Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/34352e3136392e3139312e302f32342d3234203d3e20323638313331.roa
File:                     34352e3136392e3139312e302f32342d3234203d3e20323638313331.roa (raw, json)
Hash identifier:          uE+bb5XQUAcJ8DWleylKZo0p+WYo5FPCRDyorx/EGYk=
Subject key identifier:   B7:3E:5B:62:48:50:83:CF:D9:22:13:F8:6A:AA:EA:63:B1:D6:A7:76
Certificate issuer:       /CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11
Certificate serial:       65B0F5213C390890D15B4B617B8A06D582D1EC14
Authority key identifier: A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/34352e3136392e3139312e302f32342d3234203d3e20323638313331.roa
Signing time:             Tue 05 May 2026 17:09:39 +0000
ROA not before:           Tue 05 May 2026 17:04:39 +0000
ROA not after:            Tue 04 May 2027 17:09:39 +0000
asID:                     268131
IP address blocks:        45.169.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl
                          rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 03:34:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:b0:f5:21:3c:39:08:90:d1:5b:4b:61:7b:8a:06:d5:82:d1:ec:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11
        Validity
            Not Before: May  5 17:04:39 2026 GMT
            Not After : May  4 17:09:39 2027 GMT
        Subject: CN=B73E5B62485083CFD92213F86AAAEA63B1D6A776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b1:94:5b:51:43:b6:fe:3f:05:95:0e:f5:17:
                    6b:f1:d2:0d:0d:b1:ca:36:d0:b4:ff:22:b0:74:6b:
                    6a:db:4d:da:8f:22:2a:f1:15:ba:c2:e0:10:9b:46:
                    44:16:72:da:b0:0b:7c:a2:3c:68:be:7b:3e:55:3d:
                    c3:83:45:7a:94:78:74:ed:f6:ac:13:f7:3e:d6:1b:
                    1b:4c:5d:3f:82:7d:66:50:83:e8:be:08:4d:07:9b:
                    f0:a6:34:69:cc:da:da:73:6b:bb:ee:73:cc:8c:0c:
                    a6:75:1e:c7:21:d4:04:ef:00:dc:bf:c1:15:14:b1:
                    99:c0:ad:2a:25:ba:8c:8a:a6:45:14:43:ed:42:5f:
                    4a:68:c8:86:c6:29:7b:1f:3b:c2:36:26:73:2d:72:
                    48:08:5d:02:96:bc:8c:26:df:43:f1:db:71:67:0b:
                    11:c8:2b:65:d1:f6:df:3c:48:4e:ba:0a:72:2b:59:
                    74:49:da:8d:e1:e4:ab:d8:5d:f4:81:38:17:12:e9:
                    42:f7:7b:ec:9e:cb:7a:22:ec:ab:be:fd:36:0e:50:
                    15:e3:c4:d1:73:57:9d:e0:5b:b2:c6:71:6a:ee:b8:
                    d5:6c:16:d5:3b:4b:f7:66:a1:e5:f2:ed:f2:64:d7:
                    a6:35:66:87:7f:19:ce:64:6e:d6:fa:d5:aa:b1:95:
                    09:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:3E:5B:62:48:50:83:CF:D9:22:13:F8:6A:AA:EA:63:B1:D6:A7:76
            X509v3 Authority Key Identifier:
