Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3233302e302f32342d3234203d3e20323632353033.roa
File:                     34352e3138312e3233302e302f32342d3234203d3e20323632353033.roa (raw, json)
Hash identifier:          90voCxQiLeMNSUQYAr5hOp8NaAOvfZKYtSPZRtNHEPs=
Subject key identifier:   1C:19:E6:24:C0:48:8D:44:D4:37:DC:B2:11:7A:E8:13:5C:C4:89:9E
Certificate issuer:       /CN=D81C632D11CBA93C6FA08E30C713D5A272098906
Certificate serial:       1788EF6EAAF083FA2C93A6DF6E92FA1013DEF28E
Authority key identifier: D8:1C:63:2D:11:CB:A9:3C:6F:A0:8E:30:C7:13:D5:A2:72:09:89:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81C632D11CBA93C6FA08E30C713D5A272098906.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3233302e302f32342d3234203d3e20323632353033.roa
Signing time:             Sun 18 Oct 2026 13:33:45 +0000
ROA not before:           Sun 18 Oct 2026 13:28:45 +0000
ROA not after:            Sun 17 Oct 2027 13:33:45 +0000
asID:                     262503
IP address blocks:        45.181.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/D81C632D11CBA93C6FA08E30C713D5A272098906.crl
                          rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/D81C632D11CBA93C6FA08E30C713D5A272098906.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81C632D11CBA93C6FA08E30C713D5A272098906.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 20:13:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:88:ef:6e:aa:f0:83:fa:2c:93:a6:df:6e:92:fa:10:13:de:f2:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D81C632D11CBA93C6FA08E30C713D5A272098906
        Validity
            Not Before: Oct 18 13:28:45 2026 GMT
            Not After : Oct 17 13:33:45 2027 GMT
        Subject: CN=1C19E624C0488D44D437DCB2117AE8135CC4899E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3d:8b:14:95:85:ce:cc:73:5d:4c:35:60:47:
                    89:5e:55:fc:f0:32:a8:54:76:27:3a:7d:7a:17:49:
                    f1:ad:d2:e5:6b:db:79:fd:c1:67:24:c4:55:a7:12:
                    1d:60:e8:67:66:4e:e0:db:48:09:8f:69:a6:03:60:
                    13:3d:75:37:df:d1:9d:d9:33:8e:20:fb:c4:98:ac:
                    66:33:50:b3:fd:2d:de:65:69:89:40:71:44:fb:5c:
                    57:a3:ff:71:24:57:57:04:6f:93:e7:06:8c:b8:95:
                    83:51:c0:d2:d3:bf:27:51:13:c3:33:49:af:61:a0:
                    fe:d5:8c:60:4e:71:1c:90:22:a8:05:70:f9:44:8f:
                    47:88:a1:14:54:ef:ea:43:f7:31:57:9e:0d:de:28:
                    8a:23:20:fa:26:6a:b8:b1:9c:92:e9:8d:a1:ff:cd:
                    07:67:93:85:ab:0d:54:6a:68:fb:18:df:e3:2b:a3:
                    94:31:85:f9:15:e6:e5:2f:f1:1e:84:93:13:0e:c4:
                    ce:83:17:4b:30:a5:17:0c:1c:43:0c:10:b5:dc:f2:
                    65:34:a6:bf:7d:04:6c:14:b7:cb:fa:dd:9b:fc:9e:
                    b3:a2:ff:50:70:f9:a2:77:ce:5c:2a:3c:5d:2e:c2:
                    8b:67:d8:c5:84:96:20:d5:02:4e:ae:33:a7:25:3a:
                    aa:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:19:E6:24:C0:48:8D:44:D4:37:DC:B2:11:7A:E8:13:5C:C4:89:9E
            X509v3 Authority Key Identifier:
