Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/34352e3233322e3132352e302f32342d3234203d3e20323637323634.roa
File:                     34352e3233322e3132352e302f32342d3234203d3e20323637323634.roa (raw, json)
Hash identifier:          9u9Cbtz4sYEAqAhR5PE3N3fT5Z9zkAjOnEcHKhycQyE=
Subject key identifier:   C5:E9:98:44:59:37:73:A1:E3:2E:84:D8:AF:91:41:3B:C0:B7:DA:BB
Certificate issuer:       /CN=E91F3A2A36510E6BB1921A3712B9F990AB1207A6
Certificate serial:       6D91CEAECFE11FE99875E2065BC8F060723BD282
Authority key identifier: E9:1F:3A:2A:36:51:0E:6B:B1:92:1A:37:12:B9:F9:90:AB:12:07:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E91F3A2A36510E6BB1921A3712B9F990AB1207A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/34352e3233322e3132352e302f32342d3234203d3e20323637323634.roa
Signing time:             Thu 07 May 2026 13:14:05 +0000
ROA not before:           Thu 07 May 2026 13:09:05 +0000
ROA not after:            Thu 06 May 2027 13:14:05 +0000
asID:                     267264
IP address blocks:        45.232.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/E91F3A2A36510E6BB1921A3712B9F990AB1207A6.crl
                          rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/E91F3A2A36510E6BB1921A3712B9F990AB1207A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E91F3A2A36510E6BB1921A3712B9F990AB1207A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 19:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:91:ce:ae:cf:e1:1f:e9:98:75:e2:06:5b:c8:f0:60:72:3b:d2:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E91F3A2A36510E6BB1921A3712B9F990AB1207A6
        Validity
            Not Before: May  7 13:09:05 2026 GMT
            Not After : May  6 13:14:05 2027 GMT
        Subject: CN=C5E99844593773A1E32E84D8AF91413BC0B7DABB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9c:8f:46:f1:ce:f8:7a:78:da:b7:16:f7:26:
                    90:59:d0:1d:0c:ca:b4:66:dc:0d:48:89:53:00:97:
                    ce:c3:a1:9f:51:d6:94:a7:11:9f:65:ca:96:ed:c0:
                    7d:cb:5e:bb:a4:6e:9d:50:e3:a4:16:1b:45:1b:78:
                    a6:cc:96:a0:0b:64:e4:d3:f3:3f:ef:cf:a4:a7:5c:
                    09:d3:d4:e0:14:2f:71:ac:5b:29:00:e0:74:e8:dc:
                    e1:92:de:cc:95:72:5f:a0:99:a1:e3:7d:55:4e:b3:
                    8d:95:05:7a:a1:87:3e:91:8e:87:7b:e9:93:94:9a:
                    83:ff:f4:c1:68:5a:6e:2a:4f:d9:f5:41:fb:40:30:
                    ec:41:c1:ad:53:14:94:c1:97:be:8c:4b:13:57:1b:
                    b7:be:86:87:6c:cf:20:c1:80:03:b8:71:38:ba:28:
                    f8:53:28:59:fa:d0:42:45:f9:d4:0b:7d:32:e5:42:
                    00:ce:e7:aa:f2:70:64:c5:56:e8:0d:b9:3d:1a:95:
                    46:a2:95:d6:d1:da:c4:9d:4b:ab:3d:aa:27:9c:3f:
                    81:f1:57:48:eb:99:d4:e9:a8:c9:44:13:c6:25:b4:
                    cb:c8:ad:be:21:e0:5a:d2:8f:48:3d:d1:83:2d:72:
                    89:83:05:70:8b:28:81:23:70:46:94:88:3d:bb:bb:
                    ab:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E9:98:44:59:37:73:A1:E3:2E:84:D8:AF:91:41:3B:C0:B7:DA:BB
            X509v3 Authority Key Identifier:
                keyid:E9:1F:3A:2A:36:51:0E:6B:B1:92:1A:37:12:B9:F9:90:AB:12:07:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/E91F3A2A36510E6BB1921A3712B9F990AB1207A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E91F3A2A36510E6BB1921A3712B9F990AB1207A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/34352e3233322e3132352e302f32342d3234203d3e20323637323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:96:ff:78:2d:11:dd:83:8a:ca:00:da:ae:cd:5f:2d:e9:aa:
         f6:85:86:9f:0e:20:a6:6d:5c:df:ae:47:37:25:d9:a4:70:34:
         7a:33:f0:7b:0b:d1:07:7b:57:67:a2:6d:3f:a3:f4:a5:43:be:
         84:b0:98:6d:5f:41:99:de:75:26:88:01:ba:e3:a7:fa:c2:9d:
         34:e0:84:7e:60:e7:93:6a:26:ef:26:65:da:fa:64:05:73:9a:
         fb:c4:15:35:c9:40:fe:d7:e8:2b:15:a6:e1:ad:45:2c:54:a0:
         7b:4b:22:de:45:45:c7:9f:e9:1a:20:ea:e6:4f:9e:69:99:65:
         ab:80:d4:da:85:93:4f:11:82:e8:5b:ab:39:03:9c:3d:72:a7:
         ad:ac:6f:7f:cd:a4:9d:fc:b8:fc:56:48:c7:75:92:88:b3:7a:
         f7:b9:83:a4:11:2e:8d:a3:a2:23:ed:aa:1e:1d:31:47:23:9f:
         d4:ea:f7:0f:f2:93:4c:02:99:dd:b7:d0:0d:13:c1:87:56:69:
         4d:90:60:b3:e2:22:1f:a5:80:e4:41:77:62:e1:69:cf:94:74:
         4c:d6:06:c8:37:24:53:ad:25:2b:ba:d7:f4:50:e7:89:f0:fa:
         22:2a:2b:e5:28:76:3a:05:35:54:a0:b3:16:78:5e:c2:85:c3:
         06:12:a8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:17:37 2026 by rpki-client