Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/34352e3232352e38302e302f32322d3232203d3e20323731343337.roa
File:                     34352e3232352e38302e302f32322d3232203d3e20323731343337.roa (raw, json)
Hash identifier:          W0xX7SSAhGYF4BDz5ZbAVLx/v7i03TA65dSDL0hXFpw=
Subject key identifier:   91:1C:7B:FC:4E:B9:E9:58:9E:62:87:D3:CA:35:51:2F:3D:E2:0C:A2
Certificate issuer:       /CN=53A5B699AFED13BD0E022CA41D2E6E4F14DCF934
Certificate serial:       7EB20F3334C06EF3ECFBF236E68EA879E78172F2
Authority key identifier: 53:A5:B6:99:AF:ED:13:BD:0E:02:2C:A4:1D:2E:6E:4F:14:DC:F9:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53A5B699AFED13BD0E022CA41D2E6E4F14DCF934.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/34352e3232352e38302e302f32322d3232203d3e20323731343337.roa
Signing time:             Sun 29 Mar 2026 13:13:42 +0000
ROA not before:           Sun 29 Mar 2026 13:08:42 +0000
ROA not after:            Sun 28 Mar 2027 13:13:42 +0000
asID:                     271437
IP address blocks:        45.225.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/53A5B699AFED13BD0E022CA41D2E6E4F14DCF934.crl
                          rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/53A5B699AFED13BD0E022CA41D2E6E4F14DCF934.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53A5B699AFED13BD0E022CA41D2E6E4F14DCF934.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 08:08:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:b2:0f:33:34:c0:6e:f3:ec:fb:f2:36:e6:8e:a8:79:e7:81:72:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53A5B699AFED13BD0E022CA41D2E6E4F14DCF934
        Validity
            Not Before: Mar 29 13:08:42 2026 GMT
            Not After : Mar 28 13:13:42 2027 GMT
        Subject: CN=911C7BFC4EB9E9589E6287D3CA35512F3DE20CA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:eb:9a:42:b4:04:fc:65:ca:01:cd:0f:35:ce:
                    7e:36:9c:a4:ac:32:8c:33:75:9b:32:c9:45:e2:5e:
                    aa:a6:73:ad:73:c8:2c:62:17:85:b7:3b:8e:4b:7e:
                    a2:ae:a2:ad:87:a8:37:e3:00:8e:bd:95:f0:f0:85:
                    4f:a4:6c:30:e0:1c:a2:07:75:d0:f7:ea:03:28:f4:
                    f7:40:45:8b:b2:a1:b9:ef:6e:68:51:8e:aa:95:77:
                    3d:41:1d:44:8b:29:75:3c:e1:8f:95:08:d6:e4:84:
                    bb:8f:8c:5b:de:14:67:15:91:8f:6a:55:74:67:da:
                    6c:9f:6d:1f:e0:ec:fb:37:41:9e:d4:9c:d2:06:c8:
                    96:49:b3:3e:f8:06:c7:9a:b3:ab:c8:31:35:ba:9a:
                    36:fb:30:36:93:1f:6c:1b:b0:1b:75:1b:5c:23:3b:
                    a1:fb:b8:f7:aa:ac:df:66:15:2a:5a:2a:ad:6d:35:
                    e5:a1:20:33:39:69:02:1c:f5:c4:b8:50:11:67:51:
                    3b:5b:bc:06:16:35:d9:4a:f7:e1:bf:9a:2f:4e:d0:
                    a2:c8:53:73:e1:ec:60:92:29:36:3a:41:ba:5b:cf:
                    c1:77:a7:55:a0:80:24:90:b9:72:06:b1:a4:50:aa:
                    bd:6b:f4:de:ea:88:4b:05:91:50:f7:5e:aa:69:2d:
                    87:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:1C:7B:FC:4E:B9:E9:58:9E:62:87:D3:CA:35:51:2F:3D:E2:0C:A2
            X509v3 Authority Key Identifier:
