Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/34352e3138362e33382e302f32342d3234203d3e20323639343039.roa
File:                     34352e3138362e33382e302f32342d3234203d3e20323639343039.roa (raw, json)
Hash identifier:          5vI0UwOnOEhYwFadfBwIP1Iv5O3PJHFtKnGN/a3zS6M=
Subject key identifier:   DB:24:E5:C7:FD:F7:40:E4:6B:38:18:F3:17:2C:69:2D:FC:E9:2D:7E
Certificate issuer:       /CN=FF962D3BC2259181BF6817D40CC381E0150C9740
Certificate serial:       7412C330162A8A172D66D60327E6068BE56EC643
Authority key identifier: FF:96:2D:3B:C2:25:91:81:BF:68:17:D4:0C:C3:81:E0:15:0C:97:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF962D3BC2259181BF6817D40CC381E0150C9740.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/34352e3138362e33382e302f32342d3234203d3e20323639343039.roa
Signing time:             Sun 03 May 2026 20:04:23 +0000
ROA not before:           Sun 03 May 2026 19:59:23 +0000
ROA not after:            Sun 02 May 2027 20:04:23 +0000
asID:                     269409
IP address blocks:        45.186.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/FF962D3BC2259181BF6817D40CC381E0150C9740.crl
                          rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/FF962D3BC2259181BF6817D40CC381E0150C9740.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF962D3BC2259181BF6817D40CC381E0150C9740.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:12:c3:30:16:2a:8a:17:2d:66:d6:03:27:e6:06:8b:e5:6e:c6:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF962D3BC2259181BF6817D40CC381E0150C9740
        Validity
            Not Before: May  3 19:59:23 2026 GMT
            Not After : May  2 20:04:23 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5c:68:30:32:4a:5a:38:f4:85:60:74:00:79:
                    23:1c:ea:4f:8d:a2:65:f9:ef:ee:90:81:c2:9c:10:
                    49:9d:36:10:82:64:11:32:23:e0:15:8d:34:a8:c7:
                    0a:e4:3e:1c:6a:86:ce:13:71:89:ae:37:89:ff:1d:
                    24:3c:ef:6f:79:f5:4f:a8:a4:b7:97:0c:da:eb:a6:
                    33:b6:1d:ba:38:93:57:4a:a8:57:83:15:a4:54:ec:
                    cf:b3:28:7f:c9:ce:59:5a:2c:c7:a3:cf:d5:5c:f2:
                    3d:80:67:25:0f:35:1c:42:d4:bc:b0:bf:57:b6:63:
                    3e:52:8e:1a:62:b8:e9:f8:6e:a0:6b:2f:6a:78:df:
                    d7:f3:70:a9:b1:56:dc:a9:c1:25:3a:b1:c6:99:4f:
                    08:8b:53:3b:08:5c:37:85:26:48:ba:9e:01:8a:d1:
                    f0:82:9b:ef:b0:c3:9b:80:35:04:64:d6:08:ab:59:
                    ad:21:72:79:aa:f5:8e:d7:a3:58:69:ae:89:1a:3e:
                    f0:76:ec:c8:b1:1e:21:99:e6:79:62:b9:5c:43:3c:
                    59:3f:ad:ff:98:28:43:d0:dc:9c:b1:f5:43:da:4e:
                    21:02:e6:1d:a0:15:b1:ea:60:ee:e1:1a:36:92:d9:
                    2c:6d:9c:c6:0a:2c:48:66:e6:2d:28:3d:1f:55:e9:
                    fe:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:24:E5:C7:FD:F7:40:E4:6B:38:18:F3:17:2C:69:2D:FC:E9:2D:7E
            X509v3 Authority Key Identifier:
                keyid:FF:96:2D:3B:C2:25:91:81:BF:68:17:D4:0C:C3:81:E0:15:0C:97:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/FF962D3BC2259181BF6817D40CC381E0150C9740.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF962D3BC2259181BF6817D40CC381E0150C9740.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/34352e3138362e33382e302f32342d3234203d3e20323639343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:c6:36:8b:19:74:57:2a:c1:4d:98:c3:63:c4:ec:24:aa:89:
         70:3c:da:36:6c:15:d2:89:c6:f0:42:da:b2:ca:6c:47:e5:72:
         3e:b5:e7:6e:c7:85:9b:7e:64:cd:d9:e1:e4:ec:11:66:38:8b:
         45:f1:79:11:d1:64:5d:fc:54:db:ef:1c:26:d2:f6:ef:d4:a5:
         9a:1a:cc:3f:83:d6:04:1f:b9:29:77:e7:a9:3a:17:af:93:e0:
         91:ac:ac:36:f8:c0:f7:6b:03:ca:8c:43:19:e7:11:29:7e:e5:
         92:3f:38:ad:f2:76:30:3b:fc:a7:a7:be:2c:7b:8f:cd:d8:13:
         cd:f3:3a:5e:f2:1e:66:fe:8d:47:e8:84:24:34:6d:d1:a8:27:
         3e:1a:04:a8:03:00:14:6f:f9:24:63:d0:4d:e0:5c:69:e7:0a:
         5b:f5:3d:3d:b2:f5:2f:be:94:32:6f:9f:ea:e0:c9:db:69:09:
         a1:78:44:82:65:50:0c:82:ac:be:3b:c8:13:06:23:17:cd:06:
         64:dc:db:a4:e8:2b:09:3a:c9:47:f9:75:43:a3:00:bd:dd:19:
         1c:74:19:97:31:56:e5:9b:d4:bc:c9:b8:c6:ec:d0:df:5c:4c:
         e0:fb:5d:1a:a6:3b:6c:4e:19:9b:2a:e8:0a:cc:2f:5e:d5:89:
         17:15:2e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:29:45 2026 by rpki-client