Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/34352e3138312e36302e302f32322d3232203d3e20323639313730.roa
File:                     34352e3138312e36302e302f32322d3232203d3e20323639313730.roa (raw, json)
Hash identifier:          dZKVJPCS8gXQUBI5RWK4KaR9xsAkJ91ti+E2kUK+qRs=
Subject key identifier:   47:BF:75:E2:18:E3:DE:5F:9C:54:1C:AB:27:A9:B7:AA:A1:CD:C0:46
Certificate issuer:       /CN=3D580FBC905909266C331DDA6416C18006A24750
Certificate serial:       261ADD0525C56A2220B3146219D053045E88021B
Authority key identifier: 3D:58:0F:BC:90:59:09:26:6C:33:1D:DA:64:16:C1:80:06:A2:47:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D580FBC905909266C331DDA6416C18006A24750.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/34352e3138312e36302e302f32322d3232203d3e20323639313730.roa
Signing time:             Sun 19 Apr 2026 14:31:57 +0000
ROA not before:           Sun 19 Apr 2026 14:26:57 +0000
ROA not after:            Sun 18 Apr 2027 14:31:57 +0000
asID:                     269170
IP address blocks:        45.181.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/3D580FBC905909266C331DDA6416C18006A24750.crl
                          rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/3D580FBC905909266C331DDA6416C18006A24750.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D580FBC905909266C331DDA6416C18006A24750.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 01:11:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:1a:dd:05:25:c5:6a:22:20:b3:14:62:19:d0:53:04:5e:88:02:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D580FBC905909266C331DDA6416C18006A24750
        Validity
            Not Before: Apr 19 14:26:57 2026 GMT
            Not After : Apr 18 14:31:57 2027 GMT
        Subject: CN=47BF75E218E3DE5F9C541CAB27A9B7AAA1CDC046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3e:92:ec:3e:b5:58:5e:c1:34:9d:6a:9e:29:
                    e9:2c:e5:98:0f:01:dd:22:b4:e8:e3:63:7b:98:7c:
                    e2:71:8a:d6:86:c8:19:8c:09:c3:42:c8:5e:f1:57:
                    de:f5:18:90:e9:61:15:42:a2:e9:a4:99:49:74:fe:
                    d2:54:ba:8e:26:65:55:69:a3:5e:4c:a0:89:e4:2b:
                    04:ee:0e:91:3e:fa:cf:e2:c1:6f:cf:f1:cd:6e:97:
                    dd:20:f5:20:0f:3f:45:45:74:2c:9d:e8:5c:e6:f4:
                    15:02:97:d2:42:7a:94:9b:9c:2d:b2:e9:94:72:9a:
                    9f:64:2d:b2:99:48:53:33:64:71:3c:1d:c4:d8:ad:
                    b4:7d:f9:0b:5b:9a:8c:0a:3f:bb:49:3f:6f:e5:fb:
                    95:a7:fd:ea:43:c5:e5:5e:c3:e3:33:1b:79:71:e3:
                    38:1d:1c:16:1c:81:b4:cb:0b:21:b6:d4:87:fb:6c:
                    72:b4:6b:c6:41:2d:76:3a:35:d0:c4:28:18:e3:c3:
                    53:1b:3d:b7:18:79:c7:c2:d1:f1:ff:63:71:c6:a8:
                    41:ee:f8:e4:06:cf:8b:44:43:b2:18:a0:67:0e:54:
                    bc:bd:4b:17:99:73:8b:3e:a5:7d:4a:ae:55:1b:3f:
                    85:12:8d:d6:61:ab:1e:30:01:d0:88:b2:b9:52:07:
                    fb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:BF:75:E2:18:E3:DE:5F:9C:54:1C:AB:27:A9:B7:AA:A1:CD:C0:46
            X509v3 Authority Key Identifier:
                keyid:3D:58:0F:BC:90:59:09:26:6C:33:1D:DA:64:16:C1:80:06:A2:47:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/3D580FBC905909266C331DDA6416C18006A24750.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D580FBC905909266C331DDA6416C18006A24750.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/34352e3138312e36302e302f32322d3232203d3e20323639313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:a4:1b:a1:b4:b4:fe:59:b6:49:bf:4d:ab:45:0f:d5:f3:ae:
         69:07:0c:09:11:45:e6:2e:36:b9:2f:4b:97:f3:ca:05:63:7c:
         61:dd:19:29:86:05:56:29:ec:8a:f1:79:4a:54:54:a1:60:17:
         d0:a5:2d:97:95:c4:bc:51:10:32:42:3d:29:88:71:1f:f1:96:
         37:7c:19:47:3a:d6:b1:0c:56:f4:40:7c:50:34:c3:4b:ce:46:
         2f:55:ce:96:81:26:35:bd:a4:bc:bd:85:72:f1:d9:ee:c2:d9:
         0d:ce:89:13:1f:8a:c1:b1:55:2a:4c:ba:e2:13:d3:c3:08:6a:
         98:f9:7a:d6:25:65:f5:ef:c5:8d:4f:da:8d:2f:be:51:85:a9:
         c3:61:79:ef:50:e7:e5:89:da:e1:3c:d8:4f:d9:7a:66:1a:78:
         e3:0b:b2:39:c2:6b:8c:3a:31:4a:df:64:40:2a:ee:e3:71:31:
         a4:bb:29:a9:3c:20:c1:ef:49:e8:a7:29:00:51:e6:51:4b:c5:
         47:7b:ad:17:3a:68:d6:b4:e8:f9:17:ae:a8:5e:47:66:3c:bc:
         9e:ed:72:b3:5c:90:fc:3b:19:c7:b7:3a:ed:22:50:14:88:4f:
         1a:45:7a:7d:18:1d:c2:ca:77:80:d6:cf:63:17:14:d1:05:2f:
         41:c5:d0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:28:27 2026 by rpki-client