Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/34352e3136352e3138302e302f32322d3331203d3e20323731353832.roa
File:                     34352e3136352e3138302e302f32322d3331203d3e20323731353832.roa (raw, json)
Hash identifier:          8UH8C1F7R/qQDKMGR8F/kcGdiWZI7xBKnvSF6omIG24=
Subject key identifier:   45:7E:E1:6A:C5:60:A7:59:CD:6B:18:97:9F:0A:52:FB:95:C8:B2:FE
Certificate issuer:       /CN=3336C6EC6A981F17A1EC64D050F485B654FA83A7
Certificate serial:       6CED557E17B858EC7BFA471E67D03D7766A55080
Authority key identifier: 33:36:C6:EC:6A:98:1F:17:A1:EC:64:D0:50:F4:85:B6:54:FA:83:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3336C6EC6A981F17A1EC64D050F485B654FA83A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/34352e3136352e3138302e302f32322d3331203d3e20323731353832.roa
Signing time:             Mon 20 Apr 2026 20:52:34 +0000
ROA not before:           Mon 20 Apr 2026 20:47:34 +0000
ROA not after:            Mon 19 Apr 2027 20:52:34 +0000
asID:                     271582
IP address blocks:        45.165.180.0/22 maxlen: 31
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/3336C6EC6A981F17A1EC64D050F485B654FA83A7.crl
                          rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/3336C6EC6A981F17A1EC64D050F485B654FA83A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3336C6EC6A981F17A1EC64D050F485B654FA83A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 18:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:ed:55:7e:17:b8:58:ec:7b:fa:47:1e:67:d0:3d:77:66:a5:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3336C6EC6A981F17A1EC64D050F485B654FA83A7
        Validity
            Not Before: Apr 20 20:47:34 2026 GMT
            Not After : Apr 19 20:52:34 2027 GMT
        Subject: CN=457EE16AC560A759CD6B18979F0A52FB95C8B2FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:29:23:a6:8e:f8:d1:dd:06:7f:0c:08:26:0e:
                    15:67:64:e9:13:2f:05:42:69:63:8d:6e:f3:e2:ee:
                    3b:5b:08:3b:65:54:f9:de:aa:33:cd:19:ef:67:cd:
                    87:a9:f6:0b:58:97:54:97:3d:56:96:0a:5a:43:22:
                    d3:d9:88:8e:8f:bc:58:12:e9:45:c7:30:df:9a:57:
                    92:fe:38:27:9b:0a:4d:6c:75:e4:1a:01:68:08:b3:
                    c2:db:b5:ab:94:55:91:24:07:ba:2f:62:24:12:41:
                    b8:e2:86:55:37:f8:84:b8:b4:51:d9:a3:da:5f:2c:
                    37:35:00:c6:23:5d:fb:91:62:d9:84:48:92:43:0d:
                    67:45:63:aa:ce:aa:a9:a8:ee:e2:7e:3c:c8:05:c8:
                    da:c3:7d:82:7c:7f:fd:42:97:81:44:35:c3:15:d5:
                    33:8a:bf:32:c5:72:21:87:43:a2:a3:32:89:17:7b:
                    ce:f5:e9:aa:c7:c4:62:a9:3c:88:a6:83:70:1c:e1:
                    9e:a7:8e:14:c4:11:d4:c5:5e:ae:4b:ea:fd:21:75:
                    2b:dc:fc:7a:1f:6a:8d:16:91:75:82:40:7c:13:52:
                    0a:cc:41:57:78:a9:34:ea:8b:bc:bf:4e:81:75:00:
                    ec:99:5c:a0:3f:24:c1:55:a6:cd:82:58:37:25:c9:
                    c5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:7E:E1:6A:C5:60:A7:59:CD:6B:18:97:9F:0A:52:FB:95:C8:B2:FE
            X509v3 Authority Key Identifier:
                keyid:33:36:C6:EC:6A:98:1F:17:A1:EC:64:D0:50:F4:85:B6:54:FA:83:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/3336C6EC6A981F17A1EC64D050F485B654FA83A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3336C6EC6A981F17A1EC64D050F485B654FA83A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/34352e3136352e3138302e302f32322d3331203d3e20323731353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:78:36:b1:e6:be:5c:59:89:a7:72:f6:41:8c:02:05:f3:d7:
         29:1c:41:20:6f:7e:81:7d:ae:ae:ff:5a:ad:06:9d:e6:3a:85:
         ba:90:7c:b4:ca:40:90:89:c8:6f:03:23:31:b3:ef:ca:12:f8:
         ea:c2:c3:55:f2:20:e3:12:c0:14:d0:22:3f:08:31:16:b9:5a:
         eb:87:18:69:0d:80:c5:6d:d9:63:c8:5b:13:90:44:c0:0c:c9:
         54:e3:de:f3:c4:cf:a8:5c:94:ca:d4:ef:1e:7b:3a:24:d2:da:
         0e:6e:16:43:68:ca:37:2c:51:87:a9:27:21:45:39:92:52:ed:
         c4:c0:88:cc:c1:63:0e:32:d3:e7:a3:d0:42:48:af:fe:49:3c:
         45:f0:42:ca:90:e9:eb:9d:11:16:a4:ad:49:b6:35:69:9f:ef:
         02:74:87:42:b3:83:df:e1:a5:03:bc:39:de:a3:59:77:17:a3:
         d0:0b:d6:8f:e3:a2:84:bd:5a:2b:76:fd:5d:e7:ef:35:30:81:
         30:ac:28:7d:1e:dc:12:3d:48:e2:8d:8a:0e:6d:64:d4:c7:88:
         1d:09:5f:3f:b0:37:7e:85:17:ee:c1:3a:88:18:4d:b9:21:9d:
         c6:01:b0:88:08:04:3f:04:24:95:47:b3:14:90:a7:6b:14:7a:
         cd:3b:e5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:12:12 2026 by rpki-client