Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/34352e3138372e3232342e302f32322d3234203d3e20323639353036.roa
File:                     34352e3138372e3232342e302f32322d3234203d3e20323639353036.roa (raw, json)
Hash identifier:          /x4NSzkiVUQyu7/3wY2KAI1XRH3j0VH3scaYTGZ04kU=
Subject key identifier:   4B:36:62:B0:D9:18:EB:97:A7:80:62:72:46:1F:51:FB:AD:B7:96:C7
Certificate issuer:       /CN=FEB32A1F9E346C730274833B3480FD499BD027A1
Certificate serial:       48ED1BD6ED4E7DC688060A336688EC1F7B29D438
Authority key identifier: FE:B3:2A:1F:9E:34:6C:73:02:74:83:3B:34:80:FD:49:9B:D0:27:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEB32A1F9E346C730274833B3480FD499BD027A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/34352e3138372e3232342e302f32322d3234203d3e20323639353036.roa
Signing time:             Mon 19 Oct 2026 03:35:04 +0000
ROA not before:           Mon 19 Oct 2026 03:30:04 +0000
ROA not after:            Mon 18 Oct 2027 03:35:04 +0000
asID:                     269506
IP address blocks:        45.187.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/FEB32A1F9E346C730274833B3480FD499BD027A1.crl
                          rsync://rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/FEB32A1F9E346C730274833B3480FD499BD027A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEB32A1F9E346C730274833B3480FD499BD027A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 23:17:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ed:1b:d6:ed:4e:7d:c6:88:06:0a:33:66:88:ec:1f:7b:29:d4:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEB32A1F9E346C730274833B3480FD499BD027A1
        Validity
            Not Before: Oct 19 03:30:04 2026 GMT
            Not After : Oct 18 03:35:04 2027 GMT
        Subject: CN=4B3662B0D918EB97A7806272461F51FBADB796C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:79:af:78:09:6b:2c:51:df:28:83:26:6b:48:
                    ef:5c:62:93:7c:12:5e:56:fd:c7:89:d1:2a:fc:d2:
                    bf:74:4d:01:55:64:ef:46:13:47:f7:15:fb:f8:c6:
                    82:a1:04:fc:af:ad:94:26:e1:1b:e9:3b:9a:69:3c:
                    e6:80:90:50:d2:c2:95:be:4f:d1:39:80:1a:0c:ae:
                    b4:05:56:5a:3c:4c:2e:5d:ec:97:a2:8f:a3:70:dd:
                    e0:90:b6:b4:41:0d:9f:b5:ae:11:0d:46:cf:a3:0c:
                    4c:70:da:d8:90:04:87:bf:84:f0:e6:0d:4a:ed:b0:
                    fa:8c:d4:c2:35:3d:d8:25:c9:d5:93:68:4d:f2:33:
                    cb:44:17:50:8e:aa:57:5d:54:29:d8:c9:90:3a:d2:
                    6c:39:27:0a:0b:cd:18:92:1c:4b:88:e4:27:47:2e:
                    df:b2:03:14:b0:ef:4f:71:9e:f4:6d:0d:31:a3:a0:
                    1a:ef:6b:5f:b8:9a:b1:f7:ae:e9:5d:54:e9:96:08:
                    7a:a9:08:b0:ae:b2:22:0d:0a:23:78:23:42:55:f5:
                    c6:54:e4:1a:de:66:b5:52:ab:c4:86:6e:4a:4d:29:
                    a6:a2:a4:a5:51:cc:6f:01:e9:ed:ca:66:10:61:21:
                    89:0b:fe:49:e0:ea:66:e1:c3:86:51:b4:c9:ee:d1:
                    c5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:36:62:B0:D9:18:EB:97:A7:80:62:72:46:1F:51:FB:AD:B7:96:C7
            X509v3 Authority Key Identifier:
                keyid:FE:B3:2A:1F:9E:34:6C:73:02:74:83:3B:34:80:FD:49:9B:D0:27:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/FEB32A1F9E346C730274833B3480FD499BD027A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEB32A1F9E346C730274833B3480FD499BD027A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/34352e3138372e3232342e302f32322d3234203d3e20323639353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:eb:d1:70:34:eb:b2:02:d1:73:10:17:b2:e1:e9:92:0d:e8:
         c7:5d:40:87:28:e7:d6:63:58:7a:da:dc:af:6c:12:79:de:f3:
         a2:b0:b2:f4:0f:1a:19:f9:c9:33:ea:9b:c1:ae:94:3e:c1:6b:
         c7:e6:db:cb:37:78:1d:ad:dd:d6:1a:5f:3e:e7:42:33:47:ff:
         2b:89:4d:6c:7c:b2:15:fc:1e:cf:f9:e8:44:9d:ce:6a:86:b6:
         2c:08:73:3f:10:15:bd:28:e0:02:de:80:cc:38:33:29:2e:c4:
         cf:ab:00:ed:28:72:ac:73:ed:48:fa:9e:9f:31:9f:fb:95:5a:
         9b:4d:d9:92:d1:72:89:c6:43:3b:14:5b:d8:a0:86:24:c3:98:
         dd:4b:df:f7:84:14:9b:d9:3e:0e:9f:59:7e:41:ca:37:19:39:
         36:19:11:7f:f0:e1:ae:6c:d9:ef:af:ef:76:77:6b:56:00:87:
         e6:cb:6f:c8:48:26:89:9b:70:ff:f9:ee:94:ec:e6:6f:81:51:
         11:1a:ff:29:ce:5a:0c:91:b7:c3:e8:21:1b:ff:a3:aa:f1:fa:
         53:eb:67:27:92:de:79:6f:ba:6c:98:2f:57:bb:68:c7:c1:fe:
         9a:77:b5:19:fb:63:73:1d:65:be:ea:ea:87:c1:54:2d:a4:e7:
         c4:53:bc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 04:18:11 2026 by rpki-client