Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/34352e3233372e3234302e302f32322d3232203d3e20323638333037.roa
File:                     34352e3233372e3234302e302f32322d3232203d3e20323638333037.roa (raw, json)
Hash identifier:          XxsV/NQ38PKtlNeC6xmNLlw7PDmCTmCEq3yjlNS1IWA=
Subject key identifier:   67:2D:65:5A:65:2F:E0:0E:A9:9E:38:F9:68:38:1D:D5:40:A4:D9:98
Certificate issuer:       /CN=919559B7857557ABD92797154F2A7923EF470015
Certificate serial:       482041E0CAAC2DEEFB4196EBE7AA586B7CC4DFEB
Authority key identifier: 91:95:59:B7:85:75:57:AB:D9:27:97:15:4F:2A:79:23:EF:47:00:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/919559B7857557ABD92797154F2A7923EF470015.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/34352e3233372e3234302e302f32322d3232203d3e20323638333037.roa
Signing time:             Sat 28 Mar 2026 13:23:45 +0000
ROA not before:           Sat 28 Mar 2026 13:18:45 +0000
ROA not after:            Sat 27 Mar 2027 13:23:45 +0000
asID:                     268307
IP address blocks:        45.237.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/919559B7857557ABD92797154F2A7923EF470015.crl
                          rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/919559B7857557ABD92797154F2A7923EF470015.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/919559B7857557ABD92797154F2A7923EF470015.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 17:16:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:20:41:e0:ca:ac:2d:ee:fb:41:96:eb:e7:aa:58:6b:7c:c4:df:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=919559B7857557ABD92797154F2A7923EF470015
        Validity
            Not Before: Mar 28 13:18:45 2026 GMT
            Not After : Mar 27 13:23:45 2027 GMT
        Subject: CN=672D655A652FE00EA99E38F968381DD540A4D998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f9:ec:5c:e2:06:66:22:fe:df:c4:70:28:5f:
                    1a:5b:96:9c:07:25:72:d0:f4:c6:ab:f1:86:89:4a:
                    f2:fb:b3:98:b1:b3:35:94:fb:72:8a:13:1d:82:3f:
                    d0:21:f3:f6:71:83:c5:e1:1e:6d:13:d3:81:2e:33:
                    19:40:81:72:8c:99:87:21:8c:a9:dd:df:0a:b5:87:
                    f1:61:3d:82:0b:02:f6:4c:36:a9:1f:74:4f:2b:11:
                    42:ee:9c:2c:52:02:10:c1:54:65:06:62:e1:ef:6a:
                    6c:6d:19:f0:ee:1a:6b:8f:b7:d6:45:48:16:18:ab:
                    d9:4a:3b:62:03:1f:15:93:54:09:9c:d8:8b:c1:c1:
                    68:51:bc:b2:45:e9:41:d8:1d:d3:84:f8:89:2d:c5:
                    40:ac:ef:58:b1:2e:42:26:9c:56:b6:b7:8a:d7:f5:
                    e9:1e:5b:7e:06:4a:99:42:18:a0:b8:2d:10:ca:3d:
                    f5:15:be:98:4e:53:e6:97:e9:fc:ef:0d:c5:12:69:
                    b3:9d:9f:16:2f:2c:f5:26:a3:37:9d:e9:15:46:c6:
                    ab:88:40:4a:60:39:9f:43:48:f2:e2:f3:b2:68:6c:
                    e6:ae:78:19:74:02:fd:5b:cc:0d:2b:45:1c:8a:98:
                    25:9a:49:13:c6:eb:e5:87:d8:11:b7:12:15:a3:7e:
                    00:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:2D:65:5A:65:2F:E0:0E:A9:9E:38:F9:68:38:1D:D5:40:A4:D9:98
            X509v3 Authority Key Identifier:
                keyid:91:95:59:B7:85:75:57:AB:D9:27:97:15:4F:2A:79:23:EF:47:00:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/919559B7857557ABD92797154F2A7923EF470015.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/919559B7857557ABD92797154F2A7923EF470015.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/34352e3233372e3234302e302f32322d3232203d3e20323638333037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:05:9a:cc:09:ac:8a:00:93:5a:91:3f:6c:50:e9:38:1e:1e:
         93:59:79:f8:bc:22:c4:63:e0:93:27:83:cf:02:b4:31:03:9e:
         67:26:b7:6d:c1:b0:de:ea:04:71:be:d7:db:cc:83:75:02:0f:
         8c:0e:1a:af:2a:db:75:b9:4c:04:d3:89:3b:54:1f:06:e1:08:
         bc:ed:4d:d6:b4:e9:b0:2e:f8:0a:44:5f:23:b4:aa:41:8f:c1:
         bb:d0:e1:3a:6b:08:7a:97:d7:72:12:17:7a:7c:e7:9b:7c:da:
         5d:19:48:0c:29:3a:3b:43:25:ff:20:af:ce:18:b7:40:8c:b4:
         17:4c:b8:14:30:f8:5b:5e:43:74:53:c1:29:ce:bf:60:5d:f5:
         8f:60:cf:60:51:56:08:29:ad:1f:f7:5f:ae:a5:b5:c7:b1:48:
         2b:4f:2d:7a:1b:dc:fc:11:fe:f2:26:15:e5:49:93:b8:b9:0e:
         6d:b3:ff:f3:d4:2d:7f:70:d0:5c:c5:df:44:9f:63:19:30:4f:
         18:d1:bb:66:20:e6:2d:63:c8:ed:a6:e3:9e:65:32:8f:df:b6:
         5e:91:2e:95:59:fb:8a:6c:57:b1:e7:ff:43:84:b4:64:21:e4:
         17:99:50:69:fd:e7:0a:6e:6a:9d:cc:9d:47:92:58:c0:85:b5:
         9c:7c:62:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 20:30:22 2026 by rpki-client