Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3135302e302f32342d3234203d3e20323638363738.roa
File:                     34352e3136352e3135302e302f32342d3234203d3e20323638363738.roa (raw, json)
Hash identifier:          RkOzMsp4qm5Hydl7MAlLE7/Gq67P1kRS8bxbpEUH6ns=
Subject key identifier:   18:21:BE:AF:EB:31:71:94:79:47:43:0B:C9:50:30:3D:2B:61:2A:2F
Certificate issuer:       /CN=13BA12AD11702042688DE1889543FA7A0FCFA16E
Certificate serial:       5C3B0105CF1345CA5C6972D1AB5950B548F8BEE1
Authority key identifier: 13:BA:12:AD:11:70:20:42:68:8D:E1:88:95:43:FA:7A:0F:CF:A1:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13BA12AD11702042688DE1889543FA7A0FCFA16E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3135302e302f32342d3234203d3e20323638363738.roa
Signing time:             Tue 05 May 2026 13:56:12 +0000
ROA not before:           Tue 05 May 2026 13:51:12 +0000
ROA not after:            Tue 04 May 2027 13:56:12 +0000
asID:                     268678
IP address blocks:        45.165.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/13BA12AD11702042688DE1889543FA7A0FCFA16E.crl
                          rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/13BA12AD11702042688DE1889543FA7A0FCFA16E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13BA12AD11702042688DE1889543FA7A0FCFA16E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 06:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:3b:01:05:cf:13:45:ca:5c:69:72:d1:ab:59:50:b5:48:f8:be:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BA12AD11702042688DE1889543FA7A0FCFA16E
        Validity
            Not Before: May  5 13:51:12 2026 GMT
            Not After : May  4 13:56:12 2027 GMT
        Subject: CN=1821BEAFEB3171947947430BC950303D2B612A2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b2:a6:65:ec:4a:44:05:79:7d:0e:20:7d:31:
                    db:5b:4e:d0:ca:02:fd:14:59:ee:4c:d8:fa:4e:90:
                    d3:8b:f4:54:e4:47:79:4b:34:e8:13:6c:85:2a:4e:
                    34:99:b6:cb:5b:e3:63:99:3e:14:56:f5:6a:37:c9:
                    00:f0:83:9f:3c:8d:88:4a:51:ca:c0:8f:d5:a9:6a:
                    95:8f:38:f0:32:38:f3:da:69:53:c9:b5:83:8b:eb:
                    9d:3b:c1:95:f8:62:f6:70:60:a6:13:4f:1e:70:e4:
                    f0:ca:37:1d:c5:6c:a5:33:49:1a:66:5f:b5:28:6e:
                    0d:4f:75:ae:0b:35:15:2c:25:32:c9:a4:1a:7d:0c:
                    03:53:b0:45:05:65:6c:d5:ca:ea:7c:77:c1:ce:57:
                    fe:52:23:ae:0b:c1:71:3c:ff:f6:bc:4a:72:27:21:
                    68:1c:d9:b1:24:0f:7e:9d:37:49:8d:32:51:2d:f6:
                    fd:bc:9f:74:55:69:e9:38:db:ad:46:fe:ef:e8:dd:
                    59:f6:39:10:be:62:9d:fe:b3:f1:1b:53:d1:e0:a6:
                    16:f0:59:55:26:6f:86:fb:0d:02:b5:9c:0d:f9:e1:
                    a1:6b:6b:10:12:93:af:19:ed:1f:44:1e:97:e9:37:
                    47:ee:fa:7b:c2:53:93:4c:24:c2:48:29:0f:32:53:
                    70:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:21:BE:AF:EB:31:71:94:79:47:43:0B:C9:50:30:3D:2B:61:2A:2F
            X509v3 Authority Key Identifier:
                keyid:13:BA:12:AD:11:70:20:42:68:8D:E1:88:95:43:FA:7A:0F:CF:A1:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/13BA12AD11702042688DE1889543FA7A0FCFA16E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13BA12AD11702042688DE1889543FA7A0FCFA16E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3135302e302f32342d3234203d3e20323638363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:91:04:54:16:02:67:5f:9c:01:f3:6a:d8:5c:96:15:01:db:
         74:b2:f7:1f:ed:d0:08:27:5c:1f:90:87:15:40:f8:bb:f2:93:
         50:6a:7b:34:e6:62:dc:67:7c:5c:0b:31:60:89:1a:f4:50:7d:
         f9:6c:41:a1:a2:3c:1a:f1:5c:e4:a1:8e:0e:84:3a:2a:15:b6:
         1c:49:7c:cf:6a:88:45:b8:37:52:9c:5d:c9:a4:7d:17:5a:96:
         f6:2b:21:d3:0f:ab:4a:23:e2:f5:34:78:27:2a:55:9d:39:08:
         60:9f:4e:8e:04:12:aa:64:5e:12:7f:b5:4e:b0:3a:88:54:96:
         d5:dc:15:1c:a5:1c:58:40:98:05:76:32:97:31:fd:02:eb:9c:
         69:91:d5:67:03:8e:f3:38:6f:eb:a2:58:cd:a2:68:92:58:1b:
         5b:09:f2:f8:02:f6:a0:57:6e:96:df:0b:ba:87:d9:93:70:19:
         35:65:9f:90:06:50:df:5d:b5:20:d9:21:fa:46:e1:c6:62:6d:
         34:a0:ce:3b:7d:f4:02:18:31:a4:44:0a:dd:bd:b8:76:37:6e:
         22:99:88:d6:9c:0f:a2:cb:14:2d:d3:ab:03:b9:b1:43:b0:83:
         3a:eb:51:c3:23:be:fe:7a:95:a8:fd:4b:80:ca:1b:77:9f:d3:
         36:6b:7c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:31:04 2026 by rpki-client