Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5uEjBDAkwaG1DKGRuzD4VfFpeQ4JhKMDRhBzf9oYpQBf/1/34352e342e33372e302f32342d3234203d3e20323636303435.roa
File:                     34352e342e33372e302f32342d3234203d3e20323636303435.roa (raw, json)
Hash identifier:          qlo3hpBooM7LEVwExCFZhQjZyqP/78XzgsJpBzIQQLc=
Subject key identifier:   84:DF:01:8A:FE:07:DA:CA:59:15:08:AC:EC:4A:10:0C:04:B8:C9:EB
Certificate issuer:       /CN=A75ED3D3A27119AD362E745F2E0EC17950532980
Certificate serial:       09D399CCD4F528346BC94F04F3E3535ECF774014
Authority key identifier: A7:5E:D3:D3:A2:71:19:AD:36:2E:74:5F:2E:0E:C1:79:50:53:29:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A75ED3D3A27119AD362E745F2E0EC17950532980.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uEjBDAkwaG1DKGRuzD4VfFpeQ4JhKMDRhBzf9oYpQBf/1/34352e342e33372e302f32342d3234203d3e20323636303435.roa
Signing time:             Tue 28 Jul 2026 14:10:13 +0000
ROA not before:           Tue 28 Jul 2026 14:05:13 +0000
ROA not after:            Tue 27 Jul 2027 14:10:13 +0000
asID:                     266045
IP address blocks:        45.4.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uEjBDAkwaG1DKGRuzD4VfFpeQ4JhKMDRhBzf9oYpQBf/1/A75ED3D3A27119AD362E745F2E0EC17950532980.crl
                          rsync://rpki-repo.registro.br/repo/5uEjBDAkwaG1DKGRuzD4VfFpeQ4JhKMDRhBzf9oYpQBf/1/A75ED3D3A27119AD362E745F2E0EC17950532980.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A75ED3D3A27119AD362E745F2E0EC17950532980.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 17:20:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:d3:99:cc:d4:f5:28:34:6b:c9:4f:04:f3:e3:53:5e:cf:77:40:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A75ED3D3A27119AD362E745F2E0EC17950532980
        Validity
            Not Before: Jul 28 14:05:13 2026 GMT
            Not After : Jul 27 14:10:13 2027 GMT
        Subject: CN=84DF018AFE07DACA591508ACEC4A100C04B8C9EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:ff:73:9c:4d:2f:0b:6f:da:9a:15:25:ad:1e:
                    de:ac:b1:e9:60:fb:c9:1a:f5:20:ba:0c:14:24:1a:
                    29:22:95:a8:d9:1e:b6:35:19:19:b9:3e:d6:e9:b2:
                    99:c5:43:0e:9a:45:47:cd:0c:96:c8:3a:4f:71:71:
                    9f:3d:82:d5:04:e6:74:a7:8d:c8:16:af:b3:ac:61:
                    be:09:bc:9c:69:f2:52:58:c9:d5:ff:c6:6b:ee:ad:
                    3c:ad:e3:48:fe:d9:2f:c4:44:07:8b:75:2f:6d:5e:
                    c7:fb:78:86:fb:c9:02:98:54:6f:a3:4f:f3:5c:b2:
                    98:c9:a7:21:ae:0d:af:24:88:59:f1:f9:e0:8d:a3:
                    ef:06:12:74:12:f6:2b:79:c5:6c:61:d8:e6:67:93:
                    d3:f1:56:30:64:6e:b1:25:ea:55:e5:9f:34:62:3f:
                    2c:03:34:91:e9:2e:53:ba:94:61:6d:53:55:66:f1:
                    d8:10:67:97:c3:88:08:4b:93:b7:b5:0b:62:61:d5:
                    48:57:e5:68:1f:a0:3c:34:97:6b:f4:16:b8:3d:ad:
                    9d:80:65:7f:cf:d7:3d:cf:f5:aa:d7:5b:07:c7:22:
                    f8:32:90:28:32:75:0d:9f:67:3e:85:fa:e2:3d:aa:
                    e5:25:03:b3:df:1a:1e:bd:eb:8e:ee:8d:cf:02:55:
                    f8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:DF:01:8A:FE:07:DA:CA:59:15:08:AC:EC:4A:10:0C:04:B8:C9:EB
            X509v3 Authority Key Identifier:
                keyid:A7:5E:D3:D3:A2:71:19:AD:36:2E:74:5F:2E:0E:C1:79:50:53:29:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uEjBDAkwaG1DKGRuzD4VfFpeQ4JhKMDRhBzf9oYpQBf/1/A75ED3D3A27119AD362E745F2E0EC17950532980.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A75ED3D3A27119AD362E745F2E0EC17950532980.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uEjBDAkwaG1DKGRuzD4VfFpeQ4JhKMDRhBzf9oYpQBf/1/34352e342e33372e302f32342d3234203d3e20323636303435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:9f:b1:b3:0e:fd:bd:6c:fd:91:36:75:c0:ea:32:22:15:91:
         b1:09:71:14:e3:d7:5b:0b:11:00:7b:05:03:ec:bc:82:ae:48:
         c6:39:08:ce:7c:84:e9:83:54:23:21:6a:a3:c4:7c:25:57:d6:
         ad:09:68:e3:23:ca:ab:9f:44:7a:cc:1d:dd:58:5c:9c:33:ec:
         f1:66:1e:c0:a5:09:ea:7a:0f:6c:08:b8:c5:e0:21:a2:a7:f2:
         99:46:d8:6f:03:c0:17:83:78:7f:3c:06:06:7e:81:25:b7:7d:
         2a:d4:74:1f:e1:57:f0:26:86:e0:f2:b7:c9:2c:5e:54:53:6b:
         f1:e6:a3:2c:a4:2f:c4:ee:a8:a1:08:d4:ba:f7:e5:61:71:21:
         26:4f:58:9b:a1:aa:89:e9:f7:aa:37:4d:b3:46:96:1e:b5:1c:
         ad:6d:a9:15:1e:70:da:e2:d9:bf:cc:b4:89:52:8d:92:db:a6:
         cf:94:42:1e:24:e6:ec:53:fc:fa:71:d5:42:9b:13:47:02:d9:
         de:06:56:43:cd:7b:2f:b9:e5:96:65:3f:73:e5:00:c4:c9:7f:
         11:04:9a:74:f8:69:c3:4f:9d:6b:02:db:23:10:a6:2b:a2:7c:
         98:25:0e:f2:91:ce:06:46:f4:16:4c:15:14:e0:2b:b6:00:2d:
         ba:0a:c3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----