Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSBBkuDdvZ8xEUHcaa4bfR6SXqNSjxBRiNcZYsWQFHxy/0/34352e3136362e37302e302f32342d3234203d3e20323637393533.roa
File:                     34352e3136362e37302e302f32342d3234203d3e20323637393533.roa (raw, json)
Hash identifier:          WkvBA5HKWZE1B9rfH2NJ99Me4WEhc378oe91hg4rIfU=
Subject key identifier:   2E:D3:BD:4B:78:FA:0A:B6:03:9D:32:0E:AC:66:47:E1:69:D9:FB:78
Certificate issuer:       /CN=8C3CF48C6EF2802E55ED0B0F89D3CA5720D72BE0
Certificate serial:       5B3C37B55C4DA249F1AB625C7651C2F5BEB753CF
Authority key identifier: 8C:3C:F4:8C:6E:F2:80:2E:55:ED:0B:0F:89:D3:CA:57:20:D7:2B:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C3CF48C6EF2802E55ED0B0F89D3CA5720D72BE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSBBkuDdvZ8xEUHcaa4bfR6SXqNSjxBRiNcZYsWQFHxy/0/34352e3136362e37302e302f32342d3234203d3e20323637393533.roa
Signing time:             Wed 13 May 2026 14:25:17 +0000
ROA not before:           Wed 13 May 2026 14:20:17 +0000
ROA not after:            Wed 12 May 2027 14:25:17 +0000
asID:                     267953
IP address blocks:        45.166.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BSBBkuDdvZ8xEUHcaa4bfR6SXqNSjxBRiNcZYsWQFHxy/0/8C3CF48C6EF2802E55ED0B0F89D3CA5720D72BE0.crl
                          rsync://rpki-repo.registro.br/repo/BSBBkuDdvZ8xEUHcaa4bfR6SXqNSjxBRiNcZYsWQFHxy/0/8C3CF48C6EF2802E55ED0B0F89D3CA5720D72BE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C3CF48C6EF2802E55ED0B0F89D3CA5720D72BE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 09:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:3c:37:b5:5c:4d:a2:49:f1:ab:62:5c:76:51:c2:f5:be:b7:53:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C3CF48C6EF2802E55ED0B0F89D3CA5720D72BE0
        Validity
            Not Before: May 13 14:20:17 2026 GMT
            Not After : May 12 14:25:17 2027 GMT
        Subject: CN=2ED3BD4B78FA0AB6039D320EAC6647E169D9FB78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b3:be:7a:1c:1e:9a:a6:45:7a:66:3b:ca:0d:
                    93:f3:fc:2e:c9:39:9d:cc:5d:8b:21:c7:e8:7c:81:
                    f7:09:6d:0c:fc:68:c5:76:d0:ac:23:bf:b5:e4:b3:
                    c7:f7:91:a0:ea:f4:c0:1b:8e:bc:c1:4c:92:b6:44:
                    dc:20:fa:75:b7:6b:d5:b4:87:9f:dc:22:b8:83:15:
                    03:22:e2:19:96:55:71:ac:dc:10:b4:83:d9:1b:0b:
                    ae:35:90:12:c0:c4:e9:64:4a:e3:af:d6:cc:35:f6:
                    55:5d:a1:05:8b:cf:aa:58:49:55:eb:09:9e:46:f9:
                    1f:20:ae:52:d5:a0:ae:32:cd:ff:f4:76:8a:e2:02:
                    8f:87:54:ad:b6:6f:f7:56:c9:ca:66:50:52:ea:84:
                    78:d2:ef:22:9e:ec:14:a2:39:aa:b8:6d:d9:63:59:
                    ce:46:71:a3:0b:f0:dc:0e:1e:88:33:fc:62:4d:11:
                    8d:f0:de:46:98:5d:d5:38:77:7d:b6:8b:58:6a:f3:
                    a1:14:bb:ef:4b:b0:74:e9:20:8b:4e:ad:b7:88:16:
                    a7:3c:9a:44:65:d3:02:0b:51:39:0e:80:54:75:b3:
                    dc:55:12:60:d7:1f:1a:67:0c:99:4a:9c:b2:f8:ae:
                    59:45:52:42:53:31:0f:f3:63:f6:5f:5b:0c:e1:72:
                    21:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D3:BD:4B:78:FA:0A:B6:03:9D:32:0E:AC:66:47:E1:69:D9:FB:78
            X509v3 Authority Key Identifier:
                keyid:8C:3C:F4:8C:6E:F2:80:2E:55:ED:0B:0F:89:D3:CA:57:20:D7:2B:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSBBkuDdvZ8xEUHcaa4bfR6SXqNSjxBRiNcZYsWQFHxy/0/8C3CF48C6EF2802E55ED0B0F89D3CA5720D72BE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C3CF48C6EF2802E55ED0B0F89D3CA5720D72BE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSBBkuDdvZ8xEUHcaa4bfR6SXqNSjxBRiNcZYsWQFHxy/0/34352e3136362e37302e302f32342d3234203d3e20323637393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e3:09:ce:8b:9f:dd:3f:0e:0c:82:88:98:40:3a:2f:bb:ac:12:
         69:76:2a:ec:21:f2:fe:29:7b:3c:cb:07:4e:3d:c8:0f:23:6f:
         0d:6f:8d:02:b2:40:8e:95:f3:3a:e8:f7:39:a5:b9:61:5e:99:
         7d:fd:83:a8:38:ec:2c:dc:1a:6b:a6:a4:a6:40:18:7b:b1:7c:
         ef:d2:71:f8:c1:c9:1d:48:65:b9:b9:83:84:2a:88:6f:ed:95:
         0d:b5:22:b5:ca:a3:65:f3:07:46:3a:f9:34:18:c8:6b:16:03:
         5a:ac:1c:ef:8b:3b:2c:a9:d4:bf:9c:e6:d2:f5:b6:6c:02:46:
         de:7f:18:c9:33:28:59:b2:97:34:ce:16:08:2e:84:e3:b1:f6:
         c8:19:36:fe:66:e0:e3:5d:b4:7c:8a:a5:10:f1:3e:21:bd:46:
         ce:0f:4c:86:18:15:0b:d2:ac:18:87:c7:5f:fc:d5:d1:6f:ce:
         52:c4:a2:c3:d8:11:7d:85:2c:52:31:b5:67:18:0e:6b:7c:7e:
         ba:8d:8f:bb:fd:c6:f1:f3:fa:39:49:de:d0:60:3c:f3:f6:73:
         57:fd:7b:51:03:ba:02:b6:a4:73:55:b8:4d:09:c8:47:4a:12:
         b2:e6:d8:99:8c:76:37:39:7b:09:95:9f:3d:2f:58:ff:03:eb:
         b2:1a:c6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 19:27:25 2026 by rpki-client