Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/34352e3233362e3234312e302f32342d3234203d3e20323638323537.roa
File:                     34352e3233362e3234312e302f32342d3234203d3e20323638323537.roa (raw, json)
Hash identifier:          rmkoXCXE5UtBf+WkUABCQUjQ80TDbtycMKj+nCkgHV8=
Subject key identifier:   39:A8:8E:5C:E7:B7:94:7E:BD:69:9B:E6:70:1C:48:F9:7B:83:EE:B9
Certificate issuer:       /CN=EB4D38BE240D3EA13D9DE02E2618D2553EFA773E
Certificate serial:       05D73D749E4528FC7F6D6352A69F86D8B94CDFCA
Authority key identifier: EB:4D:38:BE:24:0D:3E:A1:3D:9D:E0:2E:26:18:D2:55:3E:FA:77:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB4D38BE240D3EA13D9DE02E2618D2553EFA773E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/34352e3233362e3234312e302f32342d3234203d3e20323638323537.roa
Signing time:             Wed 05 Aug 2026 23:39:15 +0000
ROA not before:           Wed 05 Aug 2026 23:34:15 +0000
ROA not after:            Wed 04 Aug 2027 23:39:15 +0000
asID:                     268257
IP address blocks:        45.236.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/EB4D38BE240D3EA13D9DE02E2618D2553EFA773E.crl
                          rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/EB4D38BE240D3EA13D9DE02E2618D2553EFA773E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB4D38BE240D3EA13D9DE02E2618D2553EFA773E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 07:11:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:d7:3d:74:9e:45:28:fc:7f:6d:63:52:a6:9f:86:d8:b9:4c:df:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB4D38BE240D3EA13D9DE02E2618D2553EFA773E
        Validity
            Not Before: Aug  5 23:34:15 2026 GMT
            Not After : Aug  4 23:39:15 2027 GMT
        Subject: CN=39A88E5CE7B7947EBD699BE6701C48F97B83EEB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:87:fc:76:b2:4e:f7:56:9b:89:37:33:8c:3b:
                    38:5f:f1:16:56:1d:72:bb:a1:d7:a1:05:5b:38:1b:
                    88:01:b4:a9:24:d0:b2:98:31:bc:32:40:68:c9:62:
                    85:06:98:d1:e7:2e:15:38:3f:14:da:48:8f:d8:25:
                    11:17:82:40:7a:af:f4:b3:4f:a2:d7:1c:ff:13:5a:
                    39:84:65:be:ca:6d:15:e4:1c:91:cf:0d:17:9d:42:
                    d4:6b:83:03:68:21:8b:da:51:92:f8:d8:66:d7:5e:
                    08:1e:09:1b:ae:86:b1:f3:29:78:2e:81:42:04:1d:
                    bc:f7:58:9a:09:28:48:5a:06:ea:15:98:44:8b:ad:
                    d9:0d:48:34:0c:c0:b7:84:57:17:04:95:26:2a:6d:
                    b6:29:c4:a0:94:47:3b:6e:45:89:cf:4f:2b:20:56:
                    5e:04:23:38:8d:24:35:fd:bb:e2:c1:7b:f8:94:79:
                    46:c9:d0:66:85:99:40:e6:f9:88:13:64:d9:20:b5:
                    7b:7f:cf:12:be:9a:5b:37:fc:ee:2c:89:18:5e:7c:
                    74:c7:26:5b:91:63:27:3c:e1:3d:87:d4:a1:a1:be:
                    64:ed:5e:cc:ed:dd:1e:af:2f:e3:f3:96:7c:d9:c1:
                    ab:f0:bd:6b:d8:06:76:d1:3b:7b:35:be:cd:11:3d:
                    76:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A8:8E:5C:E7:B7:94:7E:BD:69:9B:E6:70:1C:48:F9:7B:83:EE:B9
            X509v3 Authority Key Identifier:
                keyid:EB:4D:38:BE:24:0D:3E:A1:3D:9D:E0:2E:26:18:D2:55:3E:FA:77:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/EB4D38BE240D3EA13D9DE02E2618D2553EFA773E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB4D38BE240D3EA13D9DE02E2618D2553EFA773E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/34352e3233362e3234312e302f32342d3234203d3e20323638323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:56:a6:8e:40:cd:31:ca:24:01:52:cc:da:87:4b:fb:e1:b1:
         45:85:bd:15:aa:5d:4a:68:dd:2a:8b:77:89:ff:32:fc:5f:35:
         d3:e7:df:56:1f:b7:47:28:16:f2:a6:95:3d:fe:ab:02:d9:23:
         b7:16:72:0d:32:22:53:68:1b:c9:47:a1:98:e4:39:56:51:78:
         6a:a9:1c:6c:82:69:a0:fa:ae:3d:c6:e0:05:80:bc:4f:ba:78:
         de:1c:1f:d9:88:fd:e8:21:8d:30:00:b0:42:da:1f:0d:9d:e9:
         bb:d9:7c:96:cd:24:c8:13:84:bb:58:df:44:74:f9:d9:e7:ba:
         fc:19:ab:4e:48:1c:8e:3a:ce:03:e5:3e:40:b3:80:a9:91:d5:
         63:fc:12:7e:f9:cf:ac:e0:17:0d:c4:c7:5f:8a:56:bf:7d:cf:
         ab:f5:4a:1d:78:71:08:28:ad:04:9e:6d:91:9f:d2:bc:86:0d:
         2b:d5:8d:03:ae:18:0d:0b:3a:78:c2:c1:d4:b5:3b:3f:c7:b2:
         42:d1:93:ed:a1:3c:d8:ca:be:88:5d:4c:cd:76:f2:be:ed:7f:
         e0:9b:f2:66:51:66:71:e2:9c:9b:55:0f:64:9c:7d:7e:65:2b:
         e9:74:60:38:ee:02:90:df:27:82:68:d0:f4:dc:03:18:fd:13:
         a4:40:c5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 15:17:44 2026 by rpki-client