Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/34352e3138372e3133362e302f32322d3332203d3e20323633343935.roa
File:                     34352e3138372e3133362e302f32322d3332203d3e20323633343935.roa (raw, json)
Hash identifier:          8dqSFORysDzYzsLI438cYWkldIxUXoON3yakskuVqEE=
Subject key identifier:   20:62:B6:11:4E:99:B6:C9:12:73:A5:33:5D:4C:9A:DC:57:D6:19:18
Certificate issuer:       /CN=145465E5D0E267A3C7581F7C83C130C002FEA01E
Certificate serial:       18D338D028B009D69A50284BC91BCF4FEAE53D23
Authority key identifier: 14:54:65:E5:D0:E2:67:A3:C7:58:1F:7C:83:C1:30:C0:02:FE:A0:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/145465E5D0E267A3C7581F7C83C130C002FEA01E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/34352e3138372e3133362e302f32322d3332203d3e20323633343935.roa
Signing time:             Thu 19 Mar 2026 17:42:59 +0000
ROA not before:           Thu 19 Mar 2026 17:37:59 +0000
ROA not after:            Thu 18 Mar 2027 17:42:59 +0000
asID:                     263495
IP address blocks:        45.187.136.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/145465E5D0E267A3C7581F7C83C130C002FEA01E.crl
                          rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/145465E5D0E267A3C7581F7C83C130C002FEA01E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/145465E5D0E267A3C7581F7C83C130C002FEA01E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 19:35:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:d3:38:d0:28:b0:09:d6:9a:50:28:4b:c9:1b:cf:4f:ea:e5:3d:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=145465E5D0E267A3C7581F7C83C130C002FEA01E
        Validity
            Not Before: Mar 19 17:37:59 2026 GMT
            Not After : Mar 18 17:42:59 2027 GMT
        Subject: CN=2062B6114E99B6C91273A5335D4C9ADC57D61918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a5:42:14:9a:30:32:40:7f:7e:65:50:d0:d0:
                    26:a1:8b:ac:64:44:e1:5e:de:9b:21:56:d7:5e:27:
                    06:ca:0b:b1:54:a2:43:73:d8:17:e7:57:ab:96:53:
                    13:2e:52:86:1d:d4:2c:b7:f5:f2:27:80:2a:7b:46:
                    f8:b8:94:ac:00:01:6a:43:fd:7a:82:99:8e:e5:4f:
                    5d:59:6f:33:6d:46:1b:23:61:b4:5a:05:15:da:85:
                    a6:c5:6a:c4:41:c2:06:e8:8f:1d:cf:a9:c8:0a:a1:
                    1c:20:b7:1c:76:8e:2f:c3:20:11:23:0a:a2:40:ab:
                    61:61:eb:43:75:70:b2:8d:ef:dd:37:95:6f:d5:30:
                    1c:ef:0f:f6:c3:9e:e8:79:4f:48:8b:b7:97:98:26:
                    6c:e0:73:7d:e4:f7:09:ee:8d:c4:d8:75:32:cb:c9:
                    6a:0c:f1:98:a8:75:e7:9c:a2:cf:e7:c4:ee:5a:77:
                    ab:b8:92:b2:76:38:34:af:77:44:68:2c:de:ed:48:
                    62:d6:e0:f3:17:c8:9a:95:5d:2b:3b:c7:56:ef:9a:
                    4b:eb:fe:f3:20:a4:71:a8:0c:d1:a1:37:37:7e:6e:
                    bf:04:2e:b6:70:84:78:b2:b3:8c:63:03:68:2b:1c:
                    ca:7c:01:89:c0:14:8f:81:db:87:8f:ad:0c:4c:c2:
                    0c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:62:B6:11:4E:99:B6:C9:12:73:A5:33:5D:4C:9A:DC:57:D6:19:18
            X509v3 Authority Key Identifier:
                keyid:14:54:65:E5:D0:E2:67:A3:C7:58:1F:7C:83:C1:30:C0:02:FE:A0:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/145465E5D0E267A3C7581F7C83C130C002FEA01E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/145465E5D0E267A3C7581F7C83C130C002FEA01E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/34352e3138372e3133362e302f32322d3332203d3e20323633343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cf:59:4f:32:ec:86:b0:50:93:5e:81:b3:b3:b3:02:8c:50:de:
         2b:1c:0b:60:fa:3c:22:0e:28:ee:dd:0e:79:8c:df:d3:a8:8d:
         f6:41:38:bd:ca:fd:04:5a:ae:f6:33:f3:77:d3:da:a8:65:ca:
         84:04:a0:b9:c5:f9:b4:bf:2d:d1:30:33:33:50:14:20:8e:71:
         2d:d3:5d:6c:54:ba:d8:dc:4e:9f:d0:82:2b:9c:ae:b3:7d:87:
         4e:2c:69:f3:f4:ff:5b:71:ec:1a:20:00:3f:24:0f:b1:b3:e6:
         b1:b4:23:dc:25:31:c0:03:29:d7:5a:0b:9c:39:b1:17:23:b1:
         b3:b7:6c:95:61:08:83:0f:85:09:45:9f:7b:4a:4d:ed:b0:cb:
         3d:45:78:47:56:07:97:2c:9e:61:85:23:01:a3:0b:c9:91:24:
         ac:5f:71:85:c0:c8:39:7f:37:32:2d:56:19:4a:f1:ba:59:4e:
         c1:6b:bf:e7:3b:b8:54:5c:fb:0c:16:36:ce:61:d1:05:91:e6:
         5e:a1:c5:11:40:26:52:cf:8d:6d:dc:1a:eb:e6:8a:8e:6f:f7:
         fd:6c:bd:aa:05:49:33:a2:6f:92:d9:80:f2:9d:42:21:26:d4:
         ee:9c:33:09:be:ad:20:62:23:b4:87:60:1d:7b:11:80:fd:85:
         fb:c6:a1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:33:27 2026 by rpki-client