Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/34352e3136332e3134382e302f32342d3234203d3e20323638353630.roa
File:                     34352e3136332e3134382e302f32342d3234203d3e20323638353630.roa (raw, json)
Hash identifier:          op+AQW27//FQkcO7UOB4dQ3c8iKf6uOtVWy1KVoPJv8=
Subject key identifier:   7D:82:61:D9:9E:A1:A0:26:AB:62:04:C2:DB:D1:7E:21:C6:30:0A:D1
Certificate issuer:       /CN=5C29F2932419957E47C4D277E53183F70D734498
Certificate serial:       069C685912AD9886E75279619799B04C41AD8799
Authority key identifier: 5C:29:F2:93:24:19:95:7E:47:C4:D2:77:E5:31:83:F7:0D:73:44:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C29F2932419957E47C4D277E53183F70D734498.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/34352e3136332e3134382e302f32342d3234203d3e20323638353630.roa
Signing time:             Sat 09 May 2026 14:52:31 +0000
ROA not before:           Sat 09 May 2026 14:47:31 +0000
ROA not after:            Sat 08 May 2027 14:52:31 +0000
asID:                     268560
IP address blocks:        45.163.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/5C29F2932419957E47C4D277E53183F70D734498.crl
                          rsync://rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/5C29F2932419957E47C4D277E53183F70D734498.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C29F2932419957E47C4D277E53183F70D734498.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 10:05:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:9c:68:59:12:ad:98:86:e7:52:79:61:97:99:b0:4c:41:ad:87:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C29F2932419957E47C4D277E53183F70D734498
        Validity
            Not Before: May  9 14:47:31 2026 GMT
            Not After : May  8 14:52:31 2027 GMT
        Subject: CN=7D8261D99EA1A026AB6204C2DBD17E21C6300AD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:71:4c:c6:1c:46:b8:fd:2f:fd:6b:00:20:95:
                    80:3b:a0:0f:eb:3e:0a:ac:15:56:ef:d9:0e:a8:be:
                    39:da:9f:d7:96:88:7c:7e:30:de:71:21:d1:1b:9b:
                    78:73:24:33:a5:92:4a:5c:92:24:d8:57:3e:22:71:
                    1c:7e:cd:46:0c:e4:d0:60:a9:24:d4:d5:5d:b1:c6:
                    37:b8:d4:27:54:cf:da:52:d9:7e:00:5f:f4:7e:47:
                    1e:53:cc:78:a9:59:65:9c:a3:37:db:48:07:0e:8a:
                    cb:f7:54:f7:82:3a:98:41:81:17:79:5c:4f:6c:31:
                    b7:28:39:93:24:6b:fe:0b:6c:d6:ed:86:61:0c:de:
                    60:14:c6:08:fb:b8:a7:37:2b:1f:13:a6:61:d5:fe:
                    eb:dd:5f:9e:4b:5f:75:9d:3c:08:39:50:a4:e5:93:
                    01:21:22:e1:4f:66:64:56:a0:b3:6f:30:4d:8c:9e:
                    f6:08:dc:43:2d:d3:7c:94:2f:af:5f:18:98:b6:77:
                    a0:f6:40:a8:27:a8:2d:27:89:c4:e8:b4:83:77:8a:
                    b0:6e:eb:15:9f:4d:56:c6:e7:7f:48:4b:9b:1b:d4:
                    f6:f3:c7:9d:c2:a4:bb:38:22:6b:21:e8:a8:71:cc:
                    49:89:7b:13:78:36:67:f0:2c:bd:ac:2d:a3:dc:98:
                    d3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:82:61:D9:9E:A1:A0:26:AB:62:04:C2:DB:D1:7E:21:C6:30:0A:D1
            X509v3 Authority Key Identifier:
                keyid:5C:29:F2:93:24:19:95:7E:47:C4:D2:77:E5:31:83:F7:0D:73:44:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/5C29F2932419957E47C4D277E53183F70D734498.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C29F2932419957E47C4D277E53183F70D734498.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/34352e3136332e3134382e302f32342d3234203d3e20323638353630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:4d:7c:00:21:f2:d2:8b:f6:be:99:3b:73:8c:05:40:67:0a:
         ee:05:8c:89:e4:5e:9c:47:f5:0c:8f:8d:82:12:f0:0c:18:f7:
         56:85:6d:1c:b3:e2:ec:2a:39:fa:42:db:36:45:e3:72:b2:e0:
         fe:95:1a:4d:8c:2c:3b:ef:51:45:bd:87:ca:3b:7a:7a:b4:4a:
         ff:d0:c3:5b:55:52:38:2d:7d:31:27:9b:70:9a:31:d6:6f:c4:
         2f:6f:ab:0d:59:d4:10:a4:9b:fd:b2:27:00:ad:ba:b9:97:87:
         cc:1b:27:47:fe:cc:58:9f:c2:b7:21:61:86:81:2a:f6:c4:c1:
         ee:a7:89:dc:41:e3:da:0f:d3:e2:d9:62:bc:a8:d1:ca:bd:f2:
         1c:58:4e:dd:0a:3c:15:13:e7:0c:c0:1c:48:41:98:3e:21:95:
         a7:a5:13:f6:a2:9c:4f:41:8c:7c:b3:25:b5:c8:07:46:09:ee:
         29:d0:18:e6:73:04:70:80:36:30:4d:65:06:ca:25:69:57:88:
         f5:af:42:1a:d1:e0:41:03:cd:01:8a:40:72:d8:9e:79:99:26:
         8d:eb:1e:75:07:b4:0c:5e:e3:04:3d:4e:01:d2:67:96:84:28:
         a8:1a:84:d0:be:d3:88:d1:7b:fd:f7:17:99:0e:8e:df:fc:6d:
         ff:59:cd:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:51:53 2026 by rpki-client