                keyid:A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/34352e3136392e3139312e302f32342d3234203d3e20323638313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:b8:1c:59:ba:c9:cd:c0:b5:4c:97:8d:ce:53:53:84:05:3b:
         62:c3:76:4c:41:2b:15:5a:1a:1c:53:4b:5e:2e:35:2b:a9:fc:
         86:d9:bc:53:7e:75:e0:c6:5b:b7:7a:1a:0b:22:04:32:0c:8c:
         38:4e:88:48:a9:5c:1a:a0:2f:53:bc:c6:38:ed:60:4f:7a:ce:
         1b:fd:68:d2:7a:68:87:a4:a2:5e:e1:e4:91:00:da:b6:bc:78:
         c1:07:10:b2:ea:80:d3:a6:c4:50:0f:76:1c:8a:b2:ff:48:d9:
         84:d3:89:1b:23:da:2f:ab:72:5d:df:83:b2:f8:4b:43:56:42:
         bb:97:fa:84:b9:89:2b:5e:1e:62:98:c2:38:1c:ce:f4:c8:41:
         19:80:6e:e3:0c:42:99:f8:e1:98:5a:20:66:b1:ff:27:95:da:
         8b:c5:db:a3:f4:17:a7:82:fc:e7:7e:7e:9a:00:2a:81:e2:15:
         02:08:f5:86:39:e3:78:77:82:b8:39:0f:9b:d6:c7:db:b4:f5:
         d3:be:5c:a6:10:87:54:ad:f2:a2:bf:c9:fa:09:1a:ab:22:d5:
         2b:92:57:2a:78:c7:78:a9:ff:2c:7e:9d:5c:4c:44:0f:bf:c4:
         3f:e1:52:b6:f4:20:ac:57:06:93:22:c2:7f:d2:17:32:c5:68:
         a4:89:4d:d6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZbD1ITw5CJDRW0the4oG1YLR7BQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTBDREQyQ0Y1ODlERkM0QUI0ODJBQzAyRUMwNUVCQjVD
M0JFNUIxMTAeFw0yNjA1MDUxNzA0MzlaFw0yNzA1MDQxNzA5MzlaMDMxMTAvBgNV
BAMTKEI3M0U1QjYyNDg1MDgzQ0ZEOTIyMTNGODZBQUFFQTYzQjFENkE3NzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3sZRbUUO2/j8FlQ71F2vx0g0N
sco20LT/IrB0a2rbTdqPIirxFbrC4BCbRkQWctqwC3yiPGi+ez5VPcODRXqUeHTt
9qwT9z7WGxtMXT+CfWZQg+i+CE0Hm/CmNGnM2tpza7vuc8yMDKZ1Hsch1ATvANy/
wRUUsZnArSoluoyKpkUUQ+1CX0poyIbGKXsfO8I2JnMtckgIXQKWvIwm30Px23Fn
CxHIK2XR9t88SE66CnIrWXRJ2o3h5KvYXfSBOBcS6UL3e+yey3oi7Ku+/TYOUBXj
xNFzV53gW7LGcWruuNVsFtU7S/dmoeXy7fJk16Y1Zod/Gc5kbtb61aqxlQnBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUtz5bYkhQg8/ZIhP4aqrqY7HWp3YwHwYDVR0j
BBgwFoAUoM3Sz1id/Eq0gqwC7AXrtcO+WxEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2JlN0VQNGVneEJWYmM5NkgzV3ZCMUdNU2V3azlUN0pZMnRXR1Vack5G
QkcvMC9BMENERDJDRjU4OURGQzRBQjQ4MkFDMDJFQzA1RUJCNUMzQkU1QjExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwQ0REMkNGNTg5REZDNEFC
NDgyQUMwMkVDMDVFQkI1QzNCRTVCMTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdiZTdFUDRlZ3hCVmJjOTZIM1d2QjFHTVNld2s5VDdKWTJ0V0dVWnJORkJHLzAv
MzQzNTJlMzEzNjM5MmUzMTM5MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMTMzMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtqb8wDQYJKoZIhvcNAQELBQADggEBAIi4HFm6
yc3AtUyXjc5TU4QFO2LDdkxBKxVaGhxTS14uNSup/IbZvFN+deDGW7d6GgsiBDIM
jDhOiEipXBqgL1O8xjjtYE96zhv9aNJ6aIekol7h5JEA2ra8eMEHELLqgNOmxFAP
dhyKsv9I2YTTiRsj2i+rcl3fg7L4S0NWQruX+oS5iSteHmKYwjgczvTIQRmAbuMM
Qpn44ZhaIGax/yeV2ovF26P0F6eC/Od+fpoAKoHiFQII9YY543h3grg5D5vWx9u0
9dO+XKYQh1St8qK/yfoJGqsi1SuSVyp4x3ip/yx+nVxMRA+/xD/hUrb0IKxXBpMi
wn/SFzLFaKSJTdY=
-----END CERTIFICATE-----
Generated at Wed May 13 18:38:55 2026 by rpki-client