Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/0/34352e3233312e39362e302f32322d3332203d3e20323637313932.roa
File:                     34352e3233312e39362e302f32322d3332203d3e20323637313932.roa (raw, json)
Hash identifier:          dGTDHsriOsNrqMtXIQh//vDm+UVCddh2R8EGj3UOOxk=
Subject key identifier:   1E:F0:09:3A:2E:F0:5C:39:BE:2A:6E:D6:42:27:3C:FE:A3:7C:7D:17
Certificate issuer:       /CN=D9534541E35780249756A675D2E42F93AF812072
Certificate serial:       4EE394C456A3FFA53B90D42A0E06515393E58E73
Authority key identifier: D9:53:45:41:E3:57:80:24:97:56:A6:75:D2:E4:2F:93:AF:81:20:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9534541E35780249756A675D2E42F93AF812072.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/0/34352e3233312e39362e302f32322d3332203d3e20323637313932.roa
Signing time:             Fri 20 Mar 2026 18:10:58 +0000
ROA not before:           Fri 20 Mar 2026 18:05:58 +0000
ROA not after:            Fri 19 Mar 2027 18:10:58 +0000
asID:                     267192
IP address blocks:        45.231.96.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/0/D9534541E35780249756A675D2E42F93AF812072.crl
                          rsync://rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/0/D9534541E35780249756A675D2E42F93AF812072.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9534541E35780249756A675D2E42F93AF812072.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 02:25:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e3:94:c4:56:a3:ff:a5:3b:90:d4:2a:0e:06:51:53:93:e5:8e:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9534541E35780249756A675D2E42F93AF812072
        Validity
            Not Before: Mar 20 18:05:58 2026 GMT
            Not After : Mar 19 18:10:58 2027 GMT
        Subject: CN=1EF0093A2EF05C39BE2A6ED642273CFEA37C7D17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7c:ed:2f:5a:d3:09:6d:fb:03:a6:c1:2d:cf:
                    6b:41:e1:78:8c:ae:01:d0:5d:e7:fd:96:45:c0:58:
                    90:3d:29:3b:1e:c0:6c:5e:85:8b:91:ac:d8:41:53:
                    4a:20:be:27:a3:88:ab:95:f4:4c:6d:4a:90:8d:28:
                    67:b5:0b:e4:00:c1:48:ae:b5:76:a4:55:9a:49:13:
                    fa:37:49:43:e2:8a:97:71:43:f4:ef:f2:36:0f:36:
                    14:01:82:c8:06:2c:76:aa:2b:72:7f:0e:2a:4e:5d:
                    f0:7f:5d:61:1c:7d:73:8c:3f:63:2c:a6:a0:06:c9:
                    c5:37:28:69:91:af:01:42:82:3d:91:45:de:ae:52:
                    a9:4f:4f:65:4d:78:b2:bf:c3:8c:73:78:b2:d2:f3:
                    ab:19:6b:de:18:40:73:9f:80:4f:52:93:60:c1:42:
                    16:00:3c:fd:a2:2d:8d:e6:4e:6a:98:c2:50:74:a5:
                    33:46:f1:7e:ce:0a:45:8a:b4:97:9c:43:cc:7a:29:
                    11:82:e1:07:8c:57:d7:03:ce:c3:c2:dc:2c:47:26:
                    99:de:c5:5e:9a:4f:1d:fb:a5:99:df:c6:0d:7d:b3:
                    51:a8:f9:86:1c:79:61:18:05:3f:77:3a:56:30:d0:
                    83:01:3f:09:91:45:d4:67:66:af:51:fa:11:27:13:
                    e5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F0:09:3A:2E:F0:5C:39:BE:2A:6E:D6:42:27:3C:FE:A3:7C:7D:17
            X509v3 Authority Key Identifier:
                keyid:D9:53:45:41:E3:57:80:24:97:56:A6:75:D2:E4:2F:93:AF:81:20:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/0/D9534541E35780249756A675D2E42F93AF812072.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9534541E35780249756A675D2E42F93AF812072.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/0/34352e3233312e39362e302f32322d3332203d3e20323637313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:99:ea:d8:b4:a5:93:03:04:02:56:7c:3b:4f:d4:ed:9f:50:
         ad:75:69:ca:c6:af:db:e2:82:a7:0b:fc:39:2f:c1:a5:37:55:
         7b:3a:4b:6c:7a:e2:cb:00:a5:4b:b4:02:1c:93:41:85:1e:61:
         d1:cd:38:bc:ac:63:83:1c:8d:b3:83:e6:24:80:d2:79:35:08:
         10:30:1e:63:e5:e3:9f:95:11:19:f2:d6:18:08:1d:a2:8a:e9:
         f9:ca:36:61:85:2d:f5:d6:78:9e:66:41:9d:4c:57:4e:ce:66:
         b9:94:a6:28:11:fe:cf:fd:29:e0:90:4e:64:68:9f:7c:d6:42:
         26:37:47:54:55:9c:c6:a6:75:49:0e:91:f6:4a:24:ec:7a:b1:
         42:46:55:5c:6f:50:33:e8:d3:d2:28:6b:6c:41:aa:cc:a8:21:
         d0:58:60:86:0d:30:df:e9:0d:ec:88:17:ea:af:11:61:57:1b:
         2c:e1:8d:ec:d0:94:c3:fc:d5:ac:1d:1a:22:ab:5a:f7:31:99:
         fa:51:4b:b6:9f:ac:ab:55:67:5c:8d:ab:54:15:1e:17:d0:b2:
         0a:1b:5a:07:bf:65:02:3f:aa:65:6b:d9:4d:52:78:3b:c4:e3:
         56:87:d7:ba:e8:81:ab:27:6a:78:dd:92:93:b8:c7:2c:77:49:
         dd:38:07:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:38:44 2026 by rpki-client