Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/34352e3138322e35322e302f32342d3234203d3e20323639323835.roa
File:                     34352e3138322e35322e302f32342d3234203d3e20323639323835.roa (raw, json)
Hash identifier:          5xcuYjxsyYIsQe06yVZ/OpqCQMoiYJV6WQZpxD7kp7A=
Subject key identifier:   F7:5A:FD:9B:18:2A:51:70:D1:47:B7:60:14:43:D8:94:18:EE:8F:DC
Certificate issuer:       /CN=3D4867F11A1D652682FA95ED911B20D81139853D
Certificate serial:       7AD6D9DBD15E4FB5963966F9DF330EA4C08374B6
Authority key identifier: 3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/34352e3138322e35322e302f32342d3234203d3e20323639323835.roa
Signing time:             Wed 01 Jul 2026 17:02:44 +0000
ROA not before:           Wed 01 Jul 2026 16:57:44 +0000
ROA not after:            Wed 30 Jun 2027 17:02:44 +0000
asID:                     269285
IP address blocks:        45.182.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl
                          rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 07:05:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:d6:d9:db:d1:5e:4f:b5:96:39:66:f9:df:33:0e:a4:c0:83:74:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D4867F11A1D652682FA95ED911B20D81139853D
        Validity
            Not Before: Jul  1 16:57:44 2026 GMT
            Not After : Jun 30 17:02:44 2027 GMT
        Subject: CN=F75AFD9B182A5170D147B7601443D89418EE8FDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:56:3c:16:0c:42:31:fe:b2:55:f9:f0:2f:45:
                    e5:40:12:f0:dd:63:23:ed:9e:0a:65:3b:8d:e1:4a:
                    ea:64:df:8e:45:38:98:d8:3f:3b:5f:37:b8:17:1e:
                    35:6c:58:48:fc:33:ea:e1:ee:2a:34:ac:f1:fb:d7:
                    56:b0:20:0c:94:a0:b6:d0:26:cd:03:d4:9a:d8:06:
                    c7:f6:b9:9e:fd:2c:02:ea:7d:6e:b4:8a:b8:d5:24:
                    e4:b8:d9:ab:40:cb:5a:26:d7:5c:1b:15:9a:16:1c:
                    68:8d:d3:82:87:2f:8c:f3:b6:d5:d0:5a:d7:ca:6a:
                    c1:44:d8:d7:77:3c:fd:a9:16:f8:64:d5:ed:7e:27:
                    80:89:af:52:03:15:e5:8a:eb:76:b5:99:59:82:62:
                    d7:89:23:93:0f:d0:a9:c2:99:a4:ab:81:9b:40:13:
                    b3:42:08:9d:07:38:78:a3:7c:3d:ff:8b:d6:7b:fc:
                    fc:b9:29:f4:68:78:1f:07:ce:c4:8c:4f:da:8f:c8:
                    4a:a6:01:a0:84:46:82:f9:af:f2:a1:00:5f:ae:36:
                    5a:91:6f:e6:29:5e:6c:bf:19:c4:c2:23:5a:2d:68:
                    36:5d:ca:a0:3f:88:19:66:58:6a:f7:15:17:24:71:
                    b0:ff:70:72:96:51:e2:25:23:17:4c:07:9e:1c:25:
                    f4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:5A:FD:9B:18:2A:51:70:D1:47:B7:60:14:43:D8:94:18:EE:8F:DC
            X509v3 Authority Key Identifier:
