Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/34352e3138362e34322e302f32342d3234203d3e20323636353134.roa
File:                     34352e3138362e34322e302f32342d3234203d3e20323636353134.roa (raw, json)
Hash identifier:          d+WbdGEcuO/4kgINQc1S1MCHuvQTQCX5NQ+jBMaz+34=
Subject key identifier:   6D:6C:76:9A:13:8B:88:EF:35:0D:E9:18:0F:57:43:C6:F9:54:8B:56
Certificate issuer:       /CN=5DB65048062197DEFB6E6487EAB36BD76F794483
Certificate serial:       5EC238B3268E8DD1E7E685CA9847EB9C6AE19450
Authority key identifier: 5D:B6:50:48:06:21:97:DE:FB:6E:64:87:EA:B3:6B:D7:6F:79:44:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DB65048062197DEFB6E6487EAB36BD76F794483.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/34352e3138362e34322e302f32342d3234203d3e20323636353134.roa
Signing time:             Tue 01 Sep 2026 12:02:24 +0000
ROA not before:           Tue 01 Sep 2026 11:57:24 +0000
ROA not after:            Tue 31 Aug 2027 12:02:24 +0000
asID:                     266514
IP address blocks:        45.186.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/5DB65048062197DEFB6E6487EAB36BD76F794483.crl
                          rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/5DB65048062197DEFB6E6487EAB36BD76F794483.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DB65048062197DEFB6E6487EAB36BD76F794483.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 14:58:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:c2:38:b3:26:8e:8d:d1:e7:e6:85:ca:98:47:eb:9c:6a:e1:94:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DB65048062197DEFB6E6487EAB36BD76F794483
        Validity
            Not Before: Sep  1 11:57:24 2026 GMT
            Not After : Aug 31 12:02:24 2027 GMT
        Subject: CN=6D6C769A138B88EF350DE9180F5743C6F9548B56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:91:95:f8:6d:eb:86:f0:8c:e8:a0:a2:32:b4:
                    ec:f8:c8:2b:48:f6:c4:aa:43:d7:9c:07:0f:90:9b:
                    90:1a:7d:ef:94:ee:da:be:c1:5e:66:7a:a0:0d:cd:
                    37:ee:2b:bc:99:d6:4d:b7:0e:6d:81:08:b9:25:b0:
                    fa:14:f5:b8:8b:e6:12:79:f0:f2:32:48:13:85:aa:
                    bd:69:75:42:06:f0:27:5e:d2:3d:b3:a5:1b:fb:50:
                    d2:ba:6e:0f:67:97:14:1d:b6:71:cb:ff:c9:4c:a1:
                    17:88:a7:3a:6a:ca:b3:e6:17:8f:70:17:ef:9a:bc:
                    0f:df:b5:c4:54:af:64:7c:88:69:c0:f0:a7:63:6a:
                    50:9f:46:fa:ea:07:04:2e:e8:05:3c:6b:84:50:ed:
                    df:4d:01:e8:df:32:6f:47:62:75:e7:e5:e1:08:2c:
                    1a:40:17:9e:50:ae:c4:1c:b4:e9:75:54:0a:c8:a6:
                    95:64:be:9f:a7:5d:1c:46:35:3b:0b:55:8c:23:16:
                    15:56:72:20:3f:f3:f7:3a:cd:d9:6e:f7:3f:cc:63:
                    3b:ee:a3:78:a5:6e:01:b2:fa:f1:73:0e:8b:73:0e:
                    e1:a8:9d:fd:0a:00:f8:97:a6:06:fd:26:f4:83:82:
                    68:da:a7:d0:70:58:73:ca:01:94:7a:29:e7:62:cb:
                    88:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6C:76:9A:13:8B:88:EF:35:0D:E9:18:0F:57:43:C6:F9:54:8B:56
            X509v3 Authority Key Identifier:
                keyid:5D:B6:50:48:06:21:97:DE:FB:6E:64:87:EA:B3:6B:D7:6F:79:44:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/5DB65048062197DEFB6E6487EAB36BD76F794483.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DB65048062197DEFB6E6487EAB36BD76F794483.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/34352e3138362e34322e302f32342d3234203d3e20323636353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:2a:0c:f0:d5:7e:b3:f5:a3:e3:ec:04:1d:47:38:35:aa:ff:
         62:d1:17:8a:e4:b7:48:dd:cd:87:06:f3:10:8b:8b:7a:09:7c:
         f6:64:c7:30:a7:a9:6b:30:a9:f1:62:6b:73:1f:ab:8b:9c:1f:
         1c:fd:4d:48:01:67:c4:ae:64:75:ac:c9:03:e2:8e:95:b7:9c:
         8d:5a:56:dd:63:cb:50:cf:ea:5f:32:93:f5:89:e2:5b:00:5c:
         19:c6:a5:ed:ee:c2:3c:d8:0a:07:6c:c5:00:ba:6f:ec:e1:af:
         bf:92:53:76:61:1d:99:5b:3e:c8:39:c9:f6:ca:45:35:dc:61:
         bd:0c:37:41:77:94:ac:f6:7c:15:fb:74:bb:59:54:14:a5:db:
         f8:11:f7:ca:eb:f1:0d:f2:53:6e:ad:4b:3f:2f:f4:72:d7:15:
         b8:3f:82:48:a1:39:49:38:7a:b6:ea:34:10:64:1a:33:aa:e8:
         66:07:76:ca:a2:14:73:7b:9f:64:0a:57:15:a2:65:a6:e1:46:
         69:2e:8b:04:d9:b3:f0:3c:ce:22:96:38:e4:01:26:6f:e0:c1:
         b2:6e:a6:02:48:94:3e:ff:f5:9f:8f:35:75:9a:53:dd:f6:1d:
         50:9b:1b:ca:34:0c:5f:f7:e6:1c:96:b6:ec:e7:4f:17:d5:c1:
         6c:a7:c3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:28:37 2026 by rpki-client