Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/34352e3136332e3135302e302f32342d3234203d3e20323638353630.roa
File:                     34352e3136332e3135302e302f32342d3234203d3e20323638353630.roa (raw, json)
Hash identifier:          500Fi3E4ykhuNyRi5lNzjBNdSz5BDYoJqhFChmcVf/Y=
Subject key identifier:   7D:85:76:B7:88:A3:26:6A:5D:83:32:74:5B:CD:2E:E2:C8:65:94:DA
Certificate issuer:       /CN=5C29F2932419957E47C4D277E53183F70D734498
Certificate serial:       03AC0C5C46CEA80031D39B160CB21D041BAE25D3
Authority key identifier: 5C:29:F2:93:24:19:95:7E:47:C4:D2:77:E5:31:83:F7:0D:73:44:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C29F2932419957E47C4D277E53183F70D734498.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/34352e3136332e3135302e302f32342d3234203d3e20323638353630.roa
Signing time:             Sat 09 May 2026 14:51:58 +0000
ROA not before:           Sat 09 May 2026 14:46:58 +0000
ROA not after:            Sat 08 May 2027 14:51:58 +0000
asID:                     268560
IP address blocks:        45.163.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/5C29F2932419957E47C4D277E53183F70D734498.crl
                          rsync://rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/5C29F2932419957E47C4D277E53183F70D734498.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C29F2932419957E47C4D277E53183F70D734498.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 10:05:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ac:0c:5c:46:ce:a8:00:31:d3:9b:16:0c:b2:1d:04:1b:ae:25:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C29F2932419957E47C4D277E53183F70D734498
        Validity
            Not Before: May  9 14:46:58 2026 GMT
            Not After : May  8 14:51:58 2027 GMT
        Subject: CN=7D8576B788A3266A5D8332745BCD2EE2C86594DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:25:8f:ea:e6:d4:5a:28:61:e1:d6:c9:72:f6:
                    6c:fd:c9:a0:05:68:3f:28:52:b1:db:26:2d:21:07:
                    cd:c3:3c:1b:70:7d:b7:91:dd:34:3c:52:dc:62:4e:
                    db:d2:75:21:dc:ad:b1:da:c4:e6:4f:5c:17:df:57:
                    e5:d8:fe:16:69:aa:43:12:fb:74:8d:09:87:f8:33:
                    b3:f9:6e:ba:12:1f:97:3b:f5:49:57:58:0a:2d:8d:
                    b3:52:0c:91:68:d8:b4:0e:20:f0:aa:4a:89:ba:47:
                    33:f6:fe:a2:4f:4f:a4:84:5a:34:88:d1:ca:b1:31:
                    f9:46:5e:e2:b5:19:e5:16:54:2d:6c:85:d1:cf:66:
                    35:d6:29:94:3f:c3:13:77:67:5a:55:5b:ab:7f:8c:
                    72:e5:46:d0:a7:2d:7c:fb:ac:86:4d:33:1d:91:ef:
                    64:6c:d9:6c:fa:d8:80:af:f1:b1:b8:68:6e:02:23:
                    2b:bc:2c:f0:44:e8:bd:25:df:d6:e0:af:15:3c:4d:
                    a2:5f:80:21:a7:db:cd:17:e7:79:22:39:85:ea:83:
                    b0:98:af:bd:27:6d:53:61:0a:fe:ce:13:ad:33:87:
                    d6:46:ed:c8:7f:1d:9b:45:c0:39:6f:40:3d:8b:95:
                    4d:4c:e1:d1:d7:45:4b:f6:25:c7:04:2f:8a:cd:a9:
                    b2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:85:76:B7:88:A3:26:6A:5D:83:32:74:5B:CD:2E:E2:C8:65:94:DA
            X509v3 Authority Key Identifier:
                keyid:5C:29:F2:93:24:19:95:7E:47:C4:D2:77:E5:31:83:F7:0D:73:44:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/5C29F2932419957E47C4D277E53183F70D734498.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C29F2932419957E47C4D277E53183F70D734498.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/34352e3136332e3135302e302f32342d3234203d3e20323638353630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:70:22:59:cf:09:34:53:7a:ae:66:4c:e5:f0:e0:e7:04:de:
         59:e4:34:1e:6b:b5:7c:95:30:30:27:55:9d:3d:69:c6:8e:ab:
         62:83:46:04:d2:37:f9:64:4d:a3:b6:d6:d6:8b:c7:53:b9:28:
         b1:1a:6e:74:d1:7c:39:7e:92:e2:75:b7:e8:5d:51:09:79:03:
         98:56:d2:5c:90:5c:d9:41:36:e7:b8:1c:74:7d:09:e7:cd:2b:
         72:94:f0:af:81:a9:ba:4d:cb:d8:73:f8:b4:38:e4:d1:e0:c3:
         d9:70:b9:8f:81:82:6e:1e:01:78:fa:5b:fe:54:31:fe:68:b6:
         46:db:e6:49:9a:dc:6b:6d:c9:f3:91:d3:23:d7:d5:c7:bc:4a:
         c2:e1:13:7f:03:63:d4:a3:fc:2c:d8:a6:32:a6:fe:bc:d0:80:
         8c:c3:0b:40:bd:da:83:0a:ce:9b:55:70:d4:bd:eb:91:cd:e0:
         46:7e:7e:62:00:e5:96:25:e5:32:7a:e5:a9:b1:ae:bf:7b:8b:
         31:8b:47:24:a5:9c:d1:68:ba:15:60:a1:54:4f:82:df:d5:aa:
         07:24:84:2d:6c:6b:b1:06:92:0f:7d:45:44:3b:4c:1a:2a:f3:
         91:a2:89:04:fc:9d:16:7c:23:f1:a1:cd:44:45:74:61:8a:c6:
         f3:43:0d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:49:41 2026 by rpki-client