Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/34352e3136382e3132302e302f32322d3332203d3e20323638363035.roa
File:                     34352e3136382e3132302e302f32322d3332203d3e20323638363035.roa (raw, json)
Hash identifier:          mMpHYrA8zY0fukLr5dx/cr9mBalOy22AESHJYqUT1A4=
Subject key identifier:   6E:C0:95:7A:1A:43:F4:42:BA:B0:35:71:CD:25:B5:0C:33:7C:37:E5
Certificate issuer:       /CN=82A12D87E7C80E5652B34EDF692F12EB79642AC3
Certificate serial:       1D6D09CC0E375D1637BD9D7A4CB6B66E9CC34EC8
Authority key identifier: 82:A1:2D:87:E7:C8:0E:56:52:B3:4E:DF:69:2F:12:EB:79:64:2A:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82A12D87E7C80E5652B34EDF692F12EB79642AC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/34352e3136382e3132302e302f32322d3332203d3e20323638363035.roa
Signing time:             Fri 14 Aug 2026 16:33:25 +0000
ROA not before:           Fri 14 Aug 2026 16:28:25 +0000
ROA not after:            Fri 13 Aug 2027 16:33:25 +0000
asID:                     268605
IP address blocks:        45.168.120.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/82A12D87E7C80E5652B34EDF692F12EB79642AC3.crl
                          rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/82A12D87E7C80E5652B34EDF692F12EB79642AC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82A12D87E7C80E5652B34EDF692F12EB79642AC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 21:29:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:6d:09:cc:0e:37:5d:16:37:bd:9d:7a:4c:b6:b6:6e:9c:c3:4e:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82A12D87E7C80E5652B34EDF692F12EB79642AC3
        Validity
            Not Before: Aug 14 16:28:25 2026 GMT
            Not After : Aug 13 16:33:25 2027 GMT
        Subject: CN=6EC0957A1A43F442BAB03571CD25B50C337C37E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3a:a5:f9:5c:4d:fc:8e:b4:49:f4:eb:bf:82:
                    4b:b3:89:28:ca:1c:72:94:3e:b0:f5:65:de:fa:d6:
                    70:b1:6f:28:a5:e2:81:c7:23:79:d9:6b:78:0e:98:
                    02:52:78:40:94:e4:1a:c2:52:07:f3:59:82:02:8f:
                    c8:7b:fb:1a:e2:f3:3b:1a:d8:86:93:f7:70:74:cb:
                    23:db:1a:6b:0f:2e:55:b3:5e:46:d6:93:42:26:d4:
                    46:b9:97:21:5d:20:12:95:7a:17:53:f4:ce:66:8a:
                    a8:55:90:45:69:73:2e:7a:db:1d:92:e1:5d:0e:98:
                    df:ea:ae:04:52:79:c5:8c:c9:8f:cc:ea:e7:1a:7f:
                    da:c9:cb:7b:39:eb:e9:3e:1b:94:21:3c:8a:dc:8b:
                    15:ab:c0:26:4b:44:38:dd:8f:e7:c1:ef:20:88:4d:
                    1e:1b:a8:71:7a:b2:fa:cc:1c:95:74:ce:ab:e6:bf:
                    76:20:a1:e4:5c:3a:a6:8a:d5:03:3f:57:a2:8e:48:
                    c9:3d:fd:6e:05:ad:35:f7:86:54:8e:30:4d:16:6f:
                    16:42:d4:c0:d1:0c:4d:63:63:e4:8f:b7:28:2e:ea:
                    92:fc:fa:bf:47:c4:b0:50:37:4a:96:e2:c7:cc:4c:
                    ae:a1:ed:35:d2:41:e7:d8:5f:2d:5a:ee:61:5b:d6:
                    f0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C0:95:7A:1A:43:F4:42:BA:B0:35:71:CD:25:B5:0C:33:7C:37:E5
            X509v3 Authority Key Identifier:
                keyid:82:A1:2D:87:E7:C8:0E:56:52:B3:4E:DF:69:2F:12:EB:79:64:2A:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/82A12D87E7C80E5652B34EDF692F12EB79642AC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82A12D87E7C80E5652B34EDF692F12EB79642AC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/34352e3136382e3132302e302f32322d3332203d3e20323638363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:c3:e4:49:00:04:3a:1f:a1:e1:7f:cd:26:b8:cb:02:9e:f3:
         a6:ed:e5:d3:e7:3f:32:f8:4b:79:34:0e:a2:97:16:96:34:86:
         96:85:78:95:48:1e:64:df:51:0b:52:ff:a8:e7:52:f4:5a:b7:
         67:f5:0f:8f:fa:c5:bf:24:9a:4c:48:87:ac:60:02:b9:a9:72:
         68:61:f6:85:65:52:a4:5e:99:40:29:24:71:4c:85:d2:65:d1:
         73:d7:00:8a:cc:3a:50:05:b8:bc:0c:3b:ca:33:53:e9:a8:5c:
         51:59:a8:8e:01:12:05:b8:1f:35:c6:2b:c7:f4:f0:63:7b:75:
         40:4d:03:d6:54:45:e6:5a:79:54:51:34:da:0b:b9:1b:8d:c3:
         2f:88:e4:01:da:25:87:dd:e7:7b:49:7b:3a:52:41:7b:cf:63:
         51:0e:f4:1b:d6:88:e7:50:a2:b4:17:e8:23:e3:29:93:cd:4a:
         48:77:5b:bd:a0:28:f9:7a:05:da:13:9f:a7:8f:c5:51:79:4e:
         4c:12:e1:2a:c0:6e:ae:e7:53:8a:24:95:5a:81:0c:53:55:d5:
         52:5b:91:42:3b:f8:02:8a:aa:45:cd:eb:4d:04:8e:ce:09:50:
         8c:56:db:91:b6:00:84:c4:9c:a2:4c:82:1a:4b:48:f0:48:9f:
         81:69:c9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 21:28:18 2026 by rpki-client