Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/34352e3233332e3232382e302f32332d3233203d3e20323637333530.roa
File:                     34352e3233332e3232382e302f32332d3233203d3e20323637333530.roa (raw, json)
Hash identifier:          i8mqybtD885GRg55Mbseid1VFcIqoypQprVT+lksY8U=
Subject key identifier:   95:59:FD:B5:0F:9A:78:20:4F:A2:E6:09:B4:14:38:44:F0:25:91:F6
Certificate issuer:       /CN=D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F
Certificate serial:       704FE84D5F972662434453722C2E1EE736EE9C52
Authority key identifier: D1:B4:AF:0A:27:5C:0D:07:42:C7:43:A8:BE:8B:CD:F5:6B:03:DA:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/34352e3233332e3232382e302f32332d3233203d3e20323637333530.roa
Signing time:             Sat 09 May 2026 02:47:10 +0000
ROA not before:           Sat 09 May 2026 02:42:10 +0000
ROA not after:            Sat 08 May 2027 02:47:10 +0000
asID:                     267350
IP address blocks:        45.233.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.crl
                          rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 12:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:4f:e8:4d:5f:97:26:62:43:44:53:72:2c:2e:1e:e7:36:ee:9c:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F
        Validity
            Not Before: May  9 02:42:10 2026 GMT
            Not After : May  8 02:47:10 2027 GMT
        Subject: CN=9559FDB50F9A78204FA2E609B4143844F02591F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:44:f0:4c:7c:7b:2a:f5:8c:ba:9f:f0:68:22:
                    30:b2:12:2b:8f:71:ca:76:f2:87:db:8a:73:e2:ca:
                    25:35:13:8c:db:b4:27:04:2d:d6:a1:9f:03:aa:a9:
                    ee:25:68:ca:42:7b:3a:83:2c:af:27:20:24:73:f0:
                    cb:76:7f:3f:69:0d:8f:c6:a6:cb:f0:7b:2a:6d:c9:
                    a0:3c:7f:6a:a1:0f:c8:01:eb:0d:a3:c1:cf:4a:a1:
                    71:67:94:70:98:65:ba:0b:2f:40:5d:7f:36:6c:34:
                    20:e6:dd:90:cf:bc:43:31:79:e5:17:bf:a7:aa:eb:
                    ca:87:93:6c:64:a5:29:a3:e3:23:c7:be:9f:42:fb:
                    49:8f:2a:c7:fa:ed:f6:5a:62:a8:2c:44:27:b2:90:
                    43:a1:23:46:6b:c4:42:5a:d0:e4:a3:40:32:52:00:
                    cf:e0:8f:dc:9a:50:1a:38:a5:42:a3:6f:6f:34:68:
                    cd:04:be:eb:d4:e0:6c:df:fc:8d:12:31:0b:79:64:
                    ec:c3:89:d6:02:6d:18:fd:e2:fd:3a:38:4e:9b:48:
                    8d:d4:a3:14:d9:93:18:a9:e3:b1:c8:d8:62:62:f3:
                    21:43:7f:31:12:01:b0:f3:94:c4:22:86:b8:c9:e8:
                    2e:15:3b:d9:c5:f8:97:58:89:e6:fb:a0:5b:58:2e:
                    12:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:59:FD:B5:0F:9A:78:20:4F:A2:E6:09:B4:14:38:44:F0:25:91:F6
            X509v3 Authority Key Identifier:
                keyid:D1:B4:AF:0A:27:5C:0D:07:42:C7:43:A8:BE:8B:CD:F5:6B:03:DA:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/34352e3233332e3232382e302f32332d3233203d3e20323637333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:bc:bd:4b:49:b8:d8:1d:74:b5:64:2f:a8:29:fa:2f:97:3d:
         ad:09:da:75:50:05:8d:ec:4d:ae:8d:4a:82:b9:57:58:02:38:
         7c:b5:13:68:88:ff:c3:5f:fa:21:4f:04:c8:0c:dc:b3:80:2c:
         9e:6c:6d:95:3d:d6:22:4f:a5:e7:3a:2c:5c:f8:32:b1:5e:e0:
         24:5d:30:71:0b:52:92:14:cb:54:71:2c:df:20:10:fd:43:51:
         c5:4d:2e:fb:dd:76:a6:36:a0:d9:05:25:8e:81:41:b5:f4:23:
         32:bf:ca:26:92:36:18:c7:65:14:9a:e7:32:c6:d9:47:0b:62:
         51:f4:7c:1c:68:3b:9a:5d:62:0d:31:b7:e5:bb:e7:c1:92:ab:
         03:dd:df:a0:05:bc:e7:3b:5c:68:fd:18:7c:18:94:c8:9a:ec:
         ce:37:8d:35:d6:2e:e1:a3:33:78:be:e6:0b:6b:a0:ba:f2:8f:
         c8:2e:6e:ae:9c:a0:08:b8:77:5d:d0:d4:b4:7f:ff:2b:08:29:
         30:f4:e1:1c:6f:14:e1:bc:8e:9d:27:46:23:e6:b4:1f:ba:0d:
         2e:87:cb:b6:13:70:85:4d:54:1a:70:ac:2f:5b:76:57:c3:e8:
         02:85:f6:5a:f2:f4:60:a4:d5:c3:47:d0:c6:8d:0c:67:03:fe:
         12:bf:a0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:23:05 2026 by rpki-client