Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/34352e3137382e3234382e302f32322d3234203d3e20323639303531.roa
File:                     34352e3137382e3234382e302f32322d3234203d3e20323639303531.roa (raw, json)
Hash identifier:          eaC+OQEOs7dlnd3df3DGq1MUCohoyiQ7Hv/xkVGWu4Q=
Subject key identifier:   84:F4:95:7E:F4:F4:0B:77:75:C1:80:98:58:27:01:F9:9D:4F:F5:EA
Certificate issuer:       /CN=B4EEB7C002647F9F4D976BA898697B33B698C485
Certificate serial:       5D6934CB4DAB30FDC4103A6F06070AE74FB764DD
Authority key identifier: B4:EE:B7:C0:02:64:7F:9F:4D:97:6B:A8:98:69:7B:33:B6:98:C4:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4EEB7C002647F9F4D976BA898697B33B698C485.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/34352e3137382e3234382e302f32322d3234203d3e20323639303531.roa
Signing time:             Thu 16 Jul 2026 20:00:39 +0000
ROA not before:           Thu 16 Jul 2026 19:55:39 +0000
ROA not after:            Thu 15 Jul 2027 20:00:39 +0000
asID:                     269051
IP address blocks:        45.178.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/B4EEB7C002647F9F4D976BA898697B33B698C485.crl
                          rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/B4EEB7C002647F9F4D976BA898697B33B698C485.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4EEB7C002647F9F4D976BA898697B33B698C485.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 10:15:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:69:34:cb:4d:ab:30:fd:c4:10:3a:6f:06:07:0a:e7:4f:b7:64:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4EEB7C002647F9F4D976BA898697B33B698C485
        Validity
            Not Before: Jul 16 19:55:39 2026 GMT
            Not After : Jul 15 20:00:39 2027 GMT
        Subject: CN=84F4957EF4F40B7775C18098582701F99D4FF5EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:66:5c:e6:52:37:56:e1:6f:4d:06:b2:2b:2c:
                    48:54:5a:70:d3:f7:3f:26:43:49:4b:42:f3:7b:56:
                    b8:27:4b:5c:02:a9:9a:c7:2e:b7:95:60:16:0d:50:
                    97:58:ee:0b:92:c9:78:95:41:ed:be:cf:91:0b:30:
                    39:c5:5c:c6:6a:b3:86:ad:13:57:cb:06:3e:00:58:
                    bf:eb:90:ab:fc:a7:93:30:53:20:36:4e:65:6d:04:
                    9a:5a:5b:53:7c:90:e9:7b:99:36:25:d3:ba:a1:0f:
                    fe:09:79:01:3f:2c:74:6a:db:4f:01:be:f4:41:8f:
                    aa:f9:6a:1a:0f:ac:71:1d:b2:a0:b2:07:94:7d:0a:
                    cf:62:c4:59:c1:b4:a3:e3:e9:0b:d6:27:7f:66:db:
                    d2:8c:f8:e9:5c:7c:38:d6:6e:b2:15:74:34:1a:89:
                    34:04:c0:03:09:29:58:e1:5b:55:3d:06:db:64:4a:
                    a8:84:55:f8:1d:b0:e3:e6:e0:85:66:4a:5c:6b:c5:
                    da:b9:b4:7b:39:6f:18:bb:3e:08:66:fc:a0:fd:c2:
                    13:3f:01:00:81:a6:29:15:4f:4d:bd:28:f7:d6:c8:
                    56:86:53:54:0f:da:e5:f0:60:c9:d4:38:7f:d2:ac:
                    b8:36:16:5f:0d:a6:29:36:67:a0:7a:af:48:8d:3e:
                    fa:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F4:95:7E:F4:F4:0B:77:75:C1:80:98:58:27:01:F9:9D:4F:F5:EA
            X509v3 Authority Key Identifier:
                keyid:B4:EE:B7:C0:02:64:7F:9F:4D:97:6B:A8:98:69:7B:33:B6:98:C4:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/B4EEB7C002647F9F4D976BA898697B33B698C485.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4EEB7C002647F9F4D976BA898697B33B698C485.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/34352e3137382e3234382e302f32322d3234203d3e20323639303531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:86:b3:a8:7c:02:a0:36:b6:25:60:d2:38:b0:44:c4:63:3f:
         60:f5:5d:b0:a8:dd:0d:b0:ec:9b:22:8e:f0:52:3d:7d:4e:97:
         d2:9d:33:9d:a1:63:85:6d:85:7f:5a:b2:ad:20:ac:aa:31:b2:
         9b:30:42:50:f4:32:24:a9:7b:a5:68:23:14:ce:26:83:ef:48:
         f6:cd:8e:f1:2b:c5:c0:95:6b:60:9b:2b:e5:47:89:6b:74:01:
         11:02:0c:9f:17:f8:e2:f9:ef:87:29:d9:45:32:97:85:f1:be:
         32:1b:15:e5:a9:95:54:3b:7a:3a:59:0e:85:c7:9f:29:cf:9e:
         02:a3:d6:6c:b7:d5:10:0a:bc:58:8a:12:d3:02:3a:f3:43:44:
         47:61:2d:94:21:1d:74:c5:51:2d:23:c2:84:21:3c:49:ad:18:
         55:3f:58:96:6a:0d:f5:5d:b7:46:25:7d:c0:3e:a4:9d:d0:8a:
         81:9c:e9:2c:67:0b:20:82:a8:b9:86:38:c2:ac:49:d2:15:38:
         c1:3f:0b:0d:dc:f1:dc:a5:c1:6d:90:92:cc:7c:5a:09:a9:53:
         b6:43:bd:0f:78:77:6f:37:42:03:66:ab:21:b5:f6:df:0d:90:
         30:1b:25:7f:07:4e:bd:db:b9:94:f9:0f:bf:af:ea:7e:89:06:
         4a:70:a9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:10:35 2026 by rpki-client