Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/34352e3138302e31362e302f32322d3234203d3e20323731323533.roa
File:                     34352e3138302e31362e302f32322d3234203d3e20323731323533.roa (raw, json)
Hash identifier:          ujyP0moqUra4aVrtKSfAlOGowjxMmq4WHPb4+w0MRTQ=
Subject key identifier:   0B:1A:D4:A7:B4:C1:15:F2:77:84:97:E5:DD:1A:94:AE:8B:1A:9E:21
Certificate issuer:       /CN=CD8F95B9B42EF35274A249E09F9AF98392325D71
Certificate serial:       584D75DA273D73B11365C1D0BEF21B73A451DEF2
Authority key identifier: CD:8F:95:B9:B4:2E:F3:52:74:A2:49:E0:9F:9A:F9:83:92:32:5D:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/34352e3138302e31362e302f32322d3234203d3e20323731323533.roa
Signing time:             Mon 23 Mar 2026 19:54:12 +0000
ROA not before:           Mon 23 Mar 2026 19:49:12 +0000
ROA not after:            Mon 22 Mar 2027 19:54:12 +0000
asID:                     271253
IP address blocks:        45.180.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.crl
                          rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 06:58:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:4d:75:da:27:3d:73:b1:13:65:c1:d0:be:f2:1b:73:a4:51:de:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD8F95B9B42EF35274A249E09F9AF98392325D71
        Validity
            Not Before: Mar 23 19:49:12 2026 GMT
            Not After : Mar 22 19:54:12 2027 GMT
        Subject: CN=0B1AD4A7B4C115F2778497E5DD1A94AE8B1A9E21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:79:00:50:c3:9d:d0:60:93:e1:e9:f5:73:98:
                    e7:a8:e6:3b:a0:19:12:b3:0d:5b:2f:18:f6:14:c9:
                    f8:1c:6c:ac:1f:27:8c:45:1c:e6:eb:42:4d:d6:30:
                    a4:e7:8f:80:76:d3:2f:63:d3:e0:4c:2d:fb:a5:51:
                    c6:35:e7:49:d1:ad:2a:0a:65:fa:cb:1b:54:18:58:
                    29:3b:e8:c3:e5:41:47:b2:2e:d1:1e:b8:38:c2:c9:
                    b7:bc:2a:aa:a2:3f:5d:0f:28:59:11:bd:c0:24:73:
                    62:4b:cf:e6:26:32:39:43:47:52:73:27:1e:d8:31:
                    f0:a6:c6:57:29:c5:67:84:79:06:16:28:86:97:e2:
                    6f:d8:f0:f3:33:f8:03:9e:99:25:18:f0:0c:d0:c9:
                    4b:89:b2:50:9a:1a:ba:b4:58:b6:a7:3a:85:51:11:
                    08:9d:b3:9c:49:79:bf:ae:e6:f4:ec:7c:56:67:62:
                    46:1d:fc:71:df:aa:05:3c:9a:92:ba:94:ae:c1:e4:
                    84:35:84:66:04:74:13:c1:57:3f:8c:fa:19:b0:f8:
                    37:02:4d:9d:79:1e:04:c4:c5:7a:34:22:9e:96:f8:
                    24:62:1c:e5:a0:23:33:66:f8:24:43:02:a0:bf:c4:
                    98:6d:b3:20:75:f0:c4:31:eb:ac:a7:1e:a0:31:07:
                    2d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:1A:D4:A7:B4:C1:15:F2:77:84:97:E5:DD:1A:94:AE:8B:1A:9E:21
            X509v3 Authority Key Identifier:
                keyid:CD:8F:95:B9:B4:2E:F3:52:74:A2:49:E0:9F:9A:F9:83:92:32:5D:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/34352e3138302e31362e302f32322d3234203d3e20323731323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:a8:72:15:ee:00:d2:73:3d:49:02:12:c1:4e:7b:be:19:19:
         ad:82:45:ed:2c:46:d4:a5:c8:70:da:66:bd:04:65:4e:e3:32:
         8f:3d:aa:57:dc:8b:bf:ff:a7:2c:f2:77:78:9d:37:7d:04:92:
         c3:51:88:dd:f4:75:44:9c:00:18:40:a6:17:9d:46:84:1d:b9:
         44:b0:4b:34:9c:6c:cb:5f:e8:6b:07:54:8c:1e:26:5e:e8:0c:
         fe:48:e6:f5:22:d5:f8:89:75:72:61:1e:31:97:f8:0a:b4:67:
         86:ec:4a:02:ac:07:78:bf:e1:df:da:fa:92:fb:78:c0:fa:fb:
         9e:25:11:4b:15:cf:c7:56:fb:fd:09:32:4d:79:81:a7:c6:50:
         42:8b:3b:53:4e:77:45:d7:42:a9:b9:e9:87:6c:55:10:0f:cb:
         c1:f2:25:8f:8a:a2:f4:d8:28:ec:c5:1d:fb:a2:c7:dd:80:7a:
         b3:bc:98:24:50:fc:5e:7b:bb:31:9d:94:c7:df:f3:0e:0e:0a:
         be:50:ab:78:cb:8e:8f:6f:3c:8e:03:17:5c:6b:97:36:34:b6:
         ec:9e:48:9f:ba:95:a7:75:73:c3:be:58:87:22:88:90:1e:c6:
         ef:50:4b:dd:49:0a:cf:a5:81:79:af:f7:2e:57:11:c6:a6:54:
         a5:d6:de:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:47:52 2026 by rpki-client