Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/34352e3232372e3132302e302f32332d3233203d3e203533303437.roa
File:                     34352e3232372e3132302e302f32332d3233203d3e203533303437.roa (raw, json)
Hash identifier:          Z6lFCC3pGFlv59TQf2hQUQAdgG3h20K9/HspNkDtGVk=
Subject key identifier:   74:5D:39:1E:E0:41:12:83:2F:6E:8C:29:47:9A:46:50:4E:6E:2C:0B
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       0484FF9DB8F141B5B455E14AE4385A7EDFF09E5B
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/34352e3232372e3132302e302f32332d3233203d3e203533303437.roa
Signing time:             Thu 13 Aug 2026 16:50:00 +0000
ROA not before:           Thu 13 Aug 2026 16:45:00 +0000
ROA not after:            Thu 12 Aug 2027 16:50:00 +0000
asID:                     53047
IP address blocks:        45.227.120.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 08:18:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:84:ff:9d:b8:f1:41:b5:b4:55:e1:4a:e4:38:5a:7e:df:f0:9e:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Aug 13 16:45:00 2026 GMT
            Not After : Aug 12 16:50:00 2027 GMT
        Subject: CN=745D391EE04112832F6E8C29479A46504E6E2C0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:8f:bd:37:4b:5d:f3:e7:96:94:00:8b:8a:35:
                    a5:a0:50:2c:e4:2e:ea:6b:2d:ac:6c:39:40:e7:63:
                    ce:5f:ca:3a:8f:c8:65:09:d6:99:24:8d:90:05:84:
                    d8:3d:ad:eb:1d:a2:ae:37:93:9f:a9:3c:dc:b2:82:
                    73:3b:b7:1d:bc:99:87:7c:de:0e:d5:79:51:f9:fa:
                    1a:b8:34:e4:63:d6:42:bb:84:d4:73:e5:e2:65:5b:
                    b5:fd:d8:51:8b:42:09:5d:69:7c:d5:ec:5f:29:fa:
                    97:e2:56:89:14:38:94:a8:05:36:33:3b:cd:7a:2b:
                    cd:fc:e3:23:cf:36:20:74:44:88:e7:34:22:fc:97:
                    d4:0e:0e:f1:cd:74:a9:23:ff:96:c1:3e:1a:d6:81:
                    35:07:d5:33:18:0b:2b:6f:9b:5b:9f:7e:75:34:4d:
                    df:49:3b:74:dc:9f:30:0f:61:4b:93:44:38:bd:9c:
                    17:44:a1:f6:8a:87:f1:53:69:38:d2:2e:58:af:53:
                    35:f9:eb:d7:03:5e:5b:7e:63:dd:02:4f:51:97:c9:
                    3a:ba:03:78:33:15:fb:fc:bf:90:95:77:12:07:b9:
                    90:bc:39:60:9a:70:01:64:83:db:06:eb:94:f8:5a:
                    37:e5:a8:b4:76:80:53:04:fc:52:3b:d2:92:e2:f9:
                    08:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:5D:39:1E:E0:41:12:83:2F:6E:8C:29:47:9A:46:50:4E:6E:2C:0B
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/34352e3232372e3132302e302f32332d3233203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c1:33:da:96:ff:fd:81:3d:48:6a:24:07:3c:9d:61:28:2e:11:
         22:9e:eb:a3:69:65:ef:95:b9:0c:bd:f5:cd:d5:d5:ea:2a:00:
         87:3f:24:a6:61:91:17:b6:8b:71:50:f9:76:14:db:6e:25:78:
         71:00:ca:8f:21:2c:33:02:b5:79:9d:df:a9:29:41:91:f4:f0:
         13:29:e7:44:d0:2a:38:a1:5e:39:39:7c:9d:fd:c5:72:3e:fc:
         d1:8f:7a:e0:5e:76:7a:7b:24:68:56:cc:81:1e:c3:06:c0:26:
         85:c3:8d:1d:83:b3:a8:ae:82:cb:1b:a8:21:c0:25:d0:1c:b9:
         02:e6:5e:7e:50:3e:54:66:32:b1:4c:4c:9e:11:6d:d4:12:31:
         84:1d:08:3a:d6:c2:62:4f:f7:b3:0f:fa:b2:7f:d5:42:e4:5f:
         77:d7:80:b7:f5:b0:3f:3f:ab:f7:b2:c0:27:41:09:9e:ac:18:
         01:f0:32:02:f0:64:c7:8a:17:cd:77:f8:1f:e9:dc:42:e3:8d:
         00:45:ce:6e:c7:98:47:bb:92:55:90:6c:83:34:de:a6:e4:71:
         df:c8:66:6a:26:b0:ee:bc:67:0f:04:3b:77:c9:cd:d8:5f:64:
         93:59:fe:47:b1:3a:79:37:5e:36:34:12:1f:39:04:be:b7:e9:
         fd:bb:3d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 12:55:43 2026 by rpki-client