Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/13FZ8aVq5AEToR3nsCz4ZUb12TPbW5khVAq9FNGDu47r/0/34352e3137372e3133362e302f32322d3234203d3e203631353935.roa
File:                     34352e3137372e3133362e302f32322d3234203d3e203631353935.roa (raw, json)
Hash identifier:          cCh2Fqvj+jrTidqwto92J/FOFI1+4muIpSVCKoWsqPw=
Subject key identifier:   38:E2:A7:A7:74:9A:78:29:3A:08:3F:B7:F8:02:F1:BE:B9:2E:38:C2
Certificate issuer:       /CN=0AEC26295A21DF55C14EF28131233747E60E500B
Certificate serial:       412C27A93C2BBE01AB55494F76622E94F9DC5B59
Authority key identifier: 0A:EC:26:29:5A:21:DF:55:C1:4E:F2:81:31:23:37:47:E6:0E:50:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AEC26295A21DF55C14EF28131233747E60E500B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/13FZ8aVq5AEToR3nsCz4ZUb12TPbW5khVAq9FNGDu47r/0/34352e3137372e3133362e302f32322d3234203d3e203631353935.roa
Signing time:             Fri 19 Jun 2026 12:09:59 +0000
ROA not before:           Fri 19 Jun 2026 12:04:59 +0000
ROA not after:            Fri 18 Jun 2027 12:09:59 +0000
asID:                     61595
IP address blocks:        45.177.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/13FZ8aVq5AEToR3nsCz4ZUb12TPbW5khVAq9FNGDu47r/0/0AEC26295A21DF55C14EF28131233747E60E500B.crl
                          rsync://rpki-repo.registro.br/repo/13FZ8aVq5AEToR3nsCz4ZUb12TPbW5khVAq9FNGDu47r/0/0AEC26295A21DF55C14EF28131233747E60E500B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AEC26295A21DF55C14EF28131233747E60E500B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Jun 2026 00:08:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:2c:27:a9:3c:2b:be:01:ab:55:49:4f:76:62:2e:94:f9:dc:5b:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AEC26295A21DF55C14EF28131233747E60E500B
        Validity
            Not Before: Jun 19 12:04:59 2026 GMT
            Not After : Jun 18 12:09:59 2027 GMT
        Subject: CN=38E2A7A7749A78293A083FB7F802F1BEB92E38C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:50:ea:2e:04:89:4c:e4:0e:4c:32:7e:63:a1:
                    29:a0:a7:79:2d:58:a2:e0:3b:24:cc:06:94:5e:52:
                    5f:c5:5c:bb:63:29:63:0a:81:6b:20:29:d9:9b:27:
                    13:a9:fa:61:15:9a:84:91:f1:1d:e8:ab:da:9c:49:
                    a1:04:81:47:43:8d:3d:94:1c:e1:eb:c5:96:8e:f9:
                    81:94:5b:61:ad:d3:90:9d:d6:54:cb:ce:5b:d8:a2:
                    8f:eb:b8:c9:0d:9e:7b:04:cb:6c:de:4e:f9:7a:48:
                    e4:69:b4:4e:ba:2e:57:cf:f4:9a:f0:74:e4:44:3d:
                    38:0b:18:f9:a9:40:1f:17:fb:13:d3:d6:fd:b8:d5:
                    c0:fd:27:1e:ff:35:93:e4:0d:fa:bb:0a:82:0b:15:
                    f2:19:75:86:b8:04:cf:24:da:30:68:25:78:87:ed:
                    4c:30:d7:94:02:7b:29:90:c8:f1:2b:62:0a:26:0e:
                    36:43:50:98:26:06:8c:5a:df:8a:3d:00:30:90:ed:
                    61:9f:ba:6a:e8:c7:93:83:be:d7:d9:d5:15:f5:c8:
                    9d:5c:74:77:ac:e3:03:3c:bc:d8:ae:ff:96:05:7a:
                    d7:44:8c:fa:8f:17:f9:c6:bf:ba:d2:5f:75:40:3f:
                    0b:9b:ef:76:16:bb:c1:95:55:40:2a:b6:4c:10:60:
                    37:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E2:A7:A7:74:9A:78:29:3A:08:3F:B7:F8:02:F1:BE:B9:2E:38:C2
            X509v3 Authority Key Identifier:
                keyid:0A:EC:26:29:5A:21:DF:55:C1:4E:F2:81:31:23:37:47:E6:0E:50:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/13FZ8aVq5AEToR3nsCz4ZUb12TPbW5khVAq9FNGDu47r/0/0AEC26295A21DF55C14EF28131233747E60E500B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AEC26295A21DF55C14EF28131233747E60E500B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/13FZ8aVq5AEToR3nsCz4ZUb12TPbW5khVAq9FNGDu47r/0/34352e3137372e3133362e302f32322d3234203d3e203631353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:d0:37:36:87:f5:bd:df:17:59:b5:56:4b:bd:46:0f:0f:5d:
         16:81:2c:e9:ce:1e:88:bd:3f:93:01:89:c8:16:f9:f8:1e:3f:
         49:1c:da:8e:dd:08:fa:2a:de:38:08:63:81:49:ca:45:17:c9:
         81:fc:0b:fe:81:c9:ea:be:5d:46:0a:40:e4:ba:7f:13:e1:44:
         14:83:0b:75:72:00:da:18:74:fb:11:47:dc:04:cb:6b:8f:96:
         46:f0:3c:e2:4b:8c:8b:28:c4:53:aa:ba:9a:e9:97:b1:ef:00:
         d2:20:18:d2:c1:35:2d:55:6d:cc:22:3f:ac:3c:5b:9e:63:31:
         33:86:68:7a:c8:bf:30:85:f7:97:d8:73:5d:fe:ce:9a:a0:57:
         be:b5:77:2a:35:f2:20:f4:2f:86:2d:a3:30:e1:6b:57:a1:36:
         a6:4a:3b:42:47:0b:b8:c9:28:3a:64:41:9c:3a:44:f0:aa:2c:
         7f:a1:c5:a6:7d:a7:f3:9a:ce:6e:f9:44:7f:96:ad:5e:7a:a1:
         04:1e:90:b8:3f:64:60:c9:7c:98:4f:9b:69:f4:05:71:93:38:
         b0:b0:80:ee:af:0d:a6:58:5d:5d:c5:d8:a7:10:f3:7e:d5:ac:
         a6:a8:e6:65:0f:0b:0e:69:38:96:f3:f6:bc:d9:47:c6:a7:4a:
         0e:cc:45:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 10:53:00 2026 by rpki-client