b:8b:cf:ec:4c:
         eb:70:10:ae:ed:39:93:6f:1f:20:bc:12:bf:2e:8e:f6:25:fd:
         1b:bf:b4:2a:71:b4:45:60:a4:25:6e:aa:c9:2c:b4:74:3c:27:
         7c:b9:a6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:08:50 2026 by rpki-client