Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4vudqjw7dHsEsckGb6JjqXtKZp483DgxXQzvRo8mEoBq/0/34352e3138312e35332e302f32342d3332203d3e20323639313732.roa
File:                     34352e3138312e35332e302f32342d3332203d3e20323639313732.roa (raw, json)
Hash identifier:          dqjXR/ptjf/S7HFHuDmfZv8Nk55Ci6oJZUv/4nV07HY=
Subject key identifier:   C2:77:09:7F:A2:1C:04:D1:32:C8:A8:36:7F:B8:5E:F6:DD:08:0E:D7
Certificate issuer:       /CN=A1ACAB9FCA6EF588548AD2B6BDF8A61AC75940EE
Certificate serial:       6CF006C0580BAA955C9184ACEF227205F462A6FB
Authority key identifier: A1:AC:AB:9F:CA:6E:F5:88:54:8A:D2:B6:BD:F8:A6:1A:C7:59:40:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1ACAB9FCA6EF588548AD2B6BDF8A61AC75940EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4vudqjw7dHsEsckGb6JjqXtKZp483DgxXQzvRo8mEoBq/0/34352e3138312e35332e302f32342d3332203d3e20323639313732.roa
Signing time:             Wed 29 Apr 2026 13:05:25 +0000
ROA not before:           Wed 29 Apr 2026 13:00:25 +0000
ROA not after:            Wed 28 Apr 2027 13:05:25 +0000
asID:                     269172
IP address blocks:        45.181.53.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4vudqjw7dHsEsckGb6JjqXtKZp483DgxXQzvRo8mEoBq/0/A1ACAB9FCA6EF588548AD2B6BDF8A61AC75940EE.crl
                          rsync://rpki-repo.registro.br/repo/4vudqjw7dHsEsckGb6JjqXtKZp483DgxXQzvRo8mEoBq/0/A1ACAB9FCA6EF588548AD2B6BDF8A61AC75940EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1ACAB9FCA6EF588548AD2B6BDF8A61AC75940EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:51:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:f0:06:c0:58:0b:aa:95:5c:91:84:ac:ef:22:72:05:f4:62:a6:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1ACAB9FCA6EF588548AD2B6BDF8A61AC75940EE
        Validity
            Not Before: Apr 29 13:00:25 2026 GMT
            Not After : Apr 28 13:05:25 2027 GMT
        Subject: CN=C277097FA21C04D132C8A8367FB85EF6DD080ED7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7e:42:e0:15:35:f1:d0:ae:18:64:a7:33:fd:
                    2c:58:1c:59:d5:3b:db:47:17:c8:95:a3:f8:6d:5d:
                    fa:8a:87:20:39:c1:40:0c:2d:9b:33:77:0b:d9:12:
                    a4:12:ba:f9:82:03:19:cb:75:65:ee:f0:26:c6:b0:
                    c5:11:7f:fe:30:8a:20:62:b1:07:96:96:fa:9f:c6:
                    da:63:21:2e:16:c3:f6:86:45:17:9a:66:b4:c5:32:
                    b2:16:0b:86:54:f9:3e:4d:2a:e9:c1:f7:f5:3f:99:
                    d9:15:87:83:16:93:3a:3e:ee:9f:ce:1e:84:a7:e6:
                    62:ff:1c:42:e5:df:4d:eb:36:2e:1e:c2:42:e9:f3:
                    7d:53:fc:cb:f6:e1:a1:6d:45:c0:5b:e1:7b:79:c8:
                    11:70:0e:3f:39:8d:b4:ba:f6:fa:92:92:56:31:01:
                    8e:49:f2:a7:b8:d1:39:f0:28:b4:e8:e9:56:74:9d:
                    2e:a4:23:9a:6b:c1:09:23:fd:d9:24:0a:83:3a:70:
                    38:55:47:28:86:2a:1c:bf:7b:7b:87:45:fe:3b:ee:
                    80:7e:13:19:36:1b:cf:b2:f7:8e:07:64:46:15:49:
                    5c:b9:11:ff:c6:66:a0:2c:2b:58:8b:d0:f1:59:af:
                    50:7f:75:87:e7:01:b3:a2:d2:6f:cf:37:eb:1d:82:
                    92:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:77:09:7F:A2:1C:04:D1:32:C8:A8:36:7F:B8:5E:F6:DD:08:0E:D7
            X509v3 Authority Key Identifier:
