Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Bm8btn3DhSpdyfBdZBotVrX2xKY94ySkMt39rxvDUpD1/0/34352e3232342e3138302e302f32342d3234203d3e20323637363630.roa
File:                     34352e3232342e3138302e302f32342d3234203d3e20323637363630.roa (raw, json)
Hash identifier:          HeduSDT3xTNR0WH97zgVP8p7T9YBfAoVaF7Ji6gT5zE=
Subject key identifier:   6C:BA:28:78:1E:E7:5B:B3:A2:1A:DE:48:DE:BC:81:C3:29:5D:BD:81
Certificate issuer:       /CN=4523D40F44EEC4238DD87439303B3410CF5F1F1F
Certificate serial:       234FE06149EB0AB57BD6DAEF9731EDE2823F3595
Authority key identifier: 45:23:D4:0F:44:EE:C4:23:8D:D8:74:39:30:3B:34:10:CF:5F:1F:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4523D40F44EEC4238DD87439303B3410CF5F1F1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bm8btn3DhSpdyfBdZBotVrX2xKY94ySkMt39rxvDUpD1/0/34352e3232342e3138302e302f32342d3234203d3e20323637363630.roa
Signing time:             Tue 18 Aug 2026 13:10:36 +0000
ROA not before:           Tue 18 Aug 2026 13:05:36 +0000
ROA not after:            Tue 17 Aug 2027 13:10:36 +0000
asID:                     267660
IP address blocks:        45.224.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bm8btn3DhSpdyfBdZBotVrX2xKY94ySkMt39rxvDUpD1/0/4523D40F44EEC4238DD87439303B3410CF5F1F1F.crl
                          rsync://rpki-repo.registro.br/repo/Bm8btn3DhSpdyfBdZBotVrX2xKY94ySkMt39rxvDUpD1/0/4523D40F44EEC4238DD87439303B3410CF5F1F1F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4523D40F44EEC4238DD87439303B3410CF5F1F1F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 15:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:4f:e0:61:49:eb:0a:b5:7b:d6:da:ef:97:31:ed:e2:82:3f:35:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4523D40F44EEC4238DD87439303B3410CF5F1F1F
        Validity
            Not Before: Aug 18 13:05:36 2026 GMT
            Not After : Aug 17 13:10:36 2027 GMT
        Subject: CN=6CBA28781EE75BB3A21ADE48DEBC81C3295DBD81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:da:2f:e1:e9:9b:fb:d8:1e:da:81:a7:4f:90:
                    2d:2e:5a:a9:b9:e4:c4:c5:31:b9:e5:8f:c2:d6:23:
                    5a:fa:b0:67:65:ef:11:76:b0:4e:d4:0c:be:82:e2:
                    2a:f1:bd:37:7b:dc:fc:68:5d:ee:52:d4:ed:34:8d:
                    6b:a3:5b:19:35:bf:63:9f:dc:48:2d:28:5e:f6:80:
                    45:13:aa:6b:c2:0e:88:c0:c9:b2:73:d9:a5:75:1b:
                    aa:ec:db:a0:70:5e:a1:5d:3f:00:3b:d2:d9:2c:d0:
                    dc:6e:e7:ba:43:07:61:f5:2e:86:79:40:8b:62:16:
                    06:be:be:23:35:64:36:49:3e:5c:46:8c:02:db:ea:
                    ea:9e:23:cd:00:59:3e:e7:08:8c:3c:76:93:be:7c:
                    c4:fd:5b:ad:7a:1f:d0:70:70:9c:57:5f:b8:2c:a4:
                    5f:40:79:ad:27:86:65:32:44:16:7c:22:d3:28:fa:
                    0f:79:9b:c1:09:74:c0:78:cc:95:aa:02:03:74:31:
                    4e:50:f2:84:0d:8d:2b:7e:89:32:b2:20:d0:fa:5a:
                    df:81:ce:8c:61:b0:ce:be:b5:7b:12:fe:aa:b2:53:
                    92:59:98:7c:cb:bf:b9:c2:9f:96:92:01:a8:91:4a:
                    be:07:08:c1:6e:33:71:a4:00:37:f3:c4:ab:fd:e3:
                    03:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:BA:28:78:1E:E7:5B:B3:A2:1A:DE:48:DE:BC:81:C3:29:5D:BD:81
            X509v3 Authority Key Identifier:
                keyid:45:23:D4:0F:44:EE:C4:23:8D:D8:74:39:30:3B:34:10:CF:5F:1F:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bm8btn3DhSpdyfBdZBotVrX2xKY94ySkMt39rxvDUpD1/0/4523D40F44EEC4238DD87439303B3410CF5F1F1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4523D40F44EEC4238DD87439303B3410CF5F1F1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bm8btn3DhSpdyfBdZBotVrX2xKY94ySkMt39rxvDUpD1/0/34352e3232342e3138302e302f32342d3234203d3e20323637363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:27:a1:6c:46:c3:a4:66:97:ca:3c:b4:86:26:aa:b9:ac:22:
         53:29:24:da:2a:1a:e8:ce:c1:5e:bf:2b:29:2f:a6:81:dd:ef:
         e0:0c:23:41:f1:5f:36:4f:70:e6:fa:06:10:3c:e4:9c:5c:32:
         b6:c3:32:2e:ff:5d:f8:34:6c:62:85:59:57:79:bc:78:48:9f:
         21:64:e4:b2:12:9e:7b:a1:f5:c9:48:a6:a7:16:1d:ec:eb:62:
         a4:ef:1c:5b:bf:59:a5:81:74:85:c6:26:3c:bc:43:ef:d9:44:
         f0:6d:db:b9:e2:f1:c3:50:4d:c1:21:ac:63:f6:9c:c8:3c:06:
         78:85:0c:b3:ab:90:26:04:1e:9b:52:40:a0:55:4f:eb:e5:51:
         0c:dc:98:77:be:18:9f:25:8a:0e:ff:8b:98:a1:fc:0e:33:85:
         e3:4c:33:64:65:ec:7b:c7:5f:f4:d1:c1:ba:a1:39:30:3c:1e:
         bc:f5:0a:f6:6e:59:a3:99:f8:1c:fb:03:f6:dd:b0:b8:65:53:
         9b:7f:c3:0c:22:df:2f:30:01:96:f4:04:51:6a:4d:44:f6:27:
         6c:6c:a6:29:93:90:cd:56:94:30:d1:85:08:c3:7b:3d:b3:4d:
         2d:e3:43:b7:55:c1:b7:f6:22:f2:6c:b9:df:0d:9d:45:58:88:
         d3:d7:ec:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 07:58:46 2026 by rpki-client