Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/34352e3138372e36362e302f32342d3234203d3e20323639353238.roa
File:                     34352e3138372e36362e302f32342d3234203d3e20323639353238.roa (raw, json)
Hash identifier:          dCUP5g05UWrMzLMbP+FAvnKQQGNsVkU4igj5o+A9wyc=
Subject key identifier:   0F:EE:5F:E8:2E:D8:87:D2:45:EE:34:D2:4F:BE:D5:A6:77:78:63:CF
Certificate issuer:       /CN=0536254B395E744767A170B2A9041042916EF407
Certificate serial:       30A35B3A01DE58C461CA4D363BC25FDC34FCEEE6
Authority key identifier: 05:36:25:4B:39:5E:74:47:67:A1:70:B2:A9:04:10:42:91:6E:F4:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0536254B395E744767A170B2A9041042916EF407.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/34352e3138372e36362e302f32342d3234203d3e20323639353238.roa
Signing time:             Fri 14 Aug 2026 21:46:49 +0000
ROA not before:           Fri 14 Aug 2026 21:41:49 +0000
ROA not after:            Fri 13 Aug 2027 21:46:49 +0000
asID:                     269528
IP address blocks:        45.187.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/0536254B395E744767A170B2A9041042916EF407.crl
                          rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/0536254B395E744767A170B2A9041042916EF407.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0536254B395E744767A170B2A9041042916EF407.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 17:17:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a3:5b:3a:01:de:58:c4:61:ca:4d:36:3b:c2:5f:dc:34:fc:ee:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0536254B395E744767A170B2A9041042916EF407
        Validity
            Not Before: Aug 14 21:41:49 2026 GMT
            Not After : Aug 13 21:46:49 2027 GMT
        Subject: CN=0FEE5FE82ED887D245EE34D24FBED5A6777863CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e9:55:b0:e3:56:b6:5f:b5:1e:94:5b:a2:3f:
                    27:4b:a0:e0:62:ae:55:02:82:10:b7:95:15:46:ed:
                    25:b6:41:4a:99:3b:71:eb:37:55:25:e4:fe:d3:02:
                    4a:86:e3:76:3c:05:52:45:5a:c0:b1:77:18:1f:b8:
                    9f:74:40:05:8a:07:03:59:43:11:14:7b:2e:5b:53:
                    62:5e:60:bf:42:fe:30:13:17:13:a7:ef:0e:cf:a3:
                    a9:62:28:a8:93:b7:22:e6:59:93:f1:03:ff:59:47:
                    82:40:a2:20:57:35:a8:97:d9:53:29:5a:bc:89:f1:
                    5e:c3:99:0b:5c:66:2c:47:88:f1:6c:e3:97:ab:27:
                    66:25:35:91:b5:f7:c8:e6:7d:b1:2a:7b:b5:b7:2a:
                    14:36:d3:38:58:66:8b:c1:bd:3a:8f:23:5d:52:a1:
                    37:ae:dc:57:c4:c6:38:b5:78:0a:c2:48:4b:e5:4e:
                    12:29:ff:19:f7:d3:4c:be:2e:36:33:7e:ea:bf:cf:
                    64:63:0b:06:8f:07:0b:40:1a:7b:b1:46:d3:72:18:
                    03:fd:91:92:5a:dd:f1:27:33:d5:a9:bc:f7:d8:48:
                    b3:e0:a7:1e:42:bb:74:d5:88:ca:27:ef:69:eb:a8:
                    80:06:ef:86:72:b4:29:6f:ad:05:bf:a8:1d:37:fc:
                    5a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:EE:5F:E8:2E:D8:87:D2:45:EE:34:D2:4F:BE:D5:A6:77:78:63:CF
            X509v3 Authority Key Identifier:
                keyid:05:36:25:4B:39:5E:74:47:67:A1:70:B2:A9:04:10:42:91:6E:F4:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/0536254B395E744767A170B2A9041042916EF407.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0536254B395E744767A170B2A9041042916EF407.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/34352e3138372e36362e302f32342d3234203d3e20323639353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:4a:e4:8e:73:c1:21:24:4b:f9:67:f4:15:8f:eb:fb:ec:48:
         1b:83:7d:4d:d1:aa:ae:f0:f9:20:22:f0:5b:99:3f:4a:2e:bf:
         c9:35:c1:0a:b1:b6:fd:a0:76:c7:85:2c:ef:a7:13:f5:55:ec:
         71:e3:94:e8:6d:34:e2:d4:2e:3a:6f:5a:b3:ff:dd:b7:d9:ea:
         ce:64:64:ea:b2:c1:45:de:c0:37:dc:3f:cb:01:bb:9f:33:56:
         71:29:c0:d5:30:28:11:ba:4a:52:0b:68:74:f1:49:83:e5:f7:
         e4:d5:e5:b6:ca:93:cc:6c:ce:09:41:cc:f6:1c:18:71:6a:a2:
         66:2f:82:ec:26:00:3e:ca:a2:b9:82:a0:ab:3b:8a:e8:ed:3c:
         ce:94:8e:d1:84:17:6e:f3:6d:63:5f:88:66:56:f9:1e:66:bb:
         2f:c7:da:64:61:37:1b:48:41:d3:55:bc:42:51:42:3e:1a:06:
         17:d6:73:4c:4e:7a:58:fd:bf:c1:8c:f4:9d:95:af:db:d3:a8:
         48:da:79:e5:7d:a2:43:ae:9c:97:1e:b3:ec:36:a3:f4:df:90:
         f1:71:db:25:1e:37:95:a6:3f:6c:82:0e:4c:96:1a:8d:0c:01:
         3b:a9:fd:eb:39:26:96:77:78:76:3c:d3:fe:ac:5e:04:69:c9:
         53:1b:e0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 08:48:09 2026 by rpki-client