Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/34352e3232352e38312e302f32342d3234203d3e203533313037.roa
File:                     34352e3232352e38312e302f32342d3234203d3e203533313037.roa (raw, json)
Hash identifier:          EPggOdhftFvQAM5wmUJlmGjwJ2X/TGxuXxDw8hdKqzk=
Subject key identifier:   6B:1A:D6:76:87:BF:E3:1E:4B:40:B9:8E:D3:99:77:40:77:6F:5F:4D
Certificate issuer:       /CN=53A5B699AFED13BD0E022CA41D2E6E4F14DCF934
Certificate serial:       4E3449FA1FA81B87C8645F1EB4589BC9DA8C8EB8
Authority key identifier: 53:A5:B6:99:AF:ED:13:BD:0E:02:2C:A4:1D:2E:6E:4F:14:DC:F9:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53A5B699AFED13BD0E022CA41D2E6E4F14DCF934.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/34352e3232352e38312e302f32342d3234203d3e203533313037.roa
Signing time:             Sat 07 Mar 2026 21:50:56 +0000
ROA not before:           Sat 07 Mar 2026 21:45:56 +0000
ROA not after:            Sat 06 Mar 2027 21:50:56 +0000
asID:                     53107
IP address blocks:        45.225.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/53A5B699AFED13BD0E022CA41D2E6E4F14DCF934.crl
                          rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/53A5B699AFED13BD0E022CA41D2E6E4F14DCF934.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53A5B699AFED13BD0E022CA41D2E6E4F14DCF934.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Mar 2026 11:56:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:34:49:fa:1f:a8:1b:87:c8:64:5f:1e:b4:58:9b:c9:da:8c:8e:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53A5B699AFED13BD0E022CA41D2E6E4F14DCF934
        Validity
            Not Before: Mar  7 21:45:56 2026 GMT
            Not After : Mar  6 21:50:56 2027 GMT
        Subject: CN=6B1AD67687BFE31E4B40B98ED3997740776F5F4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fb:ce:14:f6:b1:2f:b3:f0:4f:5b:d7:e5:74:
                    69:e2:f2:fa:42:02:87:c7:c2:c1:43:94:f3:43:3a:
                    d9:59:8c:c0:0a:97:2c:0e:d0:76:df:21:b0:e5:16:
                    ef:eb:81:13:cc:bb:3a:c3:cf:5b:1e:4d:9b:21:03:
                    b9:cd:1e:f1:bf:a2:eb:87:16:c4:77:ff:87:7a:eb:
                    96:4c:37:83:e2:fc:ce:67:e0:60:36:5f:77:41:d5:
                    c2:12:1e:15:21:10:70:94:6c:6b:57:5c:2f:42:b0:
                    06:54:3d:1e:1f:31:b2:6e:ed:16:b3:58:92:3a:47:
                    46:a5:44:e8:be:5f:8e:ac:8c:39:f4:4a:45:cf:ca:
                    dc:7a:89:ed:e5:6b:b2:bb:ac:2f:78:e3:72:b0:fd:
                    72:4a:52:73:0e:a7:b6:21:53:b0:a5:8c:ad:13:1b:
                    1c:ab:cd:da:5b:0e:4b:f1:df:f2:03:71:34:66:00:
                    ae:f6:fd:d7:dc:5f:e0:0d:b2:69:8f:5b:df:b4:7d:
                    98:dc:31:ef:5a:36:dd:6f:57:2d:51:1f:82:04:bd:
                    00:e2:de:f2:7c:f5:77:df:d6:d1:ec:89:5a:63:70:
                    88:a7:8f:06:f5:3c:13:d7:d2:03:45:f0:a0:4f:e7:
                    88:8d:f0:d4:fe:e3:5d:9d:a2:1f:1d:78:86:cc:12:
                    8b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:1A:D6:76:87:BF:E3:1E:4B:40:B9:8E:D3:99:77:40:77:6F:5F:4D
            X509v3 Authority Key Identifier:
                keyid:53:A5:B6:99:AF:ED:13:BD:0E:02:2C:A4:1D:2E:6E:4F:14:DC:F9:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/53A5B699AFED13BD0E022CA41D2E6E4F14DCF934.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53A5B699AFED13BD0E022CA41D2E6E4F14DCF934.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/34352e3232352e38312e302f32342d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:1e:a9:5e:74:11:7e:79:66:d2:b6:ab:9e:31:4e:74:95:59:
         45:cf:d5:97:1d:84:01:9c:d6:64:50:27:e1:ed:99:80:41:a6:
         3e:6f:65:e1:78:b5:59:71:75:b4:58:be:ec:f0:2a:d1:91:47:
         80:d0:3a:64:35:8b:6e:3c:4f:fe:fc:44:37:86:f4:f1:07:e7:
         45:f1:86:49:07:09:67:d8:80:7d:a6:b6:b8:20:26:ac:c4:fa:
         f9:43:f5:ff:33:66:0a:fb:1a:2b:e6:2e:82:fd:b1:9f:c4:d7:
         2f:a2:c7:a4:a5:7c:78:0c:63:3e:5c:a5:7e:3b:61:9c:0d:f4:
         12:98:14:eb:be:a5:59:2e:aa:be:d5:09:d8:b8:7c:02:e5:4d:
         eb:61:32:bb:05:7d:28:4e:35:54:59:b1:2d:33:80:8f:b2:43:
         3b:3f:32:7f:3f:17:ea:68:71:48:6d:b4:4e:cf:eb:68:5b:5e:
         b7:25:38:80:df:46:73:c5:9c:82:8b:72:15:ee:3d:c8:8f:08:
         7e:e8:79:93:43:92:c4:43:de:22:90:16:b9:13:4b:28:dd:07:
         67:e6:6c:7b:28:d5:b3:15:02:d1:5c:59:89:a3:a7:62:5f:37:
         3f:65:6b:24:f4:38:e4:f5:08:02:e1:87:3f:b8:fd:1c:7f:fc:
         35:23:b5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 22:55:21 2026 by rpki-client