Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/34352e3139312e32302e302f32322d3234203d3e20323639363634.roa
File:                     34352e3139312e32302e302f32322d3234203d3e20323639363634.roa (raw, json)
Hash identifier:          RIoJyjagMj2QGlI5nV5OdFCCOPV6mBMhbdQKJCGSwfo=
Subject key identifier:   65:36:68:54:D8:C1:06:8C:90:9E:5B:9E:87:3E:4B:2C:96:78:82:BD
Certificate issuer:       /CN=BCC70231E0F5873F65D74BA9E22BDB4A1E52E437
Certificate serial:       0FFF201505DBE287F9B0885AD907F30F04599225
Authority key identifier: BC:C7:02:31:E0:F5:87:3F:65:D7:4B:A9:E2:2B:DB:4A:1E:52:E4:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/34352e3139312e32302e302f32322d3234203d3e20323639363634.roa
Signing time:             Fri 17 Jul 2026 18:50:31 +0000
ROA not before:           Fri 17 Jul 2026 18:45:31 +0000
ROA not after:            Fri 16 Jul 2027 18:50:31 +0000
asID:                     269664
IP address blocks:        45.191.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.crl
                          rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:03:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ff:20:15:05:db:e2:87:f9:b0:88:5a:d9:07:f3:0f:04:59:92:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC70231E0F5873F65D74BA9E22BDB4A1E52E437
        Validity
            Not Before: Jul 17 18:45:31 2026 GMT
            Not After : Jul 16 18:50:31 2027 GMT
        Subject: CN=65366854D8C1068C909E5B9E873E4B2C967882BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3f:9e:9d:59:64:06:31:30:b7:de:93:69:70:
                    14:e3:05:61:9d:24:11:33:cd:60:01:7e:46:c4:be:
                    7e:63:99:29:f5:95:d5:5e:63:94:74:a0:54:48:6d:
                    dc:25:40:04:d3:9f:84:bf:26:f1:59:f9:44:bc:35:
                    28:d2:03:2c:93:d3:ce:f7:9b:3c:36:b4:b0:56:b6:
                    af:f9:a5:e2:1a:37:ad:c4:98:9d:7f:0f:9e:e5:41:
                    ab:7e:1d:06:79:de:08:06:6e:32:97:43:8f:de:65:
                    98:b1:95:d5:60:c5:91:5f:8b:6a:8a:c7:17:09:94:
                    4a:cf:1b:98:a3:f4:6a:9a:a4:69:9d:53:e8:e3:90:
                    0c:31:48:f5:f4:5b:3c:77:42:08:b3:d9:cf:c0:63:
                    6d:6d:51:2d:c7:e9:79:7e:89:9f:d3:4b:f4:8f:c2:
                    d2:3a:12:fb:c1:3a:72:8e:13:1f:1c:ba:78:49:c8:
                    ea:ca:23:92:9c:a5:36:2d:ec:45:ce:be:55:48:db:
                    69:7f:b4:35:1b:01:ff:70:03:2a:1e:3b:da:a3:bf:
                    26:8b:6d:9c:fb:52:32:c1:b6:79:ea:54:6d:e9:d8:
                    92:fe:81:70:15:ad:35:e7:74:d0:4f:76:08:0f:50:
                    40:61:f3:39:04:8b:5f:16:f2:8d:0a:12:3a:4d:e0:
                    01:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:36:68:54:D8:C1:06:8C:90:9E:5B:9E:87:3E:4B:2C:96:78:82:BD
            X509v3 Authority Key Identifier:
                keyid:BC:C7:02:31:E0:F5:87:3F:65:D7:4B:A9:E2:2B:DB:4A:1E:52:E4:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/34352e3139312e32302e302f32322d3234203d3e20323639363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:46:ed:97:90:41:69:2e:dd:2e:75:1d:b9:31:df:89:2e:60:
         8d:aa:0c:e7:45:71:e1:40:d1:63:4e:e3:c4:2f:ca:4c:59:a8:
         c0:38:59:d7:ad:c6:a5:72:2c:40:01:e8:79:46:fb:f4:54:5e:
         62:4b:12:71:da:b7:69:22:ee:db:e5:75:3f:8e:1c:f6:b6:c4:
         d6:86:ae:82:3c:4c:dc:ef:1f:06:d1:af:87:22:e9:f5:f7:00:
         ba:fa:37:c7:a4:72:1c:1b:26:af:12:21:a0:b9:d7:ea:9c:20:
         ef:10:4e:ab:1d:38:35:70:ae:19:42:e3:30:16:8b:64:0a:68:
         15:d4:57:81:11:26:d1:02:8f:c3:23:66:cc:ab:8e:bf:38:90:
         d9:92:a4:c1:32:ae:1d:38:d9:c9:8f:ef:de:81:cc:ec:7e:61:
         cb:2d:22:2d:20:cd:32:4e:14:ae:96:5f:60:09:e8:13:68:ae:
         13:b2:53:85:15:8b:db:76:80:3b:35:60:4a:2e:19:35:04:40:
         bc:57:65:0b:86:7b:1a:fc:ae:58:ae:38:10:90:d2:a3:36:4f:
         97:19:71:a0:77:28:c4:27:4a:85:a4:c4:d8:0b:0d:08:4b:53:
         0c:f4:b0:8d:f9:1d:c9:5d:c5:b8:f8:e7:9a:72:07:9e:0f:73:
         c9:b1:62:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:25:44 2026 by rpki-client