Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/34352e3137382e3231302e302f32342d3234203d3e20323639303437.roa
File:                     34352e3137382e3231302e302f32342d3234203d3e20323639303437.roa (raw, json)
Hash identifier:          9AIxVHvwoq/2Yfa19bmbvrRpWZ2T5QuFEv+OQ0Jkiwg=
Subject key identifier:   14:C3:EC:BF:C1:56:6C:46:8B:DB:82:24:4D:9A:FA:C3:81:87:5A:F4
Certificate issuer:       /CN=382BF632C249A54C0BE22F06785027D9D07AC720
Certificate serial:       62D38D2FE21CA67248D3F39E5E25DE397343DCFA
Authority key identifier: 38:2B:F6:32:C2:49:A5:4C:0B:E2:2F:06:78:50:27:D9:D0:7A:C7:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/382BF632C249A54C0BE22F06785027D9D07AC720.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/34352e3137382e3231302e302f32342d3234203d3e20323639303437.roa
Signing time:             Wed 13 May 2026 14:49:37 +0000
ROA not before:           Wed 13 May 2026 14:44:37 +0000
ROA not after:            Wed 12 May 2027 14:49:37 +0000
asID:                     269047
IP address blocks:        45.178.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/382BF632C249A54C0BE22F06785027D9D07AC720.crl
                          rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/382BF632C249A54C0BE22F06785027D9D07AC720.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/382BF632C249A54C0BE22F06785027D9D07AC720.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 16:58:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d3:8d:2f:e2:1c:a6:72:48:d3:f3:9e:5e:25:de:39:73:43:dc:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=382BF632C249A54C0BE22F06785027D9D07AC720
        Validity
            Not Before: May 13 14:44:37 2026 GMT
            Not After : May 12 14:49:37 2027 GMT
        Subject: CN=14C3ECBFC1566C468BDB82244D9AFAC381875AF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:98:15:e1:80:ed:96:38:1f:15:00:9c:d7:c1:
                    24:92:4d:1d:01:24:29:ee:af:54:3c:f4:fb:8b:bc:
                    c4:a8:0e:03:67:2d:30:de:51:0a:a9:7a:4b:1a:b1:
                    50:a8:14:b8:f0:bc:fd:83:e2:07:8a:06:7b:ec:0e:
                    8b:29:6c:99:26:ed:e6:4e:ae:0d:fe:af:f7:4a:16:
                    a3:3b:cb:3c:24:a7:e9:ae:50:98:c0:16:a0:b6:9a:
                    b7:1f:28:61:e1:51:66:4d:09:3f:8b:1d:5c:0f:82:
                    30:87:b4:b2:f3:90:62:12:e1:09:93:c8:f4:52:91:
                    f9:ae:64:aa:b4:83:a6:21:d4:3e:d1:15:a3:33:17:
                    21:c4:81:a3:d5:14:00:8c:d3:79:00:70:d2:d2:97:
                    3a:f0:e2:56:e5:bd:be:25:54:b5:cb:9c:e1:a5:9c:
                    29:d2:21:14:4b:4f:41:bc:55:76:0d:8a:99:17:2f:
                    55:af:bd:fe:21:23:a9:51:ff:b8:39:a1:ed:fc:5f:
                    a6:0d:42:86:50:7f:2e:75:e3:8d:31:83:31:8b:57:
                    ca:4d:9a:9f:2b:9f:de:40:d5:fe:07:6f:15:79:a9:
                    34:d1:df:d8:d6:8b:ca:5c:b8:3c:44:5b:fe:29:3a:
                    5a:44:eb:05:e3:9e:f1:21:bf:17:a9:5a:28:7b:71:
                    6a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C3:EC:BF:C1:56:6C:46:8B:DB:82:24:4D:9A:FA:C3:81:87:5A:F4
            X509v3 Authority Key Identifier:
                keyid:38:2B:F6:32:C2:49:A5:4C:0B:E2:2F:06:78:50:27:D9:D0:7A:C7:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/382BF632C249A54C0BE22F06785027D9D07AC720.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/382BF632C249A54C0BE22F06785027D9D07AC720.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/34352e3137382e3231302e302f32342d3234203d3e20323639303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:b8:87:0e:c7:2a:cf:f2:4d:c0:60:c1:12:b0:e6:6e:c2:3e:
         95:87:47:16:98:0d:10:a3:1b:7c:fd:70:96:78:6f:d0:a8:d7:
         55:d3:5e:2a:0d:8b:30:d8:fd:f0:5a:d9:e7:92:75:30:16:a8:
         d7:13:00:1f:a5:1d:cf:3d:0b:ca:4b:d7:8f:2e:93:8c:ef:62:
         8b:ee:69:2c:c9:9d:8e:09:f7:b0:0c:2d:e1:ca:94:ad:6d:01:
         9a:a8:62:14:0b:d6:7e:37:df:ca:06:22:ea:42:80:6c:0d:0d:
         8a:25:e3:e7:24:14:d2:50:df:b7:08:9b:ca:eb:56:37:fe:c9:
         65:b4:45:0c:bc:c7:17:bb:47:9b:5e:ba:b1:a8:42:2d:e0:72:
         d6:26:77:23:9e:11:67:35:62:9e:0f:f5:80:21:5b:fe:ae:ab:
         c5:bf:64:a4:f4:c3:64:26:19:e7:95:f8:18:55:97:f6:51:49:
         4d:c7:91:93:c1:60:ce:f0:cd:52:04:b1:30:06:a7:b6:1b:d4:
         eb:ba:0e:e3:d9:a6:5f:72:99:ec:4e:44:e6:c3:ad:04:19:50:
         9d:8c:a0:e5:fd:97:e5:6b:d2:4e:ce:13:9a:38:e7:fa:a2:46:
         31:40:c1:83:7d:cb:dc:d0:76:05:36:c0:47:08:31:31:08:62:
         1a:78:81:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:26:21 2026 by rpki-client