Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/34352e3138382e3232342e302f32322d3234203d3e20323633303437.roa
File:                     34352e3138382e3232342e302f32322d3234203d3e20323633303437.roa (raw, json)
Hash identifier:          E++aUBe/8BVUmgUfhmP5QxKP37ow8fC7WqqY2PlOmXU=
Subject key identifier:   EB:D9:50:E2:CE:88:14:64:69:D8:6F:EC:EB:4D:92:DB:91:73:43:4F
Certificate issuer:       /CN=953D3B8F2A529D58CD089958DDC510BFFCC2B0B4
Certificate serial:       349E7163ABE1311665C560F1A9BFDA42AEA34287
Authority key identifier: 95:3D:3B:8F:2A:52:9D:58:CD:08:99:58:DD:C5:10:BF:FC:C2:B0:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/953D3B8F2A529D58CD089958DDC510BFFCC2B0B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/34352e3138382e3232342e302f32322d3234203d3e20323633303437.roa
Signing time:             Mon 15 Jun 2026 22:16:43 +0000
ROA not before:           Mon 15 Jun 2026 22:11:43 +0000
ROA not after:            Mon 14 Jun 2027 22:16:43 +0000
asID:                     263047
IP address blocks:        45.188.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/953D3B8F2A529D58CD089958DDC510BFFCC2B0B4.crl
                          rsync://rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/953D3B8F2A529D58CD089958DDC510BFFCC2B0B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/953D3B8F2A529D58CD089958DDC510BFFCC2B0B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 07:39:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:9e:71:63:ab:e1:31:16:65:c5:60:f1:a9:bf:da:42:ae:a3:42:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=953D3B8F2A529D58CD089958DDC510BFFCC2B0B4
        Validity
            Not Before: Jun 15 22:11:43 2026 GMT
            Not After : Jun 14 22:16:43 2027 GMT
        Subject: CN=EBD950E2CE88146469D86FECEB4D92DB9173434F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a5:8a:5a:cc:01:19:78:07:e4:bb:73:4f:a5:
                    27:b2:ef:ed:92:9a:db:d3:30:84:86:83:04:d9:ee:
                    e3:f8:e2:c0:b8:d2:82:a8:ab:dc:aa:5e:19:5b:c5:
                    58:92:9c:58:90:9a:db:8f:17:b0:8e:42:38:b7:1c:
                    50:51:7e:52:1e:3e:09:62:9d:b6:24:d0:e2:29:61:
                    41:03:b5:e9:73:b7:19:a4:21:e6:23:f9:1e:1d:94:
                    c1:5a:24:fb:59:52:bc:12:b2:e2:9d:a4:3e:85:07:
                    b3:b8:ac:64:a3:3b:2d:07:3c:83:08:fa:b3:ce:a9:
                    df:bf:8f:8c:79:fa:2e:2b:32:e6:7a:ac:dd:eb:55:
                    c0:c2:4f:85:da:6d:5a:5e:38:fb:4f:f1:80:a0:6c:
                    17:8b:6c:87:d4:5f:f3:e2:7c:bc:b1:d2:a9:4a:57:
                    27:ab:9f:7c:5f:74:f5:b7:cc:5e:50:0b:f5:52:36:
                    c6:6e:c4:7f:ac:5b:d9:25:42:e2:23:7b:7e:97:6c:
                    12:84:af:2f:4d:18:86:b4:00:cf:52:ab:1a:ca:91:
                    29:1d:62:b5:5c:04:8c:39:fb:16:08:cc:ff:d4:cd:
                    8a:56:5f:d7:57:bd:ce:18:76:24:90:53:c5:d0:ef:
                    1e:75:d0:a0:13:83:1b:1c:68:f0:14:fa:ef:4c:0c:
                    b8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D9:50:E2:CE:88:14:64:69:D8:6F:EC:EB:4D:92:DB:91:73:43:4F
            X509v3 Authority Key Identifier:
                keyid:95:3D:3B:8F:2A:52:9D:58:CD:08:99:58:DD:C5:10:BF:FC:C2:B0:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/953D3B8F2A529D58CD089958DDC510BFFCC2B0B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/953D3B8F2A529D58CD089958DDC510BFFCC2B0B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/34352e3138382e3232342e302f32322d3234203d3e20323633303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:24:11:32:48:73:fa:e8:eb:89:c9:e8:7c:14:b9:f8:ac:9a:
         0a:3a:4a:ba:9e:6b:60:ef:2a:55:52:a2:6d:f2:88:ca:c7:49:
         13:26:f7:46:58:20:90:cf:ce:f0:f8:1e:b1:52:65:4d:2a:6e:
         b8:2e:5c:04:ec:12:58:9c:b0:f6:94:2f:21:54:9a:4f:01:c2:
         1a:08:be:7b:64:44:24:5f:db:2f:1f:e6:f5:46:99:9c:28:dd:
         3f:fc:c8:dd:6c:e2:54:53:38:1b:5b:60:f0:b4:d4:03:11:c2:
         e5:ca:b2:09:8b:3d:bd:5a:a6:f6:56:8d:54:c2:68:bd:87:42:
         ea:e0:ac:af:42:3c:21:df:23:6d:8f:d1:23:d1:33:82:3f:23:
         00:e0:91:7e:d3:f5:ff:e4:0e:b4:88:04:4c:53:dd:ef:77:19:
         77:2c:46:3c:0d:7c:34:62:f1:e2:12:dc:66:61:77:be:de:42:
         f6:df:8b:03:3e:7b:97:45:ac:71:ef:9a:dd:09:2c:df:48:92:
         b2:02:15:ce:cd:87:b6:bf:22:3f:ea:1a:aa:48:8f:46:8d:9d:
         2a:0b:b3:f9:41:d0:b2:5f:2d:ad:14:8e:b7:89:ee:9c:b6:2d:
         69:03:20:8d:55:ed:3f:df:5f:ee:57:5e:d3:0b:87:41:2c:d0:
         e0:71:9d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 14:08:17 2026 by rpki-client