Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/34352e3136372e3134382e302f32322d3332203d3e20323638303136.roa
File:                     34352e3136372e3134382e302f32322d3332203d3e20323638303136.roa (raw, json)
Hash identifier:          x0ZXQSaToHImBEPsUBQbFfX42cIyNdkvQVtaki2oaGo=
Subject key identifier:   56:66:B1:8C:B5:0A:F8:D2:DF:76:D3:4F:C5:F3:94:9B:17:F3:40:02
Certificate issuer:       /CN=F4095F95FAF6F079544365F6A4CAFBED9052C8ED
Certificate serial:       5B48349F412A6FB7267440DE3B06587735481C02
Authority key identifier: F4:09:5F:95:FA:F6:F0:79:54:43:65:F6:A4:CA:FB:ED:90:52:C8:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4095F95FAF6F079544365F6A4CAFBED9052C8ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/34352e3136372e3134382e302f32322d3332203d3e20323638303136.roa
Signing time:             Wed 10 Jun 2026 17:28:24 +0000
ROA not before:           Wed 10 Jun 2026 17:23:24 +0000
ROA not after:            Wed 09 Jun 2027 17:28:24 +0000
asID:                     268016
IP address blocks:        45.167.148.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/F4095F95FAF6F079544365F6A4CAFBED9052C8ED.crl
                          rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/F4095F95FAF6F079544365F6A4CAFBED9052C8ED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4095F95FAF6F079544365F6A4CAFBED9052C8ED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 19:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:48:34:9f:41:2a:6f:b7:26:74:40:de:3b:06:58:77:35:48:1c:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4095F95FAF6F079544365F6A4CAFBED9052C8ED
        Validity
            Not Before: Jun 10 17:23:24 2026 GMT
            Not After : Jun  9 17:28:24 2027 GMT
        Subject: CN=5666B18CB50AF8D2DF76D34FC5F3949B17F34002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:20:58:2b:63:69:4f:3e:d1:17:37:59:ba:82:
                    f0:62:11:a3:a3:60:2c:e6:a6:98:14:c7:70:8b:de:
                    e5:34:e9:c8:10:2a:28:6a:57:be:6e:4d:80:d5:e3:
                    46:c3:12:82:f7:5e:64:df:61:ab:8d:88:84:60:18:
                    c6:2a:1e:46:de:40:36:44:03:9f:6b:b6:73:91:d4:
                    9e:57:69:72:3a:d2:0f:22:fd:40:ee:02:fd:fc:28:
                    28:5f:69:ba:9b:b9:33:34:8e:1d:55:c2:65:68:8e:
                    20:c2:f9:62:77:0d:93:fa:01:49:63:bb:85:ed:b4:
                    c2:7d:d6:2b:36:0f:06:2f:a8:29:14:cd:14:6a:50:
                    a0:5f:fb:1a:b1:7b:1a:58:0e:7c:35:d3:89:6e:22:
                    81:20:78:35:8e:ef:54:41:5c:30:45:c4:b1:78:e5:
                    d9:6e:c0:55:70:fa:5c:13:79:6d:87:40:92:14:6e:
                    53:30:f4:46:03:08:3a:38:d4:bf:6e:a5:86:09:39:
                    20:f2:e1:7f:d1:f4:95:38:5e:78:90:8f:b1:6a:c0:
                    ba:c7:5e:4c:c2:0a:79:e6:9a:0d:4e:c2:b9:6d:6d:
                    09:a9:05:0b:e2:8a:c9:e9:ed:60:ef:cf:b3:35:12:
                    16:a5:5d:84:0f:b5:72:c5:f1:24:ed:a4:c2:48:40:
                    db:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:66:B1:8C:B5:0A:F8:D2:DF:76:D3:4F:C5:F3:94:9B:17:F3:40:02
            X509v3 Authority Key Identifier:
                keyid:F4:09:5F:95:FA:F6:F0:79:54:43:65:F6:A4:CA:FB:ED:90:52:C8:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/F4095F95FAF6F079544365F6A4CAFBED9052C8ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4095F95FAF6F079544365F6A4CAFBED9052C8ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/34352e3136372e3134382e302f32322d3332203d3e20323638303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:7f:7c:8c:1d:81:20:ac:12:15:7f:10:4e:ae:ea:aa:31:d3:
         53:25:a9:a1:49:64:17:fa:0c:aa:8b:49:c4:59:55:44:a8:a8:
         8f:6f:62:00:5e:75:86:b4:91:51:b8:73:81:62:78:0a:ae:a9:
         ed:d3:3c:3f:d4:1a:34:09:af:19:9e:7c:cf:27:0b:ca:7d:9c:
         c2:03:98:62:8e:c6:77:5e:71:35:b8:77:e2:22:5f:d5:f5:63:
         35:ed:d7:00:80:83:a0:7b:d8:e4:6f:c8:05:e2:b1:c8:4b:71:
         7d:9c:cf:68:f5:ca:72:63:fe:22:b2:d4:a7:02:2d:ec:be:d4:
         7a:05:b7:cb:2b:a0:78:db:dd:6d:d1:6e:36:9d:d1:dd:15:dd:
         68:5e:d5:77:22:39:43:b4:91:cd:48:41:d4:64:86:1f:35:35:
         41:7a:ad:90:43:8b:dd:cc:80:e7:63:44:1d:e4:28:3a:a3:3f:
         4b:75:60:89:c8:85:85:59:24:57:2c:a6:91:6a:d8:87:93:e7:
         69:1c:77:90:8a:a3:39:68:60:72:cf:80:b1:31:94:77:ce:bd:
         77:45:dd:b1:ef:a8:05:c3:bd:10:96:cf:4a:38:16:e4:f3:07:
         0d:e6:fd:8f:12:98:2b:4b:26:15:c3:43:a6:5b:9b:24:b7:e2:
         bc:fd:0f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:49:13 2026 by rpki-client