Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/37322e34342e31362e302f32342d3234203d3e20323636313635.roa
File:                     37322e34342e31362e302f32342d3234203d3e20323636313635.roa (raw, json)
Hash identifier:          k/tLN+ivlQPjTaicQ4FseMnIsOYO9JTw2CJT/FgvXis=
Subject key identifier:   AA:3E:D4:56:32:89:96:3E:A4:DB:F5:17:73:D1:DC:18:86:67:A9:A5
Certificate issuer:       /CN=35820974DAE7FC3F1AE8D279269AB670ABA40E8F
Certificate serial:       4FC796701BA2EEF320E49CB5B506C9490E5FFA37
Authority key identifier: 35:82:09:74:DA:E7:FC:3F:1A:E8:D2:79:26:9A:B6:70:AB:A4:0E:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35820974DAE7FC3F1AE8D279269AB670ABA40E8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/37322e34342e31362e302f32342d3234203d3e20323636313635.roa
Signing time:             Fri 23 Jan 2026 19:58:27 +0000
ROA not before:           Fri 23 Jan 2026 19:53:27 +0000
ROA not after:            Fri 22 Jan 2027 19:58:27 +0000
asID:                     266165
IP address blocks:        72.44.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/35820974DAE7FC3F1AE8D279269AB670ABA40E8F.crl
                          rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/35820974DAE7FC3F1AE8D279269AB670ABA40E8F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35820974DAE7FC3F1AE8D279269AB670ABA40E8F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 10:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:c7:96:70:1b:a2:ee:f3:20:e4:9c:b5:b5:06:c9:49:0e:5f:fa:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35820974DAE7FC3F1AE8D279269AB670ABA40E8F
        Validity
            Not Before: Jan 23 19:53:27 2026 GMT
            Not After : Jan 22 19:58:27 2027 GMT
        Subject: CN=AA3ED4563289963EA4DBF51773D1DC188667A9A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5c:30:ca:02:5f:d1:b3:16:42:e2:04:b9:29:
                    b2:20:ce:50:9f:ba:22:84:fa:09:b6:d6:06:71:0b:
                    c1:ea:d0:d6:cf:55:f4:1d:17:52:9b:3c:29:2b:c3:
                    4f:a5:e9:e1:9d:52:4e:c2:ef:c4:75:40:06:62:ed:
                    07:c5:d1:c0:91:f6:76:29:37:2d:fd:e6:71:ff:53:
                    a7:e2:94:c4:d8:c5:b0:96:21:c2:f4:9b:9a:8e:47:
                    30:14:8a:c5:15:6b:67:71:7e:a5:2a:0e:c3:56:3e:
                    fb:1f:72:88:e5:49:5c:57:a8:57:04:55:8a:d7:9f:
                    c9:a8:65:0d:44:5b:04:29:1a:a9:60:c6:78:2d:c5:
                    f4:8e:9d:96:74:95:81:91:eb:47:47:61:9e:69:03:
                    5b:b4:5d:90:a5:7e:de:5c:ff:d8:5b:6f:84:7f:06:
                    86:38:72:81:93:49:cc:b2:a7:7a:25:43:61:1d:b9:
                    59:9a:2d:5f:28:53:5f:11:68:a3:ea:31:53:dc:cc:
                    dd:ab:b7:76:67:8b:83:3d:1e:ad:b6:30:c8:a9:b9:
                    ba:79:7f:d5:a5:10:8e:f2:8e:8a:ef:52:53:38:46:
                    39:b2:a1:7a:24:8b:f3:a3:cf:82:5e:1d:a7:04:a1:
                    30:72:fe:d0:09:71:a3:33:74:58:4d:7a:75:80:7b:
                    0b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:3E:D4:56:32:89:96:3E:A4:DB:F5:17:73:D1:DC:18:86:67:A9:A5
            X509v3 Authority Key Identifier:
                keyid:35:82:09:74:DA:E7:FC:3F:1A:E8:D2:79:26:9A:B6:70:AB:A4:0E:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/35820974DAE7FC3F1AE8D279269AB670ABA40E8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35820974DAE7FC3F1AE8D279269AB670ABA40E8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/37322e34342e31362e302f32342d3234203d3e20323636313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.44.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:f2:9d:7d:f1:9d:21:b4:05:09:6d:be:dc:a2:70:ab:01:10:
         ca:90:ab:a0:7e:3d:ab:42:ab:e3:64:8e:93:c0:22:a3:17:c0:
         c6:0e:e7:3d:51:1e:e7:89:0f:0e:d0:a3:cd:15:c2:55:db:9c:
         76:17:90:20:99:03:01:df:2b:3d:46:0f:ac:30:e2:91:df:d4:
         a1:14:9f:2c:ef:78:9b:1d:1d:dc:4c:2f:a3:93:2a:bb:7e:ec:
         37:5f:70:ee:8f:e5:30:52:77:7c:76:3a:d1:f9:57:99:00:da:
         25:73:0a:16:51:0a:71:46:96:a1:98:6e:01:8b:51:4b:b6:cb:
         c4:7b:50:83:74:ae:8b:78:99:7f:02:c3:7f:f3:42:3d:06:16:
         8b:58:36:06:d7:15:15:e8:63:04:e4:64:a7:2b:75:bf:61:58:
         8d:c3:33:68:1e:99:dd:25:e4:2b:77:29:cc:7e:8e:b0:e6:90:
         b7:63:e2:03:5d:2f:7a:27:27:ac:a9:6b:7b:7c:1f:e9:93:a0:
         02:d5:89:62:cf:77:36:17:bb:ef:01:eb:35:40:7c:f6:4a:98:
         98:d6:0a:d7:89:16:a5:4a:b3:4f:05:52:3e:16:ec:bb:e8:61:
         32:af:b7:28:38:25:40:d4:9a:d3:4a:86:14:23:0f:c8:68:65:
         56:25:02:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:49:56 2026 by rpki-client