Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/34352e3138302e3231322e302f32322d3332203d3e203238363439.roa
File:                     34352e3138302e3231322e302f32322d3332203d3e203238363439.roa (raw, json)
Hash identifier:          lP1B9hpLWs63Zl+u8Ly/knf8Z2K6fG6Hl/T+AYa5ulU=
Subject key identifier:   9B:E6:3A:59:CF:55:71:23:B8:F5:17:49:42:1A:D0:35:A3:91:01:0A
Certificate issuer:       /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
Certificate serial:       0E3474BFF2FFAE0D30C8A9FB7F40429097B8F20D
Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/34352e3138302e3231322e302f32322d3332203d3e203238363439.roa
Signing time:             Fri 17 Jul 2026 21:01:11 +0000
ROA not before:           Fri 17 Jul 2026 20:56:11 +0000
ROA not after:            Fri 16 Jul 2027 21:01:11 +0000
asID:                     28649
IP address blocks:        45.180.212.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:43:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:34:74:bf:f2:ff:ae:0d:30:c8:a9:fb:7f:40:42:90:97:b8:f2:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
        Validity
            Not Before: Jul 17 20:56:11 2026 GMT
            Not After : Jul 16 21:01:11 2027 GMT
        Subject: CN=9BE63A59CF557123B8F51749421AD035A391010A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:4e:2e:71:2f:4e:4a:ae:b7:38:15:c2:ca:7a:
                    00:05:05:a9:b5:2e:55:ba:8c:5e:2d:0e:12:f6:1c:
                    a4:72:c3:04:69:c9:90:ac:d0:25:f6:24:6c:99:f2:
                    c2:85:d0:dc:88:a4:80:5a:ec:02:89:16:6e:ce:ac:
                    c2:c0:88:25:e8:56:0a:ba:44:07:02:70:f6:c7:1e:
                    3c:0f:65:ce:93:24:42:ca:69:88:51:5d:50:f5:78:
                    98:42:1b:7d:a2:7e:b0:a3:84:f7:6e:49:16:07:61:
                    6d:2b:5a:cc:2a:8f:69:eb:52:5f:c8:fb:8f:3e:77:
                    e3:ce:1e:3e:c9:f6:29:af:c0:4d:a2:3b:09:6f:5e:
                    1f:37:41:30:f4:3a:81:00:3c:38:68:b9:bd:02:62:
                    92:60:ab:50:72:70:85:d4:33:65:ad:2e:35:10:76:
                    50:f3:7c:ea:fc:a5:3e:70:8f:c9:7d:89:82:cd:6c:
                    26:92:11:62:d1:2b:bf:7a:79:a5:7d:5b:de:98:c0:
                    e3:4d:fd:da:04:24:40:c0:4d:51:ed:1f:f9:80:ae:
                    0a:04:f6:af:6e:f6:47:e9:c1:6c:50:c1:88:bc:f7:
                    23:34:d5:58:51:a8:6d:83:9e:f3:4a:e9:1b:ae:69:
                    37:2b:ef:e2:cb:74:b6:69:86:df:99:62:a0:a4:fa:
                    62:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E6:3A:59:CF:55:71:23:B8:F5:17:49:42:1A:D0:35:A3:91:01:0A
            X509v3 Authority Key Identifier:
                keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/34352e3138302e3231322e302f32322d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:49:e3:8a:bb:88:1b:db:21:9b:9d:b2:8c:dd:4a:33:04:49:
         04:ad:3e:33:08:b3:a5:73:a5:3a:e7:fb:6d:01:ca:02:7f:ff:
         bf:f4:5d:c4:5d:53:3f:1e:54:75:c3:e9:0e:7e:69:d8:a1:87:
         b2:18:fd:22:35:a5:e7:34:19:aa:9a:30:71:24:28:45:47:5f:
         79:9b:8f:22:e9:19:8b:6e:88:31:eb:1a:f6:f4:4a:9b:6c:01:
         c0:86:cd:ab:3c:61:cf:d7:d7:b3:8c:b7:93:82:7a:42:f9:f7:
         7e:ea:de:b3:f4:29:c6:51:fd:29:e5:9f:4a:48:81:a4:36:77:
         d7:01:35:a8:4e:44:4a:ee:6b:5e:34:3f:a0:1f:66:20:f1:d4:
         81:6d:48:01:53:46:e1:dd:ad:43:bd:f0:18:3f:dc:98:a2:7b:
         2d:28:8d:2a:53:19:0b:6f:da:d1:1d:a4:9b:d5:fb:d7:01:82:
         6d:fd:cc:56:20:70:42:0c:fe:97:3f:62:b3:80:15:51:d6:87:
         0f:49:0e:8f:fb:d6:17:5b:d4:44:ed:3c:06:de:52:dc:f7:75:
         d6:fb:dd:1e:49:74:12:22:be:40:7c:d8:5e:28:ed:30:3a:8a:
         12:a4:ed:d4:0c:9e:ba:89:f8:29:69:ce:ce:01:5a:70:95:8e:
         4d:5f:4c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:48:40 2026 by rpki-client