Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/34352e3232382e34342e302f32322d3332203d3e20323637303438.roa
File:                     34352e3232382e34342e302f32322d3332203d3e20323637303438.roa (raw, json)
Hash identifier:          zdpSEMnjIDFWAUAJfau0xtgU/ZxrVOfMHgytz8Lj54A=
Subject key identifier:   EB:27:05:53:40:4B:39:59:54:E3:A1:A9:19:50:71:6B:DC:0E:57:CC
Certificate issuer:       /CN=CE2FC0BEA195DABA387BE8AB04EBFD682C2EF164
Certificate serial:       1B59E141AF2392AFC303AE11E9058C975F4E867D
Authority key identifier: CE:2F:C0:BE:A1:95:DA:BA:38:7B:E8:AB:04:EB:FD:68:2C:2E:F1:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2FC0BEA195DABA387BE8AB04EBFD682C2EF164.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/34352e3232382e34342e302f32322d3332203d3e20323637303438.roa
Signing time:             Wed 23 Sep 2026 11:20:43 +0000
ROA not before:           Wed 23 Sep 2026 11:15:43 +0000
ROA not after:            Wed 22 Sep 2027 11:20:43 +0000
asID:                     267048
IP address blocks:        45.228.44.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/CE2FC0BEA195DABA387BE8AB04EBFD682C2EF164.crl
                          rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/CE2FC0BEA195DABA387BE8AB04EBFD682C2EF164.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2FC0BEA195DABA387BE8AB04EBFD682C2EF164.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 10:33:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:59:e1:41:af:23:92:af:c3:03:ae:11:e9:05:8c:97:5f:4e:86:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE2FC0BEA195DABA387BE8AB04EBFD682C2EF164
        Validity
            Not Before: Sep 23 11:15:43 2026 GMT
            Not After : Sep 22 11:20:43 2027 GMT
        Subject: CN=EB270553404B395954E3A1A91950716BDC0E57CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2e:aa:32:e2:10:80:ce:75:1f:40:3b:72:1c:
                    7f:7c:61:ff:79:13:35:c8:61:4d:cd:33:58:e4:f5:
                    46:74:9e:1a:91:44:50:04:03:87:16:25:3e:fa:cd:
                    fc:19:97:46:27:78:f3:60:6f:ea:58:76:8a:1b:97:
                    9f:63:cc:7d:82:fd:4f:9d:17:ff:03:34:39:86:b4:
                    2e:39:60:8a:d1:74:2d:59:18:34:d6:f7:9b:51:83:
                    69:f5:11:22:2c:f2:87:08:59:6a:73:ff:f8:54:1c:
                    d2:66:6b:cb:b6:1f:67:01:2d:a5:52:6a:d2:19:7b:
                    d1:a8:48:d4:15:0b:69:01:3c:c3:f9:e4:07:78:17:
                    fd:49:61:7b:de:69:a6:bb:df:4e:54:16:94:e9:27:
                    ea:b1:3d:95:75:e0:d3:69:9c:6e:9f:8a:b1:68:29:
                    e1:d8:a1:39:ae:e7:c7:a7:15:d2:04:ee:ac:70:77:
                    05:66:ff:3c:31:36:32:33:1f:db:2e:ac:09:c1:d4:
                    21:5e:b2:d4:d9:1d:b7:01:2b:90:98:b8:f0:c2:6b:
                    48:36:2a:49:31:c4:aa:bd:33:31:f0:62:a8:c6:71:
                    57:11:be:47:c5:3e:13:8f:3e:b7:92:66:78:5f:81:
                    ee:b7:74:73:7e:be:39:45:15:51:74:c2:49:d7:dd:
                    ca:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:27:05:53:40:4B:39:59:54:E3:A1:A9:19:50:71:6B:DC:0E:57:CC
            X509v3 Authority Key Identifier:
                keyid:CE:2F:C0:BE:A1:95:DA:BA:38:7B:E8:AB:04:EB:FD:68:2C:2E:F1:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/CE2FC0BEA195DABA387BE8AB04EBFD682C2EF164.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2FC0BEA195DABA387BE8AB04EBFD682C2EF164.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/34352e3232382e34342e302f32322d3332203d3e20323637303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:fe:27:38:f8:b8:37:c3:12:a4:bd:6a:f7:22:9f:12:55:7b:
         9e:5c:db:8c:9c:a6:c3:30:3a:8b:35:fb:59:7c:97:45:35:5f:
         ad:10:0d:0c:56:74:d1:ba:0a:ed:c4:7a:2c:bb:9a:a3:da:43:
         89:50:88:89:61:44:2a:51:be:5a:92:3f:8a:a1:d6:a1:44:c0:
         0b:cf:59:ed:6f:84:25:16:89:c8:48:18:94:c4:70:d3:9a:04:
         81:d4:e3:8c:09:08:80:39:db:c9:c0:69:c7:9d:e0:27:dc:1e:
         6a:3c:05:57:64:69:37:a7:34:af:94:f1:7e:96:dd:50:4c:41:
         3e:ff:91:8a:6f:89:00:6c:23:f4:6b:61:6e:0a:12:ba:c1:ac:
         0b:40:b4:90:9f:00:4e:f5:d4:b7:b1:8c:2c:76:e4:be:66:82:
         ee:62:8f:c0:ed:2b:76:22:26:25:3c:84:df:e6:cd:fb:c7:cb:
         96:b7:d5:22:bc:68:f1:0e:e0:ca:2e:2b:2c:23:fc:f0:1a:64:
         ea:e6:38:37:95:33:2a:65:19:99:89:a3:2a:48:72:d0:73:63:
         dd:ea:50:c1:a8:29:41:fc:83:42:25:d2:53:47:15:c0:5c:04:
         e0:20:17:d2:db:85:a1:e2:d0:1d:d5:63:19:01:97:cc:b7:47:
         86:6a:9e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:53:02 2026 by rpki-client