Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/34352e3136332e3137362e302f32342d3234203d3e20323638353738.roa
File:                     34352e3136332e3137362e302f32342d3234203d3e20323638353738.roa (raw, json)
Hash identifier:          2EoJgtlhZPgJWs04XfRBbxzJgkqQGb8Oe5P1m0cTnp8=
Subject key identifier:   FB:A6:48:47:AF:6A:A4:4E:39:B4:45:C0:21:C5:BC:C3:AE:00:EA:04
Certificate issuer:       /CN=AC4877562548C664D7DBA0D327B2F231710DC102
Certificate serial:       29462C1D19C5A094513ADA27F4AD72B8C3095F48
Authority key identifier: AC:48:77:56:25:48:C6:64:D7:DB:A0:D3:27:B2:F2:31:71:0D:C1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC4877562548C664D7DBA0D327B2F231710DC102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/34352e3136332e3137362e302f32342d3234203d3e20323638353738.roa
Signing time:             Fri 20 Mar 2026 12:50:59 +0000
ROA not before:           Fri 20 Mar 2026 12:45:59 +0000
ROA not after:            Fri 19 Mar 2027 12:50:59 +0000
asID:                     268578
IP address blocks:        45.163.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/AC4877562548C664D7DBA0D327B2F231710DC102.crl
                          rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/AC4877562548C664D7DBA0D327B2F231710DC102.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC4877562548C664D7DBA0D327B2F231710DC102.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 16:31:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:46:2c:1d:19:c5:a0:94:51:3a:da:27:f4:ad:72:b8:c3:09:5f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC4877562548C664D7DBA0D327B2F231710DC102
        Validity
            Not Before: Mar 20 12:45:59 2026 GMT
            Not After : Mar 19 12:50:59 2027 GMT
        Subject: CN=FBA64847AF6AA44E39B445C021C5BCC3AE00EA04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1a:f2:cc:f5:af:49:52:73:97:41:3b:37:81:
                    a9:a1:57:07:c3:16:ad:a0:f4:8e:15:16:a9:2b:9e:
                    98:f1:8f:98:cf:d2:e4:5b:ec:b1:5c:db:70:c8:f7:
                    ee:1d:ce:7d:44:03:eb:28:0e:2f:91:5a:72:2e:7b:
                    9f:05:21:e2:3c:2e:ef:52:39:21:74:7c:84:51:50:
                    ad:99:75:84:9f:0a:e6:c5:f8:e5:d7:cd:19:8a:87:
                    44:c3:9a:c8:cf:a1:bb:4f:e4:89:01:31:4d:ad:82:
                    b0:e1:77:9b:2c:b3:5d:0a:ed:56:91:d3:e8:f3:13:
                    6a:4f:2e:fc:b8:06:a1:d0:b8:9e:72:10:b6:ad:10:
                    a1:be:42:87:80:7c:84:4a:3e:6e:b8:18:0d:5e:70:
                    d4:f5:cc:bd:4a:df:3d:fc:90:72:e2:c2:a1:43:ed:
                    cc:09:3d:60:27:ef:cb:5c:22:ac:70:49:c7:49:5e:
                    02:81:c0:5d:35:a6:71:2d:39:57:89:56:ea:a9:fa:
                    13:f6:15:13:44:69:1d:69:4e:25:40:2b:3d:e5:55:
                    0b:da:4c:39:07:2c:0d:1a:42:5a:24:66:7f:c2:1d:
                    c4:f9:23:af:dd:af:de:35:68:66:d7:8f:18:d7:fb:
                    d0:09:3f:3d:7b:6a:ca:dd:23:d6:80:af:eb:f1:15:
                    24:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A6:48:47:AF:6A:A4:4E:39:B4:45:C0:21:C5:BC:C3:AE:00:EA:04
            X509v3 Authority Key Identifier:
                keyid:AC:48:77:56:25:48:C6:64:D7:DB:A0:D3:27:B2:F2:31:71:0D:C1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/AC4877562548C664D7DBA0D327B2F231710DC102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC4877562548C664D7DBA0D327B2F231710DC102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/34352e3136332e3137362e302f32342d3234203d3e20323638353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:c8:44:e7:72:d0:2d:5d:1d:e5:ca:a8:94:33:d0:fd:10:77:
         15:21:29:cb:9f:70:a1:94:e5:3c:bf:83:02:63:ac:f9:1f:5e:
         7a:1d:9a:6d:3c:f9:fa:a1:57:40:d1:97:72:6d:b4:f9:cf:a4:
         de:5f:56:3a:3e:0a:c3:7d:70:3c:92:02:27:70:f1:cc:12:61:
         73:67:ad:76:c8:c7:f2:2c:d4:4a:aa:4a:35:08:04:c1:d6:f8:
         bd:6d:a0:df:e0:e1:23:ad:e8:ed:1b:ca:a7:38:fa:e4:85:14:
         68:fa:67:9d:e6:53:1c:24:78:16:56:fb:1c:a1:e5:a2:eb:93:
         56:8f:f6:75:70:79:c8:6c:94:f2:f9:d7:6b:2a:e4:c5:a6:d2:
         ea:cc:12:9b:7d:88:57:ce:bd:49:64:6e:84:f0:a9:16:d7:e5:
         9d:d4:c4:48:22:61:d3:12:7a:e0:49:d5:ff:4a:55:2c:7b:04:
         ec:13:a5:35:32:b5:47:ee:fe:bc:e3:0e:db:2b:83:28:ab:1c:
         8c:a0:b9:aa:48:a3:ec:e5:f8:09:50:1f:30:e9:aa:a8:78:6b:
         ad:15:ce:9f:15:fa:84:3d:c2:f0:c5:f3:a2:ee:cf:53:d8:ab:
         7a:b8:9c:04:2f:3f:cb:f3:a8:56:25:e8:08:53:ab:62:37:b4:
         4d:6d:38:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:28:46 2026 by rpki-client