Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BmLnoMe1bzjjKzzeTSUxDoQ6LyewYFffe33ryUXXv3SL/0/34352e3136342e38382e302f32342d3234203d3e20323638363130.roa
File:                     34352e3136342e38382e302f32342d3234203d3e20323638363130.roa (raw, json)
Hash identifier:          +ru8QohWTz6QQHlOAiTG1Wtbe07I8bynamSsEkOS6SM=
Subject key identifier:   1A:74:18:9F:B8:9C:85:0A:05:08:35:8F:5E:D4:1D:C9:CB:32:10:F3
Certificate issuer:       /CN=0D1A4974C46426C2F298D2049A60840923ED886E
Certificate serial:       6273EB8801C14137225C597F953F4214CE35BEFC
Authority key identifier: 0D:1A:49:74:C4:64:26:C2:F2:98:D2:04:9A:60:84:09:23:ED:88:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D1A4974C46426C2F298D2049A60840923ED886E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BmLnoMe1bzjjKzzeTSUxDoQ6LyewYFffe33ryUXXv3SL/0/34352e3136342e38382e302f32342d3234203d3e20323638363130.roa
Signing time:             Tue 11 Aug 2026 12:45:50 +0000
ROA not before:           Tue 11 Aug 2026 12:40:50 +0000
ROA not after:            Tue 10 Aug 2027 12:45:50 +0000
asID:                     268610
IP address blocks:        45.164.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BmLnoMe1bzjjKzzeTSUxDoQ6LyewYFffe33ryUXXv3SL/0/0D1A4974C46426C2F298D2049A60840923ED886E.crl
                          rsync://rpki-repo.registro.br/repo/BmLnoMe1bzjjKzzeTSUxDoQ6LyewYFffe33ryUXXv3SL/0/0D1A4974C46426C2F298D2049A60840923ED886E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D1A4974C46426C2F298D2049A60840923ED886E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Aug 2026 03:08:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:73:eb:88:01:c1:41:37:22:5c:59:7f:95:3f:42:14:ce:35:be:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1A4974C46426C2F298D2049A60840923ED886E
        Validity
            Not Before: Aug 11 12:40:50 2026 GMT
            Not After : Aug 10 12:45:50 2027 GMT
        Subject: CN=1A74189FB89C850A0508358F5ED41DC9CB3210F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:df:c3:4f:13:76:02:01:a7:8d:0e:d1:bd:39:
                    87:5b:0a:52:dc:19:1d:3d:bc:4c:c4:dc:ef:d0:d8:
                    85:df:2c:ed:0e:74:9e:d7:91:51:74:a9:bd:8e:94:
                    3c:ed:21:74:6e:f1:59:88:30:ef:1c:00:18:50:06:
                    7b:6b:0f:3b:a8:8c:78:9b:7e:00:df:33:a5:ad:db:
                    fc:5e:95:9a:ff:b6:4f:32:7b:90:ae:99:06:f6:fe:
                    d4:11:22:17:e0:84:ff:47:b4:c7:84:86:7c:11:53:
                    64:6b:75:b3:ba:83:c7:4a:ea:aa:8c:09:1b:cf:b8:
                    a9:8a:b3:52:a8:30:f4:46:51:5e:14:05:c9:f2:d9:
                    05:53:46:44:c0:ae:f2:7d:f7:d9:7b:8b:d1:a1:c5:
                    95:88:36:74:75:98:c1:59:49:ce:84:88:f0:ad:68:
                    6b:94:0b:4b:12:8b:9b:d3:63:cd:77:99:50:f1:58:
                    82:5b:7c:1d:b4:84:5f:91:b0:d5:bf:1d:71:20:21:
                    f1:09:49:27:35:b1:dc:b3:c1:6f:a1:4e:e5:83:4f:
                    31:6c:2f:db:dc:50:4d:72:d5:40:e4:0e:34:b1:e2:
                    d2:9c:50:6e:80:44:e1:42:de:b5:a1:22:56:0d:72:
                    c1:53:05:a9:f1:b5:7e:c4:10:06:0a:76:91:da:25:
                    31:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:74:18:9F:B8:9C:85:0A:05:08:35:8F:5E:D4:1D:C9:CB:32:10:F3
            X509v3 Authority Key Identifier:
                keyid:0D:1A:49:74:C4:64:26:C2:F2:98:D2:04:9A:60:84:09:23:ED:88:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BmLnoMe1bzjjKzzeTSUxDoQ6LyewYFffe33ryUXXv3SL/0/0D1A4974C46426C2F298D2049A60840923ED886E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D1A4974C46426C2F298D2049A60840923ED886E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BmLnoMe1bzjjKzzeTSUxDoQ6LyewYFffe33ryUXXv3SL/0/34352e3136342e38382e302f32342d3234203d3e20323638363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:e1:81:31:04:d1:1d:f3:9f:bd:8e:37:26:bf:a2:de:6b:09:
         85:27:39:ce:35:27:dd:98:fe:60:39:73:da:d6:06:73:c2:99:
         58:fa:7b:4a:fc:2e:39:1d:1a:42:1c:9e:1f:af:06:75:91:2e:
         64:c8:85:56:90:1e:a3:8c:cb:23:53:b2:e9:a9:00:a2:2f:43:
         90:91:3e:5a:5f:74:22:a8:c0:cf:8d:6a:81:d9:a7:8e:ff:a3:
         af:4e:66:d4:96:01:81:31:e5:7e:7b:29:8f:20:f2:7f:2b:be:
         9a:aa:50:f5:4b:ff:58:3a:83:06:36:53:6e:32:c9:1d:e1:1f:
         75:2b:ed:b8:de:84:33:ae:0f:e6:e2:4d:e6:6f:e1:96:15:10:
         20:17:2b:1e:3b:7c:6f:39:61:07:ab:cd:9b:68:a7:03:7c:9d:
         04:52:80:44:64:60:14:23:08:0d:75:c4:10:96:c7:14:95:80:
         80:87:3c:15:cd:0a:39:a6:b5:2d:fa:b8:1a:2b:b8:e0:42:5c:
         df:d1:b2:bd:c1:54:76:88:ac:50:d6:14:4a:52:fc:51:dc:0f:
         38:d8:62:00:b4:b6:84:75:be:03:e4:1f:b6:a0:f6:45:4d:0d:
         54:7e:9e:f3:b3:20:a3:12:5a:b1:06:a0:5f:69:ef:9d:30:c5:
         90:a4:e6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:48:14 2026 by rpki-client