Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233382e302f32342d3234203d3e20323639353935.roa
File:                     34352e3138382e3233382e302f32342d3234203d3e20323639353935.roa (raw, json)
Hash identifier:          P+3Y+C/b+Emeo/PzO4I5kaeEUCg7d4XR0qtT9+FE+dA=
Subject key identifier:   F9:79:DC:02:89:96:F5:76:0D:C3:58:DC:88:59:4A:28:42:45:BE:FA
Certificate issuer:       /CN=AD81180ED014F2365CDAF7461678A5A8D2038CFA
Certificate serial:       38216B8FB894BF9A1588C5C022A09E54108DA750
Authority key identifier: AD:81:18:0E:D0:14:F2:36:5C:DA:F7:46:16:78:A5:A8:D2:03:8C:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD81180ED014F2365CDAF7461678A5A8D2038CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233382e302f32342d3234203d3e20323639353935.roa
Signing time:             Wed 22 Apr 2026 20:42:55 +0000
ROA not before:           Wed 22 Apr 2026 20:37:55 +0000
ROA not after:            Wed 21 Apr 2027 20:42:55 +0000
asID:                     269595
IP address blocks:        45.188.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/AD81180ED014F2365CDAF7461678A5A8D2038CFA.crl
                          rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/AD81180ED014F2365CDAF7461678A5A8D2038CFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD81180ED014F2365CDAF7461678A5A8D2038CFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 01:54:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:21:6b:8f:b8:94:bf:9a:15:88:c5:c0:22:a0:9e:54:10:8d:a7:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD81180ED014F2365CDAF7461678A5A8D2038CFA
        Validity
            Not Before: Apr 22 20:37:55 2026 GMT
            Not After : Apr 21 20:42:55 2027 GMT
        Subject: CN=F979DC028996F5760DC358DC88594A284245BEFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ef:d2:95:28:f1:bc:f6:92:d9:b3:1d:cb:53:
                    fb:9c:4c:e7:8e:e6:1c:0f:d5:14:ab:15:81:ba:a1:
                    08:33:40:9e:82:2b:57:eb:c2:3b:af:9c:8c:3f:4f:
                    b8:bb:9c:b1:c0:8e:d5:c0:c9:43:50:a8:f2:4e:c3:
                    4a:60:f8:0d:78:37:12:6f:2d:96:e9:52:df:5b:5a:
                    2c:a0:16:92:4b:ef:95:d9:53:e8:ba:6c:1d:7c:3e:
                    cc:11:7a:67:e2:14:b7:9c:5c:68:2d:42:97:60:f4:
                    2a:18:5a:d2:fd:40:f5:5b:9f:42:db:0e:73:15:6c:
                    a3:01:32:53:c7:c5:d6:a9:06:d0:91:e3:be:0c:1a:
                    ca:6b:50:41:9a:bb:b2:33:58:3f:75:1c:e7:3c:82:
                    0c:03:ab:d4:39:98:2e:2d:3b:c6:6a:8d:d7:23:2e:
                    eb:25:66:ae:e5:32:2e:fa:0f:ef:65:8e:db:88:f0:
                    7e:69:c6:c3:e7:e9:16:c1:a6:32:cd:34:7c:30:d0:
                    e7:04:b9:72:b0:1a:11:ca:fa:00:30:3a:cf:f3:81:
                    55:86:5b:6d:2a:4a:c5:33:30:7b:6e:a7:38:0f:cb:
                    08:d4:39:39:5c:12:05:d5:75:8b:70:11:05:36:56:
                    2c:b1:5f:72:68:d4:be:93:03:c1:ab:86:06:d6:b0:
                    c3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:79:DC:02:89:96:F5:76:0D:C3:58:DC:88:59:4A:28:42:45:BE:FA
            X509v3 Authority Key Identifier:
                keyid:AD:81:18:0E:D0:14:F2:36:5C:DA:F7:46:16:78:A5:A8:D2:03:8C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/AD81180ED014F2365CDAF7461678A5A8D2038CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD81180ED014F2365CDAF7461678A5A8D2038CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233382e302f32342d3234203d3e20323639353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:4c:a5:f4:e5:07:80:54:14:1c:43:25:99:c5:9d:da:f8:3c:
         07:d6:e0:ff:d3:41:b6:85:2b:db:87:55:88:2c:24:1b:7d:99:
         a7:4e:6f:33:c0:3c:22:0e:67:e0:43:12:33:4a:12:18:15:02:
         e8:95:af:47:6d:03:19:b3:d7:bc:71:54:a9:f5:68:b2:25:38:
         20:70:bd:51:65:f3:9e:7c:99:1d:8f:75:90:55:0e:5e:56:b1:
         12:ec:14:ea:ef:72:f2:af:82:20:17:6a:12:f8:be:a6:9b:64:
         13:5d:f1:1c:17:d5:2d:1f:dc:8b:ec:b2:13:5c:3c:f5:cf:db:
         52:3a:f3:85:c8:bf:5c:db:05:a0:f8:8e:7a:97:c8:93:29:9c:
         bd:49:f0:bd:c0:32:4d:fa:c7:0f:54:4a:fc:87:a2:eb:51:9e:
         d3:b7:0a:cf:5f:c0:48:64:42:1a:6c:45:e0:34:ad:4c:f9:e3:
         5c:d2:b1:25:f0:3a:63:a3:44:83:40:a1:65:4d:e4:f2:29:15:
         01:5f:ab:2f:b9:be:69:f2:7d:29:61:b2:07:e9:fe:af:2b:9e:
         d2:f0:3e:4c:27:7e:e9:ec:25:d2:64:ea:d2:d0:85:08:10:51:
         b5:78:67:21:14:bc:b9:9d:f5:10:7c:e9:94:56:79:87:26:bb:
         80:3c:62:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:07:36 2026 by rpki-client