Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8uPM5hJDBym9WooeUQw1xdjhpjCP7JQ8vGUaCtorKSHu/0/34352e3232372e3230372e302f32342d3332203d3e20323637303330.roa
File:                     34352e3232372e3230372e302f32342d3332203d3e20323637303330.roa (raw, json)
Hash identifier:          pN6MCfK0OA/CkNSvvAQsB8IEXgZg+kSXatSoepzKwKg=
Subject key identifier:   21:4C:F7:89:EC:B6:B5:45:94:B8:E2:6E:B3:6A:CB:22:91:12:F4:4E
Certificate issuer:       /CN=541B978FF1E0442599DD2C4370AA37746009FC8E
Certificate serial:       5847FBA31CE5DC166D91063D24DB9C72B56ADECD
Authority key identifier: 54:1B:97:8F:F1:E0:44:25:99:DD:2C:43:70:AA:37:74:60:09:FC:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/541B978FF1E0442599DD2C4370AA37746009FC8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8uPM5hJDBym9WooeUQw1xdjhpjCP7JQ8vGUaCtorKSHu/0/34352e3232372e3230372e302f32342d3332203d3e20323637303330.roa
Signing time:             Wed 19 Aug 2026 12:44:16 +0000
ROA not before:           Wed 19 Aug 2026 12:39:16 +0000
ROA not after:            Wed 18 Aug 2027 12:44:16 +0000
asID:                     267030
IP address blocks:        45.227.207.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8uPM5hJDBym9WooeUQw1xdjhpjCP7JQ8vGUaCtorKSHu/0/541B978FF1E0442599DD2C4370AA37746009FC8E.crl
                          rsync://rpki-repo.registro.br/repo/8uPM5hJDBym9WooeUQw1xdjhpjCP7JQ8vGUaCtorKSHu/0/541B978FF1E0442599DD2C4370AA37746009FC8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/541B978FF1E0442599DD2C4370AA37746009FC8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 17:25:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:47:fb:a3:1c:e5:dc:16:6d:91:06:3d:24:db:9c:72:b5:6a:de:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=541B978FF1E0442599DD2C4370AA37746009FC8E
        Validity
            Not Before: Aug 19 12:39:16 2026 GMT
            Not After : Aug 18 12:44:16 2027 GMT
        Subject: CN=214CF789ECB6B54594B8E26EB36ACB229112F44E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a7:99:a5:3e:68:e5:03:e2:4e:7c:7c:d0:3d:
                    19:cb:ef:05:21:67:19:ba:fd:90:27:d6:eb:d3:fa:
                    d5:af:ac:00:06:6b:e7:81:57:8b:df:8d:e6:9c:92:
                    c1:20:7f:a4:b6:d9:94:5c:49:cf:68:47:79:b7:e9:
                    7e:6e:dd:9e:07:96:ea:17:96:08:6a:96:1d:e3:52:
                    17:89:0a:31:a9:12:e0:2d:eb:f7:92:e9:a2:20:6b:
                    2e:9b:67:8b:9a:ea:55:0a:dc:38:df:8d:53:50:e7:
                    81:1a:2f:c4:ad:75:20:c4:62:e4:26:71:a8:f4:a5:
                    fe:06:40:d5:59:64:54:fa:6e:76:61:08:cb:e3:c8:
                    90:9b:c8:f6:f6:1f:7e:d2:0e:8a:a9:a7:59:c6:c6:
                    eb:37:75:2e:ee:89:9f:fc:24:c9:bb:5e:67:e6:d0:
                    b5:0e:45:26:97:83:61:d0:33:47:52:55:94:84:99:
                    c9:0e:29:15:be:db:43:11:b9:1a:90:65:5e:5a:32:
                    7f:97:bc:3a:53:a6:c1:61:91:52:f2:c4:c5:4e:25:
                    4c:6e:cf:06:aa:3a:88:2f:0f:62:26:0e:73:ca:cf:
                    6b:dd:ff:cb:44:31:94:a1:3e:ca:eb:9e:79:bc:ee:
                    ce:88:c0:c1:a9:50:3f:3f:66:51:58:a3:a1:35:1c:
                    61:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:4C:F7:89:EC:B6:B5:45:94:B8:E2:6E:B3:6A:CB:22:91:12:F4:4E
            X509v3 Authority Key Identifier:
                keyid:54:1B:97:8F:F1:E0:44:25:99:DD:2C:43:70:AA:37:74:60:09:FC:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8uPM5hJDBym9WooeUQw1xdjhpjCP7JQ8vGUaCtorKSHu/0/541B978FF1E0442599DD2C4370AA37746009FC8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/541B978FF1E0442599DD2C4370AA37746009FC8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uPM5hJDBym9WooeUQw1xdjhpjCP7JQ8vGUaCtorKSHu/0/34352e3232372e3230372e302f32342d3332203d3e20323637303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:43:77:38:3f:7d:ba:2b:d7:bf:42:dd:4a:27:d3:34:26:28:
         26:86:94:ed:67:b1:04:c4:88:62:0c:cb:0d:7e:bb:b9:63:b4:
         e7:f3:38:92:f5:04:de:06:ca:71:7e:01:ae:9d:dd:16:3f:d4:
         cb:56:6d:f1:2f:7e:28:7a:f8:4e:d0:b2:36:5c:42:29:7c:bd:
         e0:61:6c:d4:52:b0:ec:d2:7d:20:e4:62:d3:42:cb:ef:fc:b7:
         e2:d4:b4:88:58:d0:90:c4:84:5b:32:ae:ec:4d:5f:68:d0:00:
         c2:f3:59:cf:f3:09:95:8f:6a:27:f6:6d:d9:de:db:20:a6:c4:
         a0:c1:be:03:bf:1a:b6:d3:69:a0:9d:84:93:6e:b5:69:28:0f:
         87:b9:ff:f3:5b:1d:c7:b5:ce:d9:4a:ed:48:b3:58:49:00:7c:
         6c:8f:65:2a:63:17:d8:19:e4:f1:6a:8e:74:fb:24:92:60:1e:
         3a:8f:19:4d:52:00:d0:44:64:21:57:47:d3:e1:0e:69:72:bc:
         ef:b8:08:7d:bf:af:ba:ba:48:c5:7b:b8:49:f8:c4:58:66:b6:
         13:36:f5:3f:03:81:23:0d:fa:d1:41:83:69:fb:ab:7f:f6:45:
         b5:09:b1:04:c1:cb:89:b3:da:c8:3e:a7:e2:39:31:4c:49:2d:
         5a:8e:00:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:14:03 2026 by rpki-client