Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4t5VbjAc5GmpEcjbpgvdyXevm2Ai5nbh6F8YSPWSTtSe/0/34352e3137352e3130342e302f32322d3332203d3e20323638393030.roa
File:                     34352e3137352e3130342e302f32322d3332203d3e20323638393030.roa (raw, json)
Hash identifier:          J3eg+6i1WbcFl6p2AwTXb3T1hDIBP7QSCRiiVdZbtnA=
Subject key identifier:   12:F4:15:D8:A9:68:AA:98:C8:73:E4:7B:BC:5F:6C:70:D2:C6:93:EF
Certificate issuer:       /CN=A64D92728F9E62F16E233EB8AE3F0B776551119E
Certificate serial:       6921BA937E5A6BA02E33E06A05EFA0A53D8301BF
Authority key identifier: A6:4D:92:72:8F:9E:62:F1:6E:23:3E:B8:AE:3F:0B:77:65:51:11:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A64D92728F9E62F16E233EB8AE3F0B776551119E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4t5VbjAc5GmpEcjbpgvdyXevm2Ai5nbh6F8YSPWSTtSe/0/34352e3137352e3130342e302f32322d3332203d3e20323638393030.roa
Signing time:             Thu 30 Apr 2026 07:52:24 +0000
ROA not before:           Thu 30 Apr 2026 07:47:24 +0000
ROA not after:            Thu 29 Apr 2027 07:52:24 +0000
asID:                     268900
IP address blocks:        45.175.104.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4t5VbjAc5GmpEcjbpgvdyXevm2Ai5nbh6F8YSPWSTtSe/0/A64D92728F9E62F16E233EB8AE3F0B776551119E.crl
                          rsync://rpki-repo.registro.br/repo/4t5VbjAc5GmpEcjbpgvdyXevm2Ai5nbh6F8YSPWSTtSe/0/A64D92728F9E62F16E233EB8AE3F0B776551119E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A64D92728F9E62F16E233EB8AE3F0B776551119E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 00:31:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:21:ba:93:7e:5a:6b:a0:2e:33:e0:6a:05:ef:a0:a5:3d:83:01:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A64D92728F9E62F16E233EB8AE3F0B776551119E
        Validity
            Not Before: Apr 30 07:47:24 2026 GMT
            Not After : Apr 29 07:52:24 2027 GMT
        Subject: CN=12F415D8A968AA98C873E47BBC5F6C70D2C693EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:17:40:2b:b9:09:c7:3f:02:59:db:11:3d:bc:
                    52:b3:4e:12:21:d0:a8:9e:ea:3b:3a:d2:ce:98:96:
                    1b:9a:ef:62:76:a1:25:72:dc:00:3d:24:5f:b1:8e:
                    1a:4d:47:cc:3b:5a:f3:01:ba:50:4d:cc:b7:b5:0a:
                    74:b3:50:88:6a:eb:8e:dd:f3:d8:64:7c:a4:d1:d9:
                    98:75:dc:36:fe:08:cd:0c:7f:75:e9:e2:5c:ae:fa:
                    b6:94:a2:21:e0:1a:0e:fb:6d:fd:21:fe:d8:f0:f3:
                    ea:b5:c9:ab:3f:07:0d:0e:14:41:02:ad:62:4f:25:
                    fe:ee:c2:f6:0c:3a:bc:7d:93:a0:25:46:a1:a1:5a:
                    46:20:c3:f7:1e:3e:34:ed:21:23:5c:2d:30:eb:cb:
                    fd:39:e2:bd:d4:bc:a4:5b:ad:56:d2:5e:22:38:10:
                    f3:f9:98:8a:82:10:81:9b:50:ed:ab:09:f4:5d:3d:
                    7b:b0:2e:7c:07:7d:c9:91:0b:c3:29:8f:42:d8:40:
                    90:ff:03:71:ca:11:fc:8b:74:1d:6e:3f:7b:f9:cb:
                    a2:24:ef:10:25:f8:ad:1f:31:4d:dd:47:4d:07:3a:
                    67:e7:90:1d:85:53:9d:d9:54:1a:eb:25:3c:0e:15:
                    87:e4:2c:bb:8a:56:c6:e2:93:7c:9b:ab:74:5e:1f:
                    cd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F4:15:D8:A9:68:AA:98:C8:73:E4:7B:BC:5F:6C:70:D2:C6:93:EF
            X509v3 Authority Key Identifier:
                keyid:A6:4D:92:72:8F:9E:62:F1:6E:23:3E:B8:AE:3F:0B:77:65:51:11:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4t5VbjAc5GmpEcjbpgvdyXevm2Ai5nbh6F8YSPWSTtSe/0/A64D92728F9E62F16E233EB8AE3F0B776551119E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A64D92728F9E62F16E233EB8AE3F0B776551119E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4t5VbjAc5GmpEcjbpgvdyXevm2Ai5nbh6F8YSPWSTtSe/0/34352e3137352e3130342e302f32322d3332203d3e20323638393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:88:0f:99:63:0b:db:35:b6:8b:77:32:a3:10:39:15:d6:9b:
         8e:1d:a5:74:af:9e:84:de:39:45:81:e7:23:2e:81:1f:2f:7c:
         f3:b2:52:b1:91:9c:8e:a3:b5:78:d0:88:54:2e:0b:c6:1c:3b:
         9d:5e:27:54:b7:8b:74:76:90:d2:01:48:66:f4:83:66:83:8c:
         c7:ff:bc:bf:0f:e4:73:1e:82:3e:fe:81:13:b1:a5:5f:34:d6:
         61:44:fc:2f:4f:99:0b:54:1e:8e:15:78:89:9d:8e:58:88:d5:
         bd:62:e7:59:17:1d:8a:af:30:44:2d:5d:14:bd:d2:99:49:56:
         e2:e2:c2:63:b9:4f:6d:3f:1c:33:19:86:8a:b1:11:95:9e:2c:
         0c:5a:62:c6:e7:5d:db:69:d8:0e:9e:fc:08:4d:db:e7:51:15:
         45:1b:47:cb:e9:07:a3:6f:c2:52:8a:9c:57:73:21:d4:22:12:
         c7:7f:06:73:e2:3e:0f:f3:23:50:86:73:d5:13:f0:66:eb:f3:
         5f:4f:62:9b:ff:25:f1:4b:46:eb:bd:63:70:fe:dc:8b:bc:c9:
         dd:72:ca:ba:27:68:37:89:7a:ab:22:c5:70:4e:74:27:df:9d:
         31:7f:d8:0a:e6:dc:f8:a3:c5:3b:73:b5:c8:15:20:10:a0:c3:
         46:47:bd:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:34:01 2026 by rpki-client