Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/34352e3138362e33372e302f32342d3234203d3e20323639343039.roa
File:                     34352e3138362e33372e302f32342d3234203d3e20323639343039.roa (raw, json)
Hash identifier:          oIaZrYryCuTfcS7ezvxjpMrCO9TWP/j5XCp7eqlLV3w=
Subject key identifier:   E8:94:D4:5B:13:C1:92:13:3E:CC:06:F5:06:96:B0:AD:3C:5F:0A:71
Certificate issuer:       /CN=FF962D3BC2259181BF6817D40CC381E0150C9740
Certificate serial:       3521BCDF727B1BD442D8F22BBD6B457A6689E66A
Authority key identifier: FF:96:2D:3B:C2:25:91:81:BF:68:17:D4:0C:C3:81:E0:15:0C:97:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF962D3BC2259181BF6817D40CC381E0150C9740.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/34352e3138362e33372e302f32342d3234203d3e20323639343039.roa
Signing time:             Sun 03 May 2026 20:04:20 +0000
ROA not before:           Sun 03 May 2026 19:59:20 +0000
ROA not after:            Sun 02 May 2027 20:04:20 +0000
asID:                     269409
IP address blocks:        45.186.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/FF962D3BC2259181BF6817D40CC381E0150C9740.crl
                          rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/FF962D3BC2259181BF6817D40CC381E0150C9740.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF962D3BC2259181BF6817D40CC381E0150C9740.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:21:bc:df:72:7b:1b:d4:42:d8:f2:2b:bd:6b:45:7a:66:89:e6:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF962D3BC2259181BF6817D40CC381E0150C9740
        Validity
            Not Before: May  3 19:59:20 2026 GMT
            Not After : May  2 20:04:20 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:62:0a:6e:d3:c3:9a:eb:73:dd:4f:da:42:f6:
                    c8:75:10:b0:8f:92:33:6a:bc:b0:8d:7d:64:37:59:
                    ba:c3:2f:82:4b:a8:cf:1b:9d:7d:52:2f:48:16:0b:
                    f7:51:3e:39:8b:ac:de:23:76:69:83:fb:0a:99:fa:
                    a7:d4:ee:77:7e:8c:51:14:5f:fc:4d:c6:81:93:d4:
                    73:20:22:fc:dd:b0:2d:8e:d4:78:d1:d2:49:e2:85:
                    12:2e:d4:be:12:9e:e4:7f:67:cf:31:a1:65:57:15:
                    cc:b4:08:00:cf:b1:c2:91:c6:9b:ae:1b:fc:00:5f:
                    87:87:b2:2c:aa:e0:c9:36:ed:59:db:08:c4:f7:cb:
                    94:46:a5:09:31:4d:63:34:e1:2a:ce:a3:fe:66:b5:
                    24:25:9e:20:a7:5d:7f:6d:e5:34:a1:a5:03:13:c3:
                    9a:8f:88:70:e4:83:be:b6:5e:ed:2b:38:08:a4:46:
                    ca:80:80:24:a4:92:fc:a0:60:e8:b7:81:8e:79:74:
                    b5:c8:90:94:98:c1:7f:d6:87:ea:c9:7a:13:51:74:
                    53:0d:53:47:ab:be:5a:e5:ef:78:4e:0e:8e:18:5e:
                    98:17:b5:c8:b6:b9:a7:de:00:56:85:c8:8a:18:03:
                    a4:1b:a4:ce:83:7b:77:ed:48:60:15:74:d8:64:0d:
                    e2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:94:D4:5B:13:C1:92:13:3E:CC:06:F5:06:96:B0:AD:3C:5F:0A:71
            X509v3 Authority Key Identifier:
                keyid:FF:96:2D:3B:C2:25:91:81:BF:68:17:D4:0C:C3:81:E0:15:0C:97:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/FF962D3BC2259181BF6817D40CC381E0150C9740.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF962D3BC2259181BF6817D40CC381E0150C9740.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/34352e3138362e33372e302f32342d3234203d3e20323639343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:76:15:d6:94:cf:6e:c1:8d:ae:c6:47:f5:1f:cd:73:a1:51:
         69:97:6d:ee:d4:4a:f4:ad:74:37:fd:a5:f6:93:3a:a9:b5:15:
         9c:b6:01:36:94:b1:37:c1:5a:96:88:7a:32:0f:dd:9e:d0:b0:
         cc:48:48:d9:9c:68:10:e6:1a:85:21:dc:d5:17:15:1c:40:22:
         d3:56:3b:cb:18:b7:8b:72:20:1a:7a:b2:b6:f3:92:c5:c7:ef:
         3e:43:7c:5a:88:1e:45:58:6c:59:28:28:c7:0c:ad:11:00:b1:
         f7:b8:87:99:77:12:64:e9:04:e9:d7:53:7d:5f:75:ad:87:a7:
         27:28:e1:c6:13:cb:63:3d:72:2d:ca:4e:30:a9:2d:2c:d6:6c:
         3f:07:12:8a:55:35:f6:3a:42:c5:4c:37:a3:77:da:b0:24:e9:
         31:05:68:96:0f:89:69:8a:21:6d:6d:d8:66:73:54:44:cf:de:
         48:6c:c4:ad:c9:a4:05:1b:6a:db:bb:11:6b:fa:42:4a:be:f5:
         c7:a6:05:bb:11:dc:e9:7a:11:25:dd:88:c0:fc:4a:6d:76:15:
         21:c0:6b:52:ca:50:84:65:2b:af:97:d3:e3:67:59:49:d7:9e:
         0f:c9:94:7d:b0:45:e3:c3:4b:45:b2:f9:29:18:11:da:b1:37:
         10:21:3d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:29:53 2026 by rpki-client