                keyid:3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/34352e3138322e35322e302f32342d3234203d3e20323639323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:a0:f6:2d:bf:9f:f5:51:1f:73:af:e4:9f:cb:c9:49:7e:52:
         19:1f:1b:a2:00:be:82:83:89:e5:48:9c:07:84:61:59:4a:7b:
         e8:82:9e:1d:90:c9:5e:93:4a:20:ec:14:bc:ae:a7:72:8c:03:
         b6:56:db:a3:12:d6:dc:bf:3d:2b:1a:22:53:86:5d:22:97:77:
         ef:47:5a:e3:fc:8a:b1:ac:ae:a3:ac:36:94:b9:f6:48:9b:eb:
         c7:18:ba:87:bf:23:32:2b:33:c2:9e:a4:22:64:a7:df:64:1f:
         13:96:d8:c5:4c:1a:fb:fd:1d:da:6a:20:cd:38:b6:a7:18:a2:
         1c:14:e7:93:38:4b:32:f6:64:0d:0c:9b:f2:65:f7:af:72:7a:
         a8:3f:33:ab:59:b0:4b:85:76:23:07:f0:b8:b1:63:2a:70:8a:
         2a:4f:ff:e4:24:da:48:32:1c:df:3a:53:6f:07:fe:a9:bb:ab:
         d9:96:29:db:05:f7:3b:14:1d:3d:ed:ed:39:eb:8f:3b:5e:02:
         2d:3d:23:ac:8f:93:e8:14:e0:d1:a5:d1:57:b4:9c:5b:5b:f2:
         e6:36:4d:3a:5d:52:c0:f5:ee:f0:8b:43:32:42:8b:76:a1:0e:
         92:cf:9b:62:0a:8f:53:54:81:2f:3f:54:99:4d:b4:1a:f5:ad:
         d3:76:eb:c8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUetbZ29FeT7WWOWb53zMOpMCDdLYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q0ODY3RjExQTFENjUyNjgyRkE5NUVEOTExQjIwRDgx
MTM5ODUzRDAeFw0yNjA3MDExNjU3NDRaFw0yNzA2MzAxNzAyNDRaMDMxMTAvBgNV
BAMTKEY3NUFGRDlCMTgyQTUxNzBEMTQ3Qjc2MDE0NDNEODk0MThFRThGREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCBVjwWDEIx/rJV+fAvReVAEvDd
YyPtngplO43hSupk345FOJjYPztfN7gXHjVsWEj8M+rh7io0rPH711awIAyUoLbQ
Js0D1JrYBsf2uZ79LALqfW60irjVJOS42atAy1om11wbFZoWHGiN04KHL4zzttXQ
WtfKasFE2Nd3PP2pFvhk1e1+J4CJr1IDFeWK63a1mVmCYteJI5MP0KnCmaSrgZtA
E7NCCJ0HOHijfD3/i9Z7/Py5KfRoeB8HzsSMT9qPyEqmAaCERoL5r/KhAF+uNlqR
b+YpXmy/GcTCI1otaDZdyqA/iBlmWGr3FRckcbD/cHKWUeIlIxdMB54cJfSZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU91r9mxgqUXDRR7dgFEPYlBjuj9wwHwYDVR0j
BBgwFoAUPUhn8RodZSaC+pXtkRsg2BE5hT0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTJuZ1UyUGtlVFJoZEFqQnpwVTRlaFVCcGV5UHJNQnF0ekdnYXdwbXE3
aWQvMC8zRDQ4NjdGMTFBMUQ2NTI2ODJGQTk1RUQ5MTFCMjBEODExMzk4NTNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNENDg2N0YxMUExRDY1MjY4
MkZBOTVFRDkxMUIyMEQ4MTEzOTg1M0QuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzUybmdVMlBrZVRSaGRBakJ6cFU0ZWhVQnBleVByTUJxdHpHZ2F3cG1xN2lkLzAv
MzQzNTJlMzEzODMyMmUzNTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzIzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALbY0MA0GCSqGSIb3DQEBCwUAA4IBAQB0oPYtv5/1
UR9zr+Sfy8lJflIZHxuiAL6Cg4nlSJwHhGFZSnvogp4dkMlek0og7BS8rqdyjAO2
VtujEtbcvz0rGiJThl0il3fvR1rj/IqxrK6jrDaUufZIm+vHGLqHvyMyKzPCnqQi
ZKffZB8TltjFTBr7/R3aaiDNOLanGKIcFOeTOEsy9mQNDJvyZfevcnqoPzOrWbBL
hXYjB/C4sWMqcIoqT//kJNpIMhzfOlNvB/6pu6vZlinbBfc7FB097e056487XgIt
PSOsj5PoFODRpdFXtJxbW/LmNk06XVLA9e7wi0MyQot2oQ6Sz5tiCo9TVIEvP1SZ
TbQa9a3TduvI
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:37:07 2026 by rpki-client