Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/JA7cgQChA8JX7YHNYJVdXtX6J56MCKp7V7xRbE1onWn1/0/34352e3137352e302e302f32322d3234203d3e203238323637.roa
File:                     34352e3137352e302e302f32322d3234203d3e203238323637.roa (raw, json)
Hash identifier:          s2gtUvddIPM2swg9OqRppNZ6MUMz2ORXg/oBQDVTKEE=
Subject key identifier:   F7:47:EC:AC:C5:02:F1:FF:9E:6D:38:05:0A:A2:0A:40:54:E5:AD:A8
Certificate issuer:       /CN=75A050977E2E45A61254ED5A5F2421BEF17F0BA7
Certificate serial:       51BC5D28AF60995065CA1D231C6A3D84858CE048
Authority key identifier: 75:A0:50:97:7E:2E:45:A6:12:54:ED:5A:5F:24:21:BE:F1:7F:0B:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75A050977E2E45A61254ED5A5F2421BEF17F0BA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JA7cgQChA8JX7YHNYJVdXtX6J56MCKp7V7xRbE1onWn1/0/34352e3137352e302e302f32322d3234203d3e203238323637.roa
Signing time:             Tue 18 Aug 2026 03:24:56 +0000
ROA not before:           Tue 18 Aug 2026 03:19:56 +0000
ROA not after:            Tue 17 Aug 2027 03:24:56 +0000
asID:                     28267
IP address blocks:        45.175.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JA7cgQChA8JX7YHNYJVdXtX6J56MCKp7V7xRbE1onWn1/0/75A050977E2E45A61254ED5A5F2421BEF17F0BA7.crl
                          rsync://rpki-repo.registro.br/repo/JA7cgQChA8JX7YHNYJVdXtX6J56MCKp7V7xRbE1onWn1/0/75A050977E2E45A61254ED5A5F2421BEF17F0BA7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75A050977E2E45A61254ED5A5F2421BEF17F0BA7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 09:10:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:bc:5d:28:af:60:99:50:65:ca:1d:23:1c:6a:3d:84:85:8c:e0:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75A050977E2E45A61254ED5A5F2421BEF17F0BA7
        Validity
            Not Before: Aug 18 03:19:56 2026 GMT
            Not After : Aug 17 03:24:56 2027 GMT
        Subject: CN=F747ECACC502F1FF9E6D38050AA20A4054E5ADA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:75:b3:0a:65:35:1a:d8:bf:e4:83:f5:d0:b5:
                    52:0f:c7:e4:87:ad:89:9d:90:96:3b:52:93:e0:24:
                    9f:b7:63:f6:25:6a:86:1a:38:df:b8:00:48:10:8f:
                    05:5d:50:30:d4:68:39:63:e2:ea:89:af:2e:c6:7d:
                    32:81:81:cb:d5:b7:6d:2a:f9:90:88:dc:a3:c3:22:
                    47:10:16:37:fa:49:b7:a4:54:f5:ae:e8:c9:fa:7c:
                    6f:58:75:70:6b:be:62:f1:b3:6a:f9:5f:1f:a9:40:
                    25:5d:2c:20:91:f7:79:d9:76:0c:f2:ee:9e:8c:2c:
                    47:5f:56:5f:9d:5c:a7:7e:1c:75:3a:37:57:c5:7a:
                    23:a6:fd:59:03:60:ff:d0:e5:4b:85:1b:99:ce:17:
                    ce:28:ed:78:96:6d:77:98:4c:0f:c8:25:e8:90:17:
                    ba:0d:dd:3a:d8:0b:21:7b:03:b2:77:f6:8c:8c:75:
                    30:84:7d:da:8d:87:f5:1a:d5:39:5a:34:f9:8f:ce:
                    f4:4f:7e:6f:94:3d:07:8d:3b:2c:76:d1:02:3e:25:
                    c0:1c:0b:b2:10:0e:e0:ef:c9:7a:11:8d:cd:8a:6b:
                    d7:83:62:9f:9a:84:14:5d:d8:5d:d0:04:f2:4f:14:
                    82:25:12:2f:50:65:eb:60:72:ed:65:19:53:9e:4b:
                    08:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:47:EC:AC:C5:02:F1:FF:9E:6D:38:05:0A:A2:0A:40:54:E5:AD:A8
            X509v3 Authority Key Identifier:
                keyid:75:A0:50:97:7E:2E:45:A6:12:54:ED:5A:5F:24:21:BE:F1:7F:0B:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JA7cgQChA8JX7YHNYJVdXtX6J56MCKp7V7xRbE1onWn1/0/75A050977E2E45A61254ED5A5F2421BEF17F0BA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75A050977E2E45A61254ED5A5F2421BEF17F0BA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JA7cgQChA8JX7YHNYJVdXtX6J56MCKp7V7xRbE1onWn1/0/34352e3137352e302e302f32322d3234203d3e203238323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:6a:d3:e4:9f:39:9f:6f:2a:7f:73:ed:61:ac:ad:93:2d:c4:
         9f:ac:48:80:59:a3:e9:73:32:ab:51:f2:90:53:90:bc:1b:e4:
         df:f2:f7:c8:2e:ec:d3:3a:da:c3:4b:06:57:14:97:3f:e2:c3:
         41:3b:57:28:82:c6:1d:e6:52:ab:4c:dc:10:48:59:24:14:36:
         32:06:65:5a:20:cf:e5:62:6d:71:82:59:38:3a:68:25:b3:14:
         16:b9:b9:39:7a:c4:2e:97:47:98:d2:c8:ae:34:80:2a:bc:01:
         1c:8b:e1:fa:d2:95:13:ad:cf:ec:5b:c5:1e:c0:b5:75:91:0d:
         5d:08:cb:b8:8b:20:3b:d9:38:fd:22:10:99:08:47:4c:d2:79:
         3e:a9:c8:39:46:18:42:60:5e:a6:57:67:22:e3:28:fd:c6:8a:
         4f:0f:29:b7:85:c2:b2:35:c9:0a:c9:c4:31:c5:c5:e1:20:1b:
         10:ea:0b:6b:96:1b:db:e7:92:e9:09:31:f3:0b:1f:6c:02:7e:
         ec:cd:e5:82:1a:12:9d:3e:0d:a8:ca:b3:d7:9d:89:f9:ca:9e:
         ef:44:d7:68:8f:eb:71:ea:c5:6e:04:9b:40:b3:db:1c:18:d7:
         06:9a:37:14:16:04:7f:fc:f7:36:7e:c9:da:56:5b:12:dc:f2:
         03:56:bb:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:20:23 2026 by rpki-client