Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3134382e302f32332d3233203d3e20323638363738.roa
File:                     34352e3136352e3134382e302f32332d3233203d3e20323638363738.roa (raw, json)
Hash identifier:          8aA0ob+9BBG5p3lUMGuNOFP5KRWBtcAxeQWx5z+Qhoc=
Subject key identifier:   62:5D:3D:57:FE:D6:20:AC:5A:7A:C0:9E:D0:42:3E:7F:4D:EF:F6:2E
Certificate issuer:       /CN=CA6E0176FA344D906847F7D46D9CB130F64AAF12
Certificate serial:       2C2909589A6814646AB1247010AC3EA5ADE36994
Authority key identifier: CA:6E:01:76:FA:34:4D:90:68:47:F7:D4:6D:9C:B1:30:F6:4A:AF:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA6E0176FA344D906847F7D46D9CB130F64AAF12.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3134382e302f32332d3233203d3e20323638363738.roa
Signing time:             Fri 03 Jul 2026 15:31:43 +0000
ROA not before:           Fri 03 Jul 2026 15:26:43 +0000
ROA not after:            Fri 02 Jul 2027 15:31:43 +0000
asID:                     268678
IP address blocks:        45.165.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/CA6E0176FA344D906847F7D46D9CB130F64AAF12.crl
                          rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/CA6E0176FA344D906847F7D46D9CB130F64AAF12.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA6E0176FA344D906847F7D46D9CB130F64AAF12.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 07:04:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:29:09:58:9a:68:14:64:6a:b1:24:70:10:ac:3e:a5:ad:e3:69:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA6E0176FA344D906847F7D46D9CB130F64AAF12
        Validity
            Not Before: Jul  3 15:26:43 2026 GMT
            Not After : Jul  2 15:31:43 2027 GMT
        Subject: CN=625D3D57FED620AC5A7AC09ED0423E7F4DEFF62E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fe:5a:e0:f2:87:86:f7:84:48:3e:9d:0d:25:
                    01:6f:d0:41:49:16:9c:1e:97:fe:1e:2f:b6:cf:26:
                    98:7b:8b:3c:ba:39:27:b2:99:56:6b:ef:f6:b1:ea:
                    e3:7e:c7:90:27:38:64:fe:f2:bf:8d:6a:46:0d:c1:
                    72:b2:b5:02:67:de:3f:23:76:50:85:d2:2f:03:37:
                    14:7e:67:04:cb:90:00:d4:75:14:79:bb:0e:36:ce:
                    01:85:b3:09:87:bb:14:7b:df:6c:d9:06:ca:88:9c:
                    bc:56:e9:03:d0:5d:eb:7e:bb:ee:9b:7d:b3:5b:12:
                    51:ef:96:5c:83:13:45:b0:0a:66:55:41:d8:a5:a9:
                    15:90:b2:09:8f:82:94:65:ff:ca:f1:e2:69:f0:b9:
                    99:35:3a:9f:96:41:da:44:96:15:6f:08:76:15:02:
                    ec:7c:48:ba:0c:f1:2e:e3:31:d6:aa:28:ae:6c:05:
                    68:93:b0:07:14:67:b0:fb:8b:45:75:0a:56:88:d9:
                    bd:f8:1b:43:9d:6e:72:40:a4:ca:8a:ea:c5:df:b8:
                    f9:03:09:f4:b6:36:95:f0:0c:b0:bc:ea:a8:7f:fc:
                    24:0c:b2:80:e1:18:da:81:16:78:af:0a:f6:9c:7b:
                    7e:cc:35:ae:46:c2:30:53:ea:56:1e:2d:93:88:4a:
                    f3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:5D:3D:57:FE:D6:20:AC:5A:7A:C0:9E:D0:42:3E:7F:4D:EF:F6:2E
            X509v3 Authority Key Identifier:
                keyid:CA:6E:01:76:FA:34:4D:90:68:47:F7:D4:6D:9C:B1:30:F6:4A:AF:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/CA6E0176FA344D906847F7D46D9CB130F64AAF12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA6E0176FA344D906847F7D46D9CB130F64AAF12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3134382e302f32332d3233203d3e20323638363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cd:b9:9c:bb:78:fd:f0:de:34:06:5f:e9:35:4d:1b:04:86:54:
         55:ae:b9:ba:6c:ca:d8:62:b0:14:01:b8:2a:8a:d4:63:9f:07:
         62:ed:9e:23:b0:9a:76:9b:c7:ac:8d:67:2e:18:a3:33:20:d7:
         fa:84:f2:ba:57:69:ef:ec:a0:30:a7:3d:11:d4:45:53:fe:8b:
         9a:8f:6f:5b:4e:be:53:d4:a3:e3:02:42:67:30:a8:d9:7c:c6:
         f9:df:2e:ae:93:79:01:cd:e0:e3:e0:d0:66:59:23:5b:51:25:
         06:03:a8:f0:4b:c2:1e:45:ae:80:c8:f4:52:6c:d9:c7:f5:b8:
         54:17:3c:b5:cf:5a:40:a4:a5:81:87:e0:a3:d5:66:16:f2:88:
         74:84:a7:4b:8e:33:f4:dd:57:e2:5b:3c:45:82:a8:38:bf:83:
         cc:e8:ab:5f:13:eb:e0:44:50:43:07:cf:49:e0:c2:75:9d:c1:
         d3:f7:6d:fe:f1:50:46:25:cb:b5:59:93:cb:c4:a5:c8:6a:b6:
         10:f1:af:9f:57:f7:a7:a6:37:2f:24:dc:04:b3:a9:1b:1a:e0:
         ee:ca:6a:4c:9b:e9:6a:61:ea:f9:dd:0b:46:ec:b2:d7:a4:52:
         1a:b7:f6:28:df:4f:39:75:c6:1a:ba:54:1d:f6:eb:b0:e5:6c:
         ee:03:ef:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:13:01 2026 by rpki-client