Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ACCMypgnM2Z3bXc5GUxfyaeeu2r9FARFGQjCT9vLppF7/0/34352e3139312e36382e302f32332d3233203d3e20323639363738.roa
File:                     34352e3139312e36382e302f32332d3233203d3e20323639363738.roa (raw, json)
Hash identifier:          r3sO4Gwk3H4XwNSQwMJkt/Fb7WokSYYbO1MHEQ2RfBk=
Subject key identifier:   82:72:E5:71:00:78:E3:C5:A7:A6:77:4B:D0:0B:F2:ED:A8:69:43:9C
Certificate issuer:       /CN=5C61273BB685DE7F44069647C170414CE4D28714
Certificate serial:       61DB244956AB1901635CAA0A565FD00F34E98791
Authority key identifier: 5C:61:27:3B:B6:85:DE:7F:44:06:96:47:C1:70:41:4C:E4:D2:87:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C61273BB685DE7F44069647C170414CE4D28714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ACCMypgnM2Z3bXc5GUxfyaeeu2r9FARFGQjCT9vLppF7/0/34352e3139312e36382e302f32332d3233203d3e20323639363738.roa
Signing time:             Tue 03 Feb 2026 19:52:50 +0000
ROA not before:           Tue 03 Feb 2026 19:47:50 +0000
ROA not after:            Tue 02 Feb 2027 19:52:50 +0000
asID:                     269678
IP address blocks:        45.191.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ACCMypgnM2Z3bXc5GUxfyaeeu2r9FARFGQjCT9vLppF7/0/5C61273BB685DE7F44069647C170414CE4D28714.crl
                          rsync://rpki-repo.registro.br/repo/ACCMypgnM2Z3bXc5GUxfyaeeu2r9FARFGQjCT9vLppF7/0/5C61273BB685DE7F44069647C170414CE4D28714.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C61273BB685DE7F44069647C170414CE4D28714.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 19:47:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:db:24:49:56:ab:19:01:63:5c:aa:0a:56:5f:d0:0f:34:e9:87:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C61273BB685DE7F44069647C170414CE4D28714
        Validity
            Not Before: Feb  3 19:47:50 2026 GMT
            Not After : Feb  2 19:52:50 2027 GMT
        Subject: CN=8272E5710078E3C5A7A6774BD00BF2EDA869439C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a0:18:22:e7:e4:db:47:32:04:4b:1c:d5:7e:
                    02:cb:32:9a:fd:1a:b7:a4:02:f3:22:89:8b:e6:4b:
                    42:e3:10:ca:0e:df:d1:95:ae:3e:1a:48:d5:89:6f:
                    c6:51:c1:83:bb:f1:df:ba:e1:ce:e6:e2:85:d8:d8:
                    91:29:c2:15:6e:eb:74:2c:23:e0:9f:58:51:ca:73:
                    16:30:1a:60:ab:1d:89:e2:0e:37:af:e1:48:97:ea:
                    06:52:2f:94:d0:ba:a7:34:90:dd:94:e4:c5:cc:e2:
                    4a:ef:87:64:9a:45:9f:26:70:13:dc:4f:5e:3c:af:
                    6c:f9:75:c9:5f:53:5c:73:1a:eb:f2:44:2a:a1:f9:
                    3b:96:b5:ae:9d:2c:45:cb:03:7d:59:be:65:2b:c0:
                    ab:43:61:f7:3d:8a:fd:93:9d:8a:28:2c:82:1b:4c:
                    9c:05:c5:ef:93:53:b1:61:1e:af:22:ad:56:79:ea:
                    75:57:38:6f:52:8f:dc:be:52:55:f1:cd:4e:64:00:
                    75:e4:69:93:ed:ec:b4:b3:ce:fa:e8:ba:6d:20:0b:
                    73:0a:f6:66:66:37:96:96:9e:7a:1a:c6:81:10:fa:
                    9a:73:79:85:bc:e4:fa:a1:6a:f5:b7:52:86:01:4b:
                    59:2c:e0:a1:25:9a:84:ac:0c:3b:f9:14:de:77:63:
                    6e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:72:E5:71:00:78:E3:C5:A7:A6:77:4B:D0:0B:F2:ED:A8:69:43:9C
            X509v3 Authority Key Identifier:
                keyid:5C:61:27:3B:B6:85:DE:7F:44:06:96:47:C1:70:41:4C:E4:D2:87:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ACCMypgnM2Z3bXc5GUxfyaeeu2r9FARFGQjCT9vLppF7/0/5C61273BB685DE7F44069647C170414CE4D28714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C61273BB685DE7F44069647C170414CE4D28714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ACCMypgnM2Z3bXc5GUxfyaeeu2r9FARFGQjCT9vLppF7/0/34352e3139312e36382e302f32332d3233203d3e20323639363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:e9:3d:9b:1e:14:dc:61:0a:3e:9b:b5:9d:0c:13:fd:a9:d6:
         ed:be:c6:b6:96:55:19:bc:5d:f7:f4:61:38:dd:dc:c8:bd:55:
         53:43:94:d6:c0:77:ba:5f:a5:dd:da:92:13:07:96:db:31:f8:
         36:07:fe:57:7a:56:93:ba:d9:3d:a9:c5:5e:ad:2a:36:84:36:
         d8:b8:07:6e:3b:48:d3:41:6c:f4:12:a2:11:13:19:2f:4a:8f:
         55:13:c0:7a:96:00:0a:ab:ee:ed:5f:f1:68:03:02:cd:60:20:
         1e:0f:ce:3e:b5:d5:82:a5:a5:ba:c6:1d:b7:90:87:90:ab:f7:
         79:17:66:aa:c4:dc:a1:97:cc:4c:2e:63:12:fb:98:fb:19:5f:
         38:25:ec:76:85:8b:f4:2a:70:f4:bc:72:15:f8:bd:2b:65:ce:
         65:bb:6d:79:8e:53:b4:2f:f6:7f:8f:75:fc:ca:a3:0d:87:e8:
         7a:02:6e:a4:d7:6a:35:25:dc:e3:e3:68:c0:36:4f:84:14:bb:
         26:4a:6d:cd:5f:c1:43:f0:aa:81:63:5d:c4:7c:08:a8:87:99:
         a8:e9:08:30:cb:0c:8c:47:05:06:a0:38:71:5d:0e:96:38:96:
         98:ae:74:e0:23:90:7f:40:49:d8:66:7a:0f:83:27:de:4e:0b:
         6b:6d:37:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:46:30 2026 by rpki-client