                keyid:D8:1C:63:2D:11:CB:A9:3C:6F:A0:8E:30:C7:13:D5:A2:72:09:89:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/D81C632D11CBA93C6FA08E30C713D5A272098906.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81C632D11CBA93C6FA08E30C713D5A272098906.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3233302e302f32342d3234203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:12:20:c2:ff:8a:70:69:f1:bf:8e:e2:e5:f2:bc:c9:a0:63:
         1e:94:3e:f2:e5:d4:62:36:5e:53:92:0e:01:fb:c1:97:8b:03:
         34:77:df:9d:95:12:27:43:98:67:57:eb:b9:af:0d:7f:7a:81:
         a8:da:dc:ab:67:e0:4b:c9:36:6f:ef:f6:14:68:eb:7b:9a:9a:
         26:f2:21:99:18:eb:5f:5b:eb:7b:d6:e5:ae:43:80:f6:dc:16:
         de:99:38:21:ef:97:29:4c:4e:50:0a:6c:a5:2a:10:d0:67:95:
         2f:0d:04:f4:45:5c:04:dd:fc:c3:ac:aa:ce:21:68:c9:86:f4:
         6f:4b:cb:32:79:87:b7:d9:7d:7d:60:4f:5a:c3:11:c0:20:13:
         fa:47:dc:64:a3:46:66:f3:59:84:75:e0:b6:f5:da:50:07:ba:
         38:70:09:20:98:83:79:36:b6:a9:df:09:97:1c:60:60:5e:6e:
         58:e7:91:3f:5a:7d:35:09:a9:88:90:59:89:cd:41:17:17:67:
         1c:09:44:a7:66:96:08:25:37:ad:5e:2d:1a:5c:0d:55:77:ca:
         cc:f9:fa:dd:37:c3:18:84:83:94:18:ae:c2:09:80:0c:63:ce:
         07:b8:02:2b:09:ee:a9:d8:df:21:26:31:51:95:81:7b:61:6a:
         3f:5f:74:53
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUF4jvbqrwg/osk6bfbpL6EBPe8o4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDgxQzYzMkQxMUNCQTkzQzZGQTA4RTMwQzcxM0Q1QTI3
MjA5ODkwNjAeFw0yNjEwMTgxMzI4NDVaFw0yNzEwMTcxMzMzNDVaMDMxMTAvBgNV
BAMTKDFDMTlFNjI0QzA0ODhENDRENDM3RENCMjExN0FFODEzNUNDNDg5OUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdPYsUlYXOzHNdTDVgR4leVfzw
MqhUdic6fXoXSfGt0uVr23n9wWckxFWnEh1g6GdmTuDbSAmPaaYDYBM9dTff0Z3Z
M44g+8SYrGYzULP9Ld5laYlAcUT7XFej/3EkV1cEb5PnBoy4lYNRwNLTvydRE8Mz
Sa9hoP7VjGBOcRyQIqgFcPlEj0eIoRRU7+pD9zFXng3eKIojIPomarixnJLpjaH/
zQdnk4WrDVRqaPsY3+Mro5QxhfkV5uUv8R6EkxMOxM6DF0swpRcMHEMMELXc8mU0
pr99BGwUt8v63Zv8nrOi/1Bw+aJ3zlwqPF0uwotn2MWEliDVAk6uM6clOqq3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUHBnmJMBIjUTUN9yyEXroE1zEiZ4wHwYDVR0j
BBgwFoAU2BxjLRHLqTxvoI4wxxPVonIJiQYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEVvNVFNbXF0ZGltNGp3bzVBdFR1UEprUWl6UGNtV1NtOWZvUnVmWU1G
a0YvMC9EODFDNjMyRDExQ0JBOTNDNkZBMDhFMzBDNzEzRDVBMjcyMDk4OTA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4MUM2MzJEMTFDQkE5M0M2
RkEwOEUzMEM3MTNENUEyNzIwOTg5MDYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhFbzVRTW1xdGRpbTRqd281QXRUdVBKa1FpelBjbVdTbTlmb1J1ZllNRmtGLzAv
MzQzNTJlMzEzODMxMmUzMjMzMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNTMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtteYwDQYJKoZIhvcNAQELBQADggEBAHoSIML/
inBp8b+O4uXyvMmgYx6UPvLl1GI2XlOSDgH7wZeLAzR3352VEidDmGdX67mvDX96
gaja3Ktn4EvJNm/v9hRo63uamibyIZkY619b63vW5a5DgPbcFt6ZOCHvlylMTlAK
bKUqENBnlS8NBPRFXATd/MOsqs4haMmG9G9LyzJ5h7fZfX1gT1rDEcAgE/pH3GSj
RmbzWYR14Lb12lAHujhwCSCYg3k2tqnfCZccYGBebljnkT9afTUJqYiQWYnNQRcX
ZxwJRKdmlgglN61eLRpcDVV3ysz5+t03wxiEg5QYrsIJgAxjzge4AisJ7qnY3yEm
MVGVgXthaj9fdFM=
-----END CERTIFICATE-----
Generated at Thu Oct 29 07:28:53 2026 by rpki-client