Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/34352e3136342e382e302f32322d3332203d3e20323638353835.roa
File:                     34352e3136342e382e302f32322d3332203d3e20323638353835.roa (raw, json)
Hash identifier:          Q0q+g3QJPgZEALgR2GMq1+Ou/uErvAOSBBOEOZ41hlg=
Subject key identifier:   93:15:AD:64:B1:57:4C:41:C1:A6:D8:4E:01:FA:AF:82:54:C2:97:82
Certificate issuer:       /CN=ACDD408319E526575F0E327DBFC28EC9CECDF412
Certificate serial:       3E7A928F5B497C9BCB342FC3C7D959A3627D39C6
Authority key identifier: AC:DD:40:83:19:E5:26:57:5F:0E:32:7D:BF:C2:8E:C9:CE:CD:F4:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/34352e3136342e382e302f32322d3332203d3e20323638353835.roa
Signing time:             Tue 07 Jul 2026 14:20:49 +0000
ROA not before:           Tue 07 Jul 2026 14:15:49 +0000
ROA not after:            Tue 06 Jul 2027 14:20:49 +0000
asID:                     268585
IP address blocks:        45.164.8.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.crl
                          rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 23:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:7a:92:8f:5b:49:7c:9b:cb:34:2f:c3:c7:d9:59:a3:62:7d:39:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACDD408319E526575F0E327DBFC28EC9CECDF412
        Validity
            Not Before: Jul  7 14:15:49 2026 GMT
            Not After : Jul  6 14:20:49 2027 GMT
        Subject: CN=9315AD64B1574C41C1A6D84E01FAAF8254C29782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e8:6c:57:f0:30:d4:7c:04:64:6a:8c:2e:3f:
                    a9:11:bb:53:f2:f4:00:bc:d6:54:30:7d:a2:e8:24:
                    80:0d:3b:1d:b7:e3:58:80:8f:09:27:84:33:90:5d:
                    6c:82:87:7e:1f:71:bd:0c:92:c5:2e:cf:14:65:86:
                    b5:44:ec:0f:0d:55:c9:eb:0b:5c:ca:5b:1c:45:f8:
                    56:70:68:8f:26:be:63:46:b5:3b:3f:55:0a:d1:b1:
                    e3:92:2a:b7:9d:c7:aa:0d:16:30:14:0f:ea:df:cb:
                    d1:e6:8c:c9:61:f0:62:a2:57:97:e7:cf:58:d7:50:
                    79:2f:a3:5c:78:93:d5:7f:83:66:a6:d0:ce:fc:78:
                    ce:c2:40:15:4a:2b:50:84:d2:96:57:21:6d:6b:2d:
                    19:0a:92:b6:1c:1f:f4:e2:9d:12:a9:78:18:51:6f:
                    ad:38:5e:ac:d8:cb:35:15:0f:bf:8e:d5:a6:b3:1f:
                    aa:0b:67:40:97:47:ac:af:b9:c9:1b:93:fb:78:7c:
                    db:e4:1c:e3:07:c0:f1:e9:4c:ad:a7:4f:2f:21:06:
                    a5:ff:79:c2:df:84:52:36:6a:42:d6:d0:4c:c9:f4:
                    37:78:98:fb:f5:ed:df:67:3b:70:57:10:9d:fa:6b:
                    62:0a:2a:bd:fe:e3:1f:ef:74:d0:22:5c:fd:27:91:
                    ca:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:15:AD:64:B1:57:4C:41:C1:A6:D8:4E:01:FA:AF:82:54:C2:97:82
            X509v3 Authority Key Identifier:
