Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e31302e302f32332d3233203d3e20323639353636.roa
File:                     34352e3138382e31302e302f32332d3233203d3e20323639353636.roa (raw, json)
Hash identifier:          FVIypcNyg3C00zk4OzkF/abYK+5NvIuGtnMEdHdgLy8=
Subject key identifier:   BA:1F:F3:0D:A0:C5:1D:15:FD:5A:29:27:F2:4D:EF:82:BF:B8:44:4B
Certificate issuer:       /CN=A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE
Certificate serial:       4D16FFC393F339EF4E858BE5A6897DFAA2423CBE
Authority key identifier: A4:E5:5E:18:A5:18:ED:BF:14:B0:96:3D:7B:F0:9E:3D:FF:66:69:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e31302e302f32332d3233203d3e20323639353636.roa
Signing time:             Tue 28 Apr 2026 20:47:28 +0000
ROA not before:           Tue 28 Apr 2026 20:42:28 +0000
ROA not after:            Tue 27 Apr 2027 20:47:28 +0000
asID:                     269566
IP address blocks:        45.188.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE.crl
                          rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 16:34:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:16:ff:c3:93:f3:39:ef:4e:85:8b:e5:a6:89:7d:fa:a2:42:3c:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE
        Validity
            Not Before: Apr 28 20:42:28 2026 GMT
            Not After : Apr 27 20:47:28 2027 GMT
        Subject: CN=BA1FF30DA0C51D15FD5A2927F24DEF82BFB8444B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:83:b5:d9:75:d7:56:83:89:7e:01:ad:c6:2b:
                    22:86:8d:e9:b3:68:49:0c:29:0f:22:d4:b7:5b:0d:
                    30:a7:4d:4e:e6:d1:4e:ac:9b:4f:20:f3:1e:7f:f7:
                    62:5d:3b:46:c1:8a:ee:34:ad:79:29:0f:e1:29:31:
                    1b:d2:c8:01:2e:9d:63:88:62:d4:90:d8:49:9d:d9:
                    e2:1f:51:ec:06:0c:ad:2d:bc:a7:9f:47:e2:4c:ef:
                    50:b3:24:d7:18:82:a6:d3:42:a5:1b:13:4d:0c:7e:
                    5c:8a:78:04:79:36:8c:7e:f6:5a:53:19:20:00:8d:
                    3c:16:1f:a1:49:c6:74:ea:a5:ea:51:82:d3:d4:e1:
                    1f:64:0d:2a:aa:8d:aa:05:0b:46:78:d4:2d:98:f2:
                    6a:a3:bf:ae:1a:8f:ec:f9:0a:5a:07:84:13:2d:fd:
                    6c:8e:6c:18:d0:09:9d:34:67:f8:57:49:38:73:d9:
                    25:64:46:7f:61:2b:fc:bf:7b:03:b9:86:74:71:61:
                    3e:68:a2:7e:35:a7:57:eb:54:01:87:3f:af:0e:9e:
                    e8:ae:51:cd:92:73:8a:2b:28:3d:d8:4a:59:5f:5b:
                    01:27:6c:3a:d9:54:d3:e0:dd:0b:46:53:8d:af:24:
                    7f:da:bd:c2:a7:f4:83:6e:80:01:ac:c9:70:18:df:
                    01:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:1F:F3:0D:A0:C5:1D:15:FD:5A:29:27:F2:4D:EF:82:BF:B8:44:4B
            X509v3 Authority Key Identifier:
                keyid:A4:E5:5E:18:A5:18:ED:BF:14:B0:96:3D:7B:F0:9E:3D:FF:66:69:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e31302e302f32332d3233203d3e20323639353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:ab:bd:0d:31:3f:d7:8b:37:26:e4:43:5c:39:34:29:2e:08:
         61:7b:f5:98:00:a4:ac:d8:cf:ca:3e:f4:94:df:45:2d:ea:f5:
         72:c7:4a:18:d6:69:56:ab:39:97:61:fb:64:0d:33:66:7e:8c:
         82:e3:c9:40:db:21:04:02:be:3c:33:d1:4d:58:85:d2:b1:19:
         7b:ee:c3:34:e1:a2:b6:3a:1d:d5:d1:8f:bd:dc:09:85:11:bf:
         88:0c:90:56:fe:9f:ae:f3:c3:83:cb:98:be:f5:b9:3e:8b:fc:
         99:4e:4b:3a:93:8c:51:ad:53:fc:25:86:15:b8:bb:0b:8a:02:
         d9:f7:34:42:1c:a6:10:f1:d3:88:af:a3:ec:b6:bf:26:60:cd:
         96:b2:c5:b1:82:02:d4:43:fb:06:ff:9e:86:d2:7c:b4:cc:66:
         36:a5:c5:ce:ec:98:04:5e:d7:eb:6b:c3:ee:de:91:5d:14:f3:
         6c:97:8a:65:8e:01:0c:7d:5c:36:78:56:3d:ad:7f:65:0e:bd:
         83:75:59:29:f5:26:0b:0d:25:c1:ae:c0:ed:4d:37:cc:a1:79:
         98:4c:71:23:6b:af:ed:d5:ba:75:ed:e1:e0:ca:c8:46:4c:dc:
         c1:9d:6c:2e:41:44:23:aa:e6:be:d0:1b:00:68:2a:31:e0:ad:
         f0:3e:ea:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:34:35 2026 by rpki-client