Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/34352e3233312e38342e302f32322d3234203d3e20323637313839.roa
File:                     34352e3233312e38342e302f32322d3234203d3e20323637313839.roa (raw, json)
Hash identifier:          UD+4mKDit9piq79mnvNT4Icm1EpXFOwf75FncUC54RM=
Subject key identifier:   CD:20:1F:57:17:4B:73:35:7F:DB:44:EC:5E:AA:5C:E3:52:01:B2:6B
Certificate issuer:       /CN=32C97CAE95BE17ABF84BFF7BE087D0CD147DF457
Certificate serial:       52231966C2B52307DFA08D610291F5B3D692BFA4
Authority key identifier: 32:C9:7C:AE:95:BE:17:AB:F8:4B:FF:7B:E0:87:D0:CD:14:7D:F4:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C97CAE95BE17ABF84BFF7BE087D0CD147DF457.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/34352e3233312e38342e302f32322d3234203d3e20323637313839.roa
Signing time:             Tue 11 Aug 2026 12:58:26 +0000
ROA not before:           Tue 11 Aug 2026 12:53:26 +0000
ROA not after:            Tue 10 Aug 2027 12:58:26 +0000
asID:                     267189
IP address blocks:        45.231.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/32C97CAE95BE17ABF84BFF7BE087D0CD147DF457.crl
                          rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/32C97CAE95BE17ABF84BFF7BE087D0CD147DF457.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C97CAE95BE17ABF84BFF7BE087D0CD147DF457.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 01:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:23:19:66:c2:b5:23:07:df:a0:8d:61:02:91:f5:b3:d6:92:bf:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32C97CAE95BE17ABF84BFF7BE087D0CD147DF457
        Validity
            Not Before: Aug 11 12:53:26 2026 GMT
            Not After : Aug 10 12:58:26 2027 GMT
        Subject: CN=CD201F57174B73357FDB44EC5EAA5CE35201B26B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:11:27:68:9f:83:15:bb:2d:2b:99:60:78:6f:
                    eb:68:14:60:82:7b:6e:88:cd:23:b2:96:91:11:ad:
                    23:ac:c0:1e:cd:5d:0e:6d:c1:71:d5:3f:7a:57:ed:
                    e5:7a:d4:aa:5f:af:19:74:d7:43:fb:c9:71:d7:49:
                    d4:ee:06:12:19:fb:d1:f8:6d:8b:a9:07:93:81:bb:
                    4f:7a:6e:44:97:5d:59:e5:bb:6f:8f:c9:ee:56:e0:
                    53:88:f2:90:5d:67:a4:f2:79:be:2d:96:4e:8f:3c:
                    0b:41:d0:a9:cf:7a:df:7c:96:28:d2:8e:fe:0b:2c:
                    3c:9e:c2:e1:2b:a0:82:6b:e0:ea:65:75:49:91:e4:
                    1f:33:ca:cd:31:7e:07:8f:86:d8:44:28:51:d5:ce:
                    ac:d1:03:cd:db:d6:8c:5a:d0:c1:3d:6c:2d:d7:e9:
                    a4:be:5a:e4:8f:4f:1e:ad:4a:da:ad:25:f4:9f:7c:
                    f5:ae:88:d2:95:95:4d:7f:61:2f:c3:f0:c6:62:29:
                    e8:b4:48:4b:94:39:43:70:d3:99:0b:fd:5f:3a:76:
                    de:b1:d9:e2:1e:a9:5f:c9:99:22:ce:5a:76:39:24:
                    47:0e:55:96:7b:f6:65:28:fe:6c:9b:de:1b:ab:d0:
                    e1:41:68:ec:12:c4:1e:fd:d2:66:af:83:4d:88:eb:
                    8b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:20:1F:57:17:4B:73:35:7F:DB:44:EC:5E:AA:5C:E3:52:01:B2:6B
            X509v3 Authority Key Identifier:
                keyid:32:C9:7C:AE:95:BE:17:AB:F8:4B:FF:7B:E0:87:D0:CD:14:7D:F4:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/32C97CAE95BE17ABF84BFF7BE087D0CD147DF457.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C97CAE95BE17ABF84BFF7BE087D0CD147DF457.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/34352e3233312e38342e302f32322d3234203d3e20323637313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:90:55:1d:2c:bb:e5:24:f3:44:85:8b:10:f1:f6:e3:aa:5f:
         82:03:3d:31:d8:e9:9d:1c:1a:66:15:5b:c6:cd:d4:b7:45:41:
         71:a0:87:47:90:30:07:b1:0b:3e:08:43:45:d6:8c:52:b1:ea:
         5c:9c:e4:fd:d9:dd:5a:69:03:96:0c:61:37:bb:12:06:7e:8e:
         39:46:6c:19:d0:cf:69:0e:a7:7e:e8:33:21:86:5b:10:01:5e:
         33:e7:12:95:b7:5f:b6:e3:c1:fe:93:f6:9a:85:e7:4f:54:c1:
         7f:9e:0c:cf:50:42:82:45:ce:9f:e2:42:93:78:ab:19:6d:65:
         29:74:f0:22:90:ba:4a:94:a6:39:5a:2a:b4:25:db:91:aa:ac:
         ac:a9:32:81:eb:8e:2a:25:4b:b0:b6:bd:71:29:8e:c1:33:60:
         be:4c:27:4e:55:6a:91:39:90:37:24:c8:a8:06:58:0a:d8:19:
         57:81:c4:22:a0:56:a0:61:fd:50:de:c0:75:7a:7f:92:8a:1a:
         35:35:3e:c5:10:24:6d:42:82:15:da:f7:61:de:5c:a4:34:d5:
         8d:bb:41:97:8d:2a:66:a7:e1:a7:5e:f6:bc:57:95:84:1d:dd:
         02:27:f8:95:c1:08:e2:84:0d:fe:da:22:d0:35:c0:f6:34:49:
         b5:88:c1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 04:11:56 2026 by rpki-client