                keyid:53:A5:B6:99:AF:ED:13:BD:0E:02:2C:A4:1D:2E:6E:4F:14:DC:F9:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/53A5B699AFED13BD0E022CA41D2E6E4F14DCF934.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53A5B699AFED13BD0E022CA41D2E6E4F14DCF934.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/34352e3232352e38302e302f32322d3232203d3e20323731343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:84:2d:e2:2f:26:3d:08:61:de:ba:ba:a1:30:b1:cd:38:4a:
         06:1f:60:7d:ba:15:4d:29:89:ed:fa:be:4b:0a:4a:24:2e:d7:
         46:f5:c3:9c:41:e3:20:97:dc:11:8f:fe:ab:c0:69:2a:e3:27:
         2f:c5:c4:fe:70:ce:1a:3f:c5:57:2a:c6:66:78:68:2a:a9:f0:
         08:cf:89:7e:da:75:46:9b:1c:75:1f:a7:cd:41:3c:5a:b9:e8:
         3a:6d:42:f0:94:6b:54:88:1d:b5:49:8e:b4:f3:47:bd:8a:0a:
         a1:a4:4c:57:90:16:5f:e7:c2:3a:65:95:c4:bf:b8:8e:a5:b6:
         3f:bf:3c:3f:12:e0:37:55:c9:3b:d8:f9:06:9e:a8:3f:44:0f:
         02:eb:9f:d1:86:d8:1a:e4:3f:c2:fb:d6:94:f9:d1:8a:85:5a:
         52:44:78:e9:f1:84:40:cd:65:9c:8c:6e:c7:10:75:a3:2f:8a:
         8d:30:58:77:e6:66:68:d0:11:1b:73:a8:70:ed:09:d9:5b:65:
         a0:b5:1e:0a:c1:6e:43:df:11:c7:70:68:cb:0a:f1:11:3e:56:
         fb:74:09:74:6a:9b:2e:e5:4b:6f:cc:00:d1:70:5a:f9:97:df:
         3c:f5:14:01:88:e2:a4:7e:13:9e:8d:f5:60:dc:94:e8:d9:fe:
         28:27:1c:51
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfrIPMzTAbvPs+/I25o6oeeeBcvIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTNBNUI2OTlBRkVEMTNCRDBFMDIyQ0E0MUQyRTZFNEYx
NERDRjkzNDAeFw0yNjAzMjkxMzA4NDJaFw0yNzAzMjgxMzEzNDJaMDMxMTAvBgNV
BAMTKDkxMUM3QkZDNEVCOUU5NTg5RTYyODdEM0NBMzU1MTJGM0RFMjBDQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr65pCtAT8ZcoBzQ81zn42nKSs
MowzdZsyyUXiXqqmc61zyCxiF4W3O45LfqKuoq2HqDfjAI69lfDwhU+kbDDgHKIH
ddD36gMo9PdARYuyobnvbmhRjqqVdz1BHUSLKXU84Y+VCNbkhLuPjFveFGcVkY9q
VXRn2myfbR/g7Ps3QZ7UnNIGyJZJsz74Bseas6vIMTW6mjb7MDaTH2wbsBt1G1wj
O6H7uPeqrN9mFSpaKq1tNeWhIDM5aQIc9cS4UBFnUTtbvAYWNdlK9+G/mi9O0KLI
U3Ph7GCSKTY6Qbpbz8F3p1WggCSQuXIGsaRQqr1r9N7qiEsFkVD3XqppLYcZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUkRx7/E656VieYofTyjVRLz3iDKIwHwYDVR0j
BBgwFoAUU6W2ma/tE70OAiykHS5uTxTc+TQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHdWTWdMWUNReGhIQXR2bmk2TlhzQm5iUzZQa1FwUTdvWkhhYUM5d3Ix
WXkvMC81M0E1QjY5OUFGRUQxM0JEMEUwMjJDQTQxRDJFNkU0RjE0RENGOTM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUzQTVCNjk5QUZFRDEzQkQw
RTAyMkNBNDFEMkU2RTRGMTREQ0Y5MzQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh3Vk1nTFlDUXhoSEF0dm5pNk5Yc0JuYlM2UGtRcFE3b1pIYWFDOXdyMVl5LzAv
MzQzNTJlMzIzMjM1MmUzODMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNzMx
MzQzMzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLeFQMA0GCSqGSIb3DQEBCwUAA4IBAQAThC3iLyY9
CGHeurqhMLHNOEoGH2B9uhVNKYnt+r5LCkokLtdG9cOcQeMgl9wRj/6rwGkq4ycv
xcT+cM4aP8VXKsZmeGgqqfAIz4l+2nVGmxx1H6fNQTxaueg6bULwlGtUiB21SY60
80e9igqhpExXkBZf58I6ZZXEv7iOpbY/vzw/EuA3Vck72PkGnqg/RA8C65/Rhtga
5D/C+9aU+dGKhVpSRHjp8YRAzWWcjG7HEHWjL4qNMFh35mZo0BEbc6hw7QnZW2Wg
tR4KwW5D3xHHcGjLCvERPlb7dAl0apsu5UtvzADRcFr5l9889RQBiOKkfhOejfVg
3JTo2f4oJxxR
-----END CERTIFICATE-----
Generated at Wed Apr 8 14:41:27 2026 by rpki-client