Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ACCMypgnM2Z3bXc5GUxfyaeeu2r9FARFGQjCT9vLppF7/0/34352e3139312e37312e302f32342d3234203d3e20323639363738.roa
File:                     34352e3139312e37312e302f32342d3234203d3e20323639363738.roa (raw, json)
Hash identifier:          Py4VaksAjZIsCAlW86cjNl/iEdo07w9AJ6A1yU8uQJQ=
Subject key identifier:   1C:5F:3A:FD:B8:96:FE:EC:FC:6A:88:77:F0:C7:43:C5:07:73:BC:C6
Certificate issuer:       /CN=5C61273BB685DE7F44069647C170414CE4D28714
Certificate serial:       1F6EE6BB83BFF934C67B2E7943D16B3251BB4FB5
Authority key identifier: 5C:61:27:3B:B6:85:DE:7F:44:06:96:47:C1:70:41:4C:E4:D2:87:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C61273BB685DE7F44069647C170414CE4D28714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ACCMypgnM2Z3bXc5GUxfyaeeu2r9FARFGQjCT9vLppF7/0/34352e3139312e37312e302f32342d3234203d3e20323639363738.roa
Signing time:             Tue 03 Feb 2026 19:52:51 +0000
ROA not before:           Tue 03 Feb 2026 19:47:51 +0000
ROA not after:            Tue 02 Feb 2027 19:52:51 +0000
asID:                     269678
IP address blocks:        45.191.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ACCMypgnM2Z3bXc5GUxfyaeeu2r9FARFGQjCT9vLppF7/0/5C61273BB685DE7F44069647C170414CE4D28714.crl
                          rsync://rpki-repo.registro.br/repo/ACCMypgnM2Z3bXc5GUxfyaeeu2r9FARFGQjCT9vLppF7/0/5C61273BB685DE7F44069647C170414CE4D28714.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C61273BB685DE7F44069647C170414CE4D28714.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 19:47:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:6e:e6:bb:83:bf:f9:34:c6:7b:2e:79:43:d1:6b:32:51:bb:4f:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C61273BB685DE7F44069647C170414CE4D28714
        Validity
            Not Before: Feb  3 19:47:51 2026 GMT
            Not After : Feb  2 19:52:51 2027 GMT
        Subject: CN=1C5F3AFDB896FEECFC6A8877F0C743C50773BCC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:40:7c:f6:02:5d:96:76:c6:dd:08:cb:19:2d:
                    2c:2e:62:a2:7f:c2:07:90:18:32:03:df:b5:1a:1d:
                    4c:45:19:5b:5c:b1:2e:a4:eb:72:26:d8:23:bd:04:
                    db:1e:9d:87:e5:0d:b6:99:63:5c:0b:b2:ba:93:ec:
                    b8:de:59:69:93:d7:a7:6e:48:0d:f2:79:6b:ba:2b:
                    5a:48:f2:48:0d:6c:36:a3:b8:60:36:1a:c3:de:95:
                    17:11:9c:ac:63:24:b8:bc:42:c5:33:d3:7c:56:49:
                    14:95:c7:cc:ba:5c:42:4b:1e:b3:fc:b1:dc:a9:5a:
                    7a:f6:d4:a8:5a:13:74:c5:f6:a3:f3:01:f3:18:46:
                    89:d5:13:22:aa:5c:62:55:63:eb:84:7f:06:37:d0:
                    c2:1d:28:fb:43:2c:24:f7:b8:2a:0d:80:26:67:04:
                    67:d8:b1:bf:4b:ed:f3:a7:df:ec:61:b8:d3:3f:95:
                    e4:c8:4b:48:b9:b1:53:ea:bc:4b:32:6c:fe:29:8e:
                    76:3f:f3:dc:7d:bc:dd:fc:84:08:38:2b:63:0a:96:
                    fb:a6:1a:7a:a7:e4:59:79:ba:eb:c5:ee:4c:02:fd:
                    ea:97:b5:49:54:04:45:06:ad:05:ef:50:78:af:50:
                    41:c5:ee:d1:a6:5b:db:ca:b0:22:87:7a:af:0a:d4:
                    25:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:5F:3A:FD:B8:96:FE:EC:FC:6A:88:77:F0:C7:43:C5:07:73:BC:C6
            X509v3 Authority Key Identifier:
                keyid:5C:61:27:3B:B6:85:DE:7F:44:06:96:47:C1:70:41:4C:E4:D2:87:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ACCMypgnM2Z3bXc5GUxfyaeeu2r9FARFGQjCT9vLppF7/0/5C61273BB685DE7F44069647C170414CE4D28714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C61273BB685DE7F44069647C170414CE4D28714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ACCMypgnM2Z3bXc5GUxfyaeeu2r9FARFGQjCT9vLppF7/0/34352e3139312e37312e302f32342d3234203d3e20323639363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:1e:22:75:fd:42:6c:16:d7:78:5c:56:7b:de:9c:aa:0a:9f:
         f4:8f:2b:5a:9f:67:68:f5:f4:c6:88:af:de:ea:f9:af:f2:ed:
         5a:da:86:83:bc:9c:a4:78:cd:aa:83:23:2b:51:c5:d5:9a:ec:
         f2:ae:52:f1:61:88:11:77:5c:6b:58:17:56:85:84:1d:5e:29:
         fe:43:49:88:cf:13:79:a3:bb:f8:e5:68:2d:28:60:47:3b:45:
         ba:f4:e4:73:c9:98:dc:d8:2e:7b:77:39:b7:db:d2:bf:a7:a9:
         af:dd:0a:f0:d9:6f:f5:eb:02:05:48:3c:5e:a6:63:6b:ad:5a:
         33:29:2d:25:8e:0d:32:86:9a:a3:42:ca:0e:63:f9:15:83:9f:
         a7:bf:a8:ce:47:48:17:ad:03:50:ba:51:96:8e:d0:0f:7b:31:
         83:dc:fd:62:a3:4f:88:e1:94:ae:01:2d:ac:1b:5b:c7:3e:51:
         01:9e:92:33:cf:10:75:a9:1a:7d:cd:e8:b2:88:3b:a3:a5:29:
         99:79:4e:d7:76:ae:26:d5:4b:49:c2:67:5c:21:09:fc:b0:1e:
         08:fe:78:18:40:e9:2d:e8:9d:1b:ae:68:bc:4c:38:00:07:2b:
         dc:19:20:93:88:91:bc:06:b0:09:46:cc:e1:57:30:18:b6:70:
         ef:8f:bb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:46:30 2026 by rpki-client