                keyid:A1:AC:AB:9F:CA:6E:F5:88:54:8A:D2:B6:BD:F8:A6:1A:C7:59:40:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4vudqjw7dHsEsckGb6JjqXtKZp483DgxXQzvRo8mEoBq/0/A1ACAB9FCA6EF588548AD2B6BDF8A61AC75940EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1ACAB9FCA6EF588548AD2B6BDF8A61AC75940EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4vudqjw7dHsEsckGb6JjqXtKZp483DgxXQzvRo8mEoBq/0/34352e3138312e35332e302f32342d3332203d3e20323639313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:86:c3:5a:11:79:5f:1a:9e:bc:14:f9:0b:87:94:e3:5b:ce:
         f5:99:06:6d:7c:8a:ad:59:e9:7b:0c:e2:e1:bc:f6:84:37:77:
         c6:30:07:85:73:a6:0d:26:f9:c7:f2:ff:e5:4c:2d:45:17:2d:
         85:69:d9:b6:3c:fb:fa:0b:09:30:f7:38:da:df:45:bd:93:a0:
         46:20:ab:39:e8:a0:ee:f8:5d:34:a7:a5:9e:e0:e9:52:82:15:
         cd:d5:4d:8e:a3:7b:f4:ac:31:d4:aa:97:83:6c:43:2c:ec:13:
         1b:0c:e3:cf:0f:e9:23:f6:9a:ed:8c:dd:67:f9:77:8b:3a:12:
         d5:1d:22:f6:31:8d:87:ec:2d:c7:50:37:7a:96:f7:21:4c:12:
         f3:56:bb:72:96:da:8b:98:dd:b1:70:4f:26:8b:2d:72:b3:81:
         8c:f1:d8:dc:51:9c:77:81:1f:15:bf:d3:9c:7e:11:59:06:51:
         88:bd:ab:3f:df:0f:c8:78:68:dc:f7:31:88:f9:e0:3f:e7:7d:
         c5:68:0c:2c:d7:03:be:ac:27:6c:74:52:d0:ed:91:a8:79:a4:
         08:23:9f:c9:34:4c:51:2f:84:e3:84:fc:18:25:f9:a6:1b:e5:
         9b:d4:bf:ef:4b:b6:14:c4:e3:8b:52:f7:80:07:ba:ac:4e:0b:
         ec:87:47:1d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUbPAGwFgLqpVckYSs7yJyBfRipvswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTFBQ0FCOUZDQTZFRjU4ODU0OEFEMkI2QkRGOEE2MUFD
NzU5NDBFRTAeFw0yNjA0MjkxMzAwMjVaFw0yNzA0MjgxMzA1MjVaMDMxMTAvBgNV
BAMTKEMyNzcwOTdGQTIxQzA0RDEzMkM4QTgzNjdGQjg1RUY2REQwODBFRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOfkLgFTXx0K4YZKcz/SxYHFnV
O9tHF8iVo/htXfqKhyA5wUAMLZszdwvZEqQSuvmCAxnLdWXu8CbGsMURf/4wiiBi
sQeWlvqfxtpjIS4Ww/aGRReaZrTFMrIWC4ZU+T5NKunB9/U/mdkVh4MWkzo+7p/O
HoSn5mL/HELl303rNi4ewkLp831T/Mv24aFtRcBb4Xt5yBFwDj85jbS69vqSklYx
AY5J8qe40TnwKLTo6VZ0nS6kI5prwQkj/dkkCoM6cDhVRyiGKhy/e3uHRf477oB+
Exk2G8+y944HZEYVSVy5Ef/GZqAsK1iL0PFZr1B/dYfnAbOi0m/PN+sdgpKzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUwncJf6IcBNEyyKg2f7he9t0IDtcwHwYDVR0j
BBgwFoAUoayrn8pu9YhUitK2vfimGsdZQO4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHZ1ZHFqdzdkSHNFc2NrR2I2SmpxWHRLWnA0ODNEZ3hYUXp2Um84bUVv
QnEvMC9BMUFDQUI5RkNBNkVGNTg4NTQ4QUQyQjZCREY4QTYxQUM3NTk0MEVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ExQUNBQjlGQ0E2RUY1ODg1
NDhBRDJCNkJERjhBNjFBQzc1OTQwRUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR2dWRxanc3ZEhzRXNja0diNkpqcVh0S1pwNDgzRGd4WFF6dlJvOG1Fb0JxLzAv
MzQzNTJlMzEzODMxMmUzNTMzMmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzIzNjM5
MzEzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALbU1MA0GCSqGSIb3DQEBCwUAA4IBAQChhsNaEXlf
Gp68FPkLh5TjW871mQZtfIqtWel7DOLhvPaEN3fGMAeFc6YNJvnH8v/lTC1FFy2F
adm2PPv6Cwkw9zja30W9k6BGIKs56KDu+F00p6We4OlSghXN1U2Oo3v0rDHUqpeD
bEMs7BMbDOPPD+kj9prtjN1n+XeLOhLVHSL2MY2H7C3HUDd6lvchTBLzVrtyltqL
mN2xcE8miy1ys4GM8djcUZx3gR8Vv9OcfhFZBlGIvas/3w/IeGjc9zGI+eA/533F
aAws1wO+rCdsdFLQ7ZGoeaQII5/JNExRL4TjhPwYJfmmG+Wb1L/vS7YUxOOLUveA
B7qsTgvsh0cd
-----END CERTIFICATE-----
Generated at Wed May 13 18:04:42 2026 by rpki-client