                keyid:AC:DD:40:83:19:E5:26:57:5F:0E:32:7D:BF:C2:8E:C9:CE:CD:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/34352e3136342e382e302f32322d3332203d3e20323638353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:d0:9d:b1:fd:6a:4a:fe:31:39:2e:e7:1c:2a:a7:9f:15:a3:
         27:50:30:52:b9:b0:68:6b:61:0a:23:e6:41:65:e9:6c:df:99:
         7f:73:c9:ac:fb:a5:21:f5:a0:4b:cb:37:b7:0e:99:6b:c7:a9:
         47:10:01:6f:df:40:bc:72:b0:ec:d1:1b:fd:5e:1b:c4:41:39:
         bb:71:76:1b:32:1b:ee:0c:ef:c9:e1:10:09:e2:91:cf:63:52:
         6a:ca:4f:7f:04:5c:79:8a:d6:7b:66:17:59:4b:e6:ed:ce:72:
         0f:a5:21:65:8d:3d:6c:7f:da:96:6c:40:e1:10:23:cb:e7:0d:
         89:47:21:66:99:3f:21:78:fd:d8:6d:26:08:3a:00:12:26:ab:
         16:18:7d:5f:d5:2f:16:c1:dc:9c:b1:cf:95:6e:82:32:21:05:
         18:09:61:0a:35:1d:d6:01:c6:fa:08:1f:4e:0b:34:d4:be:3e:
         d1:0a:6c:1e:75:94:0f:2f:26:fc:c0:de:19:aa:4c:8f:4b:a2:
         d8:df:1b:ba:a8:3f:27:7d:f9:20:1d:ae:0f:b8:c6:f1:63:98:
         d6:61:39:d7:c0:25:10:42:8b:3c:29:ce:f4:bd:73:2e:24:8e:
         74:56:1c:ef:9e:87:87:6b:30:cf:b0:a3:66:03:68:cb:95:df:
         15:39:61:2d
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUPnqSj1tJfJvLNC/Dx9lZo2J9OcYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUNERDQwODMxOUU1MjY1NzVGMEUzMjdEQkZDMjhFQzlD
RUNERjQxMjAeFw0yNjA3MDcxNDE1NDlaFw0yNzA3MDYxNDIwNDlaMDMxMTAvBgNV
BAMTKDkzMTVBRDY0QjE1NzRDNDFDMUE2RDg0RTAxRkFBRjgyNTRDMjk3ODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD6GxX8DDUfARkaowuP6kRu1Py
9AC81lQwfaLoJIANOx2341iAjwknhDOQXWyCh34fcb0MksUuzxRlhrVE7A8NVcnr
C1zKWxxF+FZwaI8mvmNGtTs/VQrRseOSKredx6oNFjAUD+rfy9HmjMlh8GKiV5fn
z1jXUHkvo1x4k9V/g2am0M78eM7CQBVKK1CE0pZXIW1rLRkKkrYcH/TinRKpeBhR
b604XqzYyzUVD7+O1aazH6oLZ0CXR6yvuckbk/t4fNvkHOMHwPHpTK2nTy8hBqX/
ecLfhFI2akLW0EzJ9Dd4mPv17d9nO3BXEJ36a2IKKr3+4x/vdNAiXP0nkcrjAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUkxWtZLFXTEHBpthOAfqvglTCl4IwHwYDVR0j
BBgwFoAUrN1AgxnlJldfDjJ9v8KOyc7N9BIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkRlRGNhNlMzZXhYUlZIVmJVdHZYUmp2Mk5EUnVTTGRjclNBOVFUcWZp
NHYvMS9BQ0RENDA4MzE5RTUyNjU3NUYwRTMyN0RCRkMyOEVDOUNFQ0RGNDEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDREQ0MDgzMTlFNTI2NTc1
RjBFMzI3REJGQzI4RUM5Q0VDREY0MTIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJEZURjYTZTM2V4WFJWSFZiVXR2WFJqdjJORFJ1U0xkY3JTQTlRVHFmaTR2LzEv
MzQzNTJlMzEzNjM0MmUzODJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMyMzYzODM1
MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi2kCDANBgkqhkiG9w0BAQsFAAOCAQEAf9Cdsf1qSv4x
OS7nHCqnnxWjJ1AwUrmwaGthCiPmQWXpbN+Zf3PJrPulIfWgS8s3tw6Za8epRxAB
b99AvHKw7NEb/V4bxEE5u3F2GzIb7gzvyeEQCeKRz2NSaspPfwRceYrWe2YXWUvm
7c5yD6UhZY09bH/almxA4RAjy+cNiUchZpk/IXj92G0mCDoAEiarFhh9X9UvFsHc
nLHPlW6CMiEFGAlhCjUd1gHG+ggfTgs01L4+0QpsHnWUDy8m/MDeGapMj0ui2N8b
uqg/J335IB2uD7jG8WOY1mE518AlEEKLPCnO9L1zLiSOdFYc756Hh2swz7CjZgNo
y5XfFTlhLQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:32:09 2026 by rpki-client