Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/34352e3136342e36302e302f32322d3332203d3e20323638363035.roa
File:                     34352e3136342e36302e302f32322d3332203d3e20323638363035.roa (raw, json)
Hash identifier:          u/W+dj4x+XGhE7Qsr/S6rnrCAcUDQBGKn4ZjrBxB7y0=
Subject key identifier:   12:B5:EE:09:83:C7:1E:18:9C:1E:CE:49:67:1A:F9:FA:FE:A5:90:FF
Certificate issuer:       /CN=442198FEAAB20265DB83C6776695C4F42ABBF5BE
Certificate serial:       11A0D38797640C16C9D5E0C244333157C5CBCEC4
Authority key identifier: 44:21:98:FE:AA:B2:02:65:DB:83:C6:77:66:95:C4:F4:2A:BB:F5:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/442198FEAAB20265DB83C6776695C4F42ABBF5BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/34352e3136342e36302e302f32322d3332203d3e20323638363035.roa
Signing time:             Thu 14 May 2026 17:47:08 +0000
ROA not before:           Thu 14 May 2026 17:42:08 +0000
ROA not after:            Thu 13 May 2027 17:47:08 +0000
asID:                     268605
IP address blocks:        45.164.60.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/442198FEAAB20265DB83C6776695C4F42ABBF5BE.crl
                          rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/442198FEAAB20265DB83C6776695C4F42ABBF5BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/442198FEAAB20265DB83C6776695C4F42ABBF5BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 05:53:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a0:d3:87:97:64:0c:16:c9:d5:e0:c2:44:33:31:57:c5:cb:ce:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=442198FEAAB20265DB83C6776695C4F42ABBF5BE
        Validity
            Not Before: May 14 17:42:08 2026 GMT
            Not After : May 13 17:47:08 2027 GMT
        Subject: CN=12B5EE0983C71E189C1ECE49671AF9FAFEA590FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:97:aa:28:b7:ce:cb:ee:8f:39:97:6d:79:42:
                    59:5c:3b:3e:15:3d:87:9a:d6:86:2f:43:02:43:f3:
                    67:7b:b5:65:8f:23:a3:6b:c3:8f:40:3e:48:a6:04:
                    6b:63:e3:3b:f0:a4:9a:70:fd:64:74:67:39:18:38:
                    52:f6:25:1f:6e:8e:94:74:8e:30:9d:41:1f:df:f5:
                    98:88:ad:5a:b5:6e:03:2c:44:10:2c:e3:fc:dc:92:
                    8a:05:7e:eb:28:32:4e:5c:27:43:96:0e:bd:e1:9a:
                    ff:03:75:0b:d5:9c:5a:fd:c9:84:a3:22:b2:2a:4f:
                    c0:97:ce:06:bf:d2:c3:ff:ca:a3:fa:8b:96:b7:ee:
                    18:d1:8e:23:c1:44:a0:c9:2f:d1:7e:b4:69:8e:4d:
                    3e:79:f2:a4:bd:32:05:cb:26:c8:c1:c2:81:3e:36:
                    94:c7:06:c3:49:6c:f9:2e:10:fc:47:dc:cb:aa:da:
                    b7:fc:be:13:13:a6:96:08:59:16:af:18:39:90:70:
                    61:72:57:d7:10:61:6f:2f:39:90:e8:8b:9b:41:4e:
                    9f:32:ca:6e:f8:12:da:bd:cd:a0:5a:51:92:d8:18:
                    7f:42:68:66:40:eb:4a:18:f3:17:80:04:1a:44:cb:
                    02:7c:53:96:25:3f:56:ba:27:b1:8c:16:3f:85:43:
                    c8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B5:EE:09:83:C7:1E:18:9C:1E:CE:49:67:1A:F9:FA:FE:A5:90:FF
            X509v3 Authority Key Identifier:
                keyid:44:21:98:FE:AA:B2:02:65:DB:83:C6:77:66:95:C4:F4:2A:BB:F5:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/442198FEAAB20265DB83C6776695C4F42ABBF5BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/442198FEAAB20265DB83C6776695C4F42ABBF5BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/34352e3136342e36302e302f32322d3332203d3e20323638363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:e2:c5:e5:08:06:9e:5a:2f:1a:8a:b8:6f:c4:6d:c3:9d:21:
         36:3c:0e:25:ba:5f:62:54:a6:33:ed:be:e4:70:8e:74:7a:bf:
         4d:9a:1b:a3:c8:05:a4:bb:7b:0a:95:a7:b5:d2:27:76:b8:21:
         04:ed:37:72:b8:0e:ed:0d:f3:47:b8:7e:39:54:41:e8:84:b1:
         67:60:d0:4e:4f:48:7b:62:f7:ce:6d:87:79:18:e5:aa:37:db:
         1c:aa:40:8c:e5:d3:aa:9a:21:98:ee:3c:bf:ff:f0:6f:87:fa:
         b9:e7:9c:4a:be:05:52:df:37:d3:80:e6:85:02:0c:67:95:20:
         1e:1a:2d:06:3d:06:11:c7:cd:26:dd:f0:be:38:13:7a:a7:cf:
         ae:be:83:ff:cc:d9:87:ca:ce:d5:63:9b:a6:f9:6d:42:dd:83:
         f0:78:9b:53:d9:b3:7f:b7:2c:00:6e:5d:70:e4:e7:46:22:44:
         da:7d:c1:6b:ed:7f:93:40:a6:76:00:f5:f3:fe:d2:a6:a3:a0:
         a4:66:61:48:f1:79:64:68:01:9a:45:93:74:40:0a:0b:4b:c8:
         52:b3:d9:ca:ab:4b:fc:85:77:e6:7e:f4:de:3c:f3:58:2c:25:
         41:c6:17:5e:02:8a:dd:2f:da:b1:7f:fd:85:f4:9f:a1:71:25:
         64:f9:d3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:18:37 2026 by rpki-client