Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/34352e3138362e34312e302f32342d3234203d3e20323636353134.roa
File:                     34352e3138362e34312e302f32342d3234203d3e20323636353134.roa (raw, json)
Hash identifier:          2VKrhDDTPA0ORXWpJlevMDTE/RmEgc9SFl/hhPGRmb8=
Subject key identifier:   94:05:87:2A:EF:50:AC:71:7C:A0:B4:D4:66:66:BA:4E:82:57:15:D0
Certificate issuer:       /CN=5DB65048062197DEFB6E6487EAB36BD76F794483
Certificate serial:       07AB3C4C3F178B0A8BF4000529615623D00CD2AD
Authority key identifier: 5D:B6:50:48:06:21:97:DE:FB:6E:64:87:EA:B3:6B:D7:6F:79:44:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DB65048062197DEFB6E6487EAB36BD76F794483.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/34352e3138362e34312e302f32342d3234203d3e20323636353134.roa
Signing time:             Tue 01 Sep 2026 12:02:23 +0000
ROA not before:           Tue 01 Sep 2026 11:57:23 +0000
ROA not after:            Tue 31 Aug 2027 12:02:23 +0000
asID:                     266514
IP address blocks:        45.186.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/5DB65048062197DEFB6E6487EAB36BD76F794483.crl
                          rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/5DB65048062197DEFB6E6487EAB36BD76F794483.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DB65048062197DEFB6E6487EAB36BD76F794483.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 14:58:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ab:3c:4c:3f:17:8b:0a:8b:f4:00:05:29:61:56:23:d0:0c:d2:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DB65048062197DEFB6E6487EAB36BD76F794483
        Validity
            Not Before: Sep  1 11:57:23 2026 GMT
            Not After : Aug 31 12:02:23 2027 GMT
        Subject: CN=9405872AEF50AC717CA0B4D46666BA4E825715D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dc:20:c0:b1:1e:d6:1c:81:63:a9:ae:eb:f6:
                    1e:2f:96:c4:ce:cd:c7:0a:24:55:be:60:b3:82:b2:
                    ea:69:57:15:91:d2:79:0d:e0:03:40:f9:51:77:08:
                    36:2a:c9:8d:59:b2:93:64:2d:ab:c9:fa:01:ad:ad:
                    cf:d3:a5:e8:74:0b:68:d4:ce:12:f9:d9:34:bc:57:
                    5a:fc:e7:ac:cb:c5:15:89:e6:14:db:e6:20:b6:aa:
                    d4:ae:f7:8e:45:ff:ef:b8:da:a5:e1:1c:83:28:0d:
                    15:13:98:99:eb:8a:98:d6:a9:cf:70:80:b0:a0:ce:
                    e7:4a:e5:26:55:a8:a8:72:bc:66:fe:f9:0b:da:13:
                    5d:0c:45:e0:e6:38:c7:24:1b:7a:1a:da:5a:91:d5:
                    0b:30:ad:d4:7e:f2:8c:1b:de:3a:e0:94:cd:91:a4:
                    5b:50:55:6a:ff:30:3f:53:c4:e6:ed:65:fa:1e:55:
                    bc:e3:31:46:0a:0b:8f:4b:67:dd:14:7a:63:fe:16:
                    5b:84:d0:18:3f:02:f2:48:e1:d3:b6:45:a2:da:b5:
                    00:fa:0c:fc:89:d0:54:c8:3f:15:5e:d9:31:68:73:
                    26:a6:7f:a9:ca:67:63:92:a1:52:a0:9c:d6:ec:08:
                    56:b8:81:2b:2b:cd:4d:78:b0:76:a1:07:db:a1:8b:
                    bc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:05:87:2A:EF:50:AC:71:7C:A0:B4:D4:66:66:BA:4E:82:57:15:D0
            X509v3 Authority Key Identifier:
                keyid:5D:B6:50:48:06:21:97:DE:FB:6E:64:87:EA:B3:6B:D7:6F:79:44:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/5DB65048062197DEFB6E6487EAB36BD76F794483.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DB65048062197DEFB6E6487EAB36BD76F794483.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/34352e3138362e34312e302f32342d3234203d3e20323636353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:98:bb:c2:51:54:3f:39:e1:22:7f:68:e1:2b:34:4a:6c:fb:
         41:b3:5d:19:e7:29:5c:d9:eb:f0:4d:3c:24:e5:e2:8f:22:aa:
         03:5e:d2:1a:c4:f7:7c:d7:c5:f5:38:2e:5d:03:b0:45:7f:83:
         a1:b7:09:13:1d:e3:4c:92:30:d0:a8:b0:ea:73:c6:48:c1:d6:
         32:fd:ab:cb:5b:81:f6:b7:a6:c0:ee:22:b3:48:3a:3d:e1:cf:
         4d:d3:b0:db:d2:d8:17:23:67:19:ee:05:1d:6b:43:2a:e7:0e:
         9a:b6:c2:d4:8d:a8:fc:7c:70:02:ca:1a:39:34:a7:33:98:4f:
         89:48:07:f7:cd:5c:bc:a9:4d:86:8a:9b:f1:e9:ee:26:88:0d:
         f9:21:34:04:77:44:c4:e8:5f:c0:39:53:a7:09:0f:83:ea:5c:
         81:6a:38:c5:64:10:56:49:f3:b4:fc:31:55:b0:8d:22:29:e9:
         e6:24:77:82:14:9d:58:af:2c:7c:e2:24:07:ba:e9:4e:3e:e9:
         cb:2c:f1:ec:d2:e4:71:2e:56:5e:d5:da:69:90:89:54:09:e5:
         7d:b4:92:a9:8c:e8:55:a5:49:57:1c:0f:ff:16:1a:be:22:56:
         fe:a1:b0:c8:51:40:3f:c3:97:e5:4c:03:9f:c7:4c:c7:ff:68:
         8b:84:dd:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:28:32 2026 by rpki-client