Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BmLnoMe1bzjjKzzeTSUxDoQ6LyewYFffe33ryUXXv3SL/0/34352e3136342e38392e302f32342d3234203d3e20323638363130.roa
File:                     34352e3136342e38392e302f32342d3234203d3e20323638363130.roa (raw, json)
Hash identifier:          +kxMOMgp8J7FV9adnCxxDKXFS0VuIQOBPv2q0V00T6U=
Subject key identifier:   40:E8:FA:78:D0:95:3A:84:E9:AF:B4:C5:89:C4:73:6F:4C:3A:EA:44
Certificate issuer:       /CN=0D1A4974C46426C2F298D2049A60840923ED886E
Certificate serial:       34E60D12C9B268F67EFC0A378DC5BE48471362EE
Authority key identifier: 0D:1A:49:74:C4:64:26:C2:F2:98:D2:04:9A:60:84:09:23:ED:88:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D1A4974C46426C2F298D2049A60840923ED886E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BmLnoMe1bzjjKzzeTSUxDoQ6LyewYFffe33ryUXXv3SL/0/34352e3136342e38392e302f32342d3234203d3e20323638363130.roa
Signing time:             Tue 11 Aug 2026 12:45:50 +0000
ROA not before:           Tue 11 Aug 2026 12:40:50 +0000
ROA not after:            Tue 10 Aug 2027 12:45:50 +0000
asID:                     268610
IP address blocks:        45.164.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BmLnoMe1bzjjKzzeTSUxDoQ6LyewYFffe33ryUXXv3SL/0/0D1A4974C46426C2F298D2049A60840923ED886E.crl
                          rsync://rpki-repo.registro.br/repo/BmLnoMe1bzjjKzzeTSUxDoQ6LyewYFffe33ryUXXv3SL/0/0D1A4974C46426C2F298D2049A60840923ED886E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D1A4974C46426C2F298D2049A60840923ED886E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Aug 2026 03:08:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e6:0d:12:c9:b2:68:f6:7e:fc:0a:37:8d:c5:be:48:47:13:62:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1A4974C46426C2F298D2049A60840923ED886E
        Validity
            Not Before: Aug 11 12:40:50 2026 GMT
            Not After : Aug 10 12:45:50 2027 GMT
        Subject: CN=40E8FA78D0953A84E9AFB4C589C4736F4C3AEA44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ef:eb:60:92:47:8b:03:60:b8:ab:80:c2:bf:
                    f3:1b:cd:09:39:6d:8f:59:c2:75:5c:2f:e7:78:d0:
                    69:0e:73:06:60:be:a2:17:63:5e:d0:ad:c4:00:7c:
                    f1:9f:e0:84:41:a2:95:2a:2e:f1:a5:fd:9d:16:f6:
                    a5:11:4a:22:38:f5:a0:36:33:ae:09:ae:00:b4:1c:
                    b6:93:ef:ae:cb:f0:5f:d5:8f:ec:e0:21:7c:16:5d:
                    7d:d1:a6:b0:10:ce:53:ee:93:62:7f:c0:b4:2e:55:
                    aa:bf:b0:9e:a6:79:d5:f5:ed:22:63:b4:f1:7c:94:
                    a2:37:dd:69:8e:1a:08:6d:fa:cb:ef:23:34:14:7c:
                    45:b3:fe:43:8b:78:86:1e:8a:93:9a:7f:45:c9:b8:
                    4d:a9:ec:0c:33:b3:ed:45:9e:54:0e:37:df:61:b1:
                    cb:23:ef:fb:51:ee:50:02:ee:f5:2a:82:72:d5:ad:
                    10:20:bd:f7:58:31:09:17:a9:31:e2:6c:f1:79:cd:
                    0d:ac:4e:ad:21:1f:6c:e8:19:49:b1:f5:fb:74:4c:
                    a5:ab:3f:3f:f5:24:6c:19:4e:4e:3a:6b:a6:89:70:
                    2e:93:53:41:e6:9f:21:40:df:ad:0d:2c:f5:a3:96:
                    d4:69:c4:95:ab:1a:8e:a2:81:c8:54:71:74:21:27:
                    2a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E8:FA:78:D0:95:3A:84:E9:AF:B4:C5:89:C4:73:6F:4C:3A:EA:44
            X509v3 Authority Key Identifier:
                keyid:0D:1A:49:74:C4:64:26:C2:F2:98:D2:04:9A:60:84:09:23:ED:88:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BmLnoMe1bzjjKzzeTSUxDoQ6LyewYFffe33ryUXXv3SL/0/0D1A4974C46426C2F298D2049A60840923ED886E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D1A4974C46426C2F298D2049A60840923ED886E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BmLnoMe1bzjjKzzeTSUxDoQ6LyewYFffe33ryUXXv3SL/0/34352e3136342e38392e302f32342d3234203d3e20323638363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:e8:8a:34:fd:2b:8d:53:f2:8c:82:01:a5:42:dd:2c:5a:e0:
         33:ba:3a:9b:1e:89:72:4a:fb:df:b6:c9:5d:ab:f5:44:00:4c:
         c9:41:a5:83:3b:ae:99:40:18:51:55:3b:e0:5e:3e:02:8a:d0:
         d4:12:cc:a1:2b:df:9a:b0:ce:12:45:46:88:68:0a:67:47:d3:
         f9:74:c3:29:d5:5b:56:1b:7f:ae:61:b7:e0:3f:8d:76:ea:3a:
         e9:f3:1a:71:ce:fa:fa:9a:e8:df:a9:e0:3e:e5:75:6b:8c:14:
         a2:2f:1c:b9:21:32:27:63:f6:57:63:44:71:b8:63:85:1c:c7:
         23:bc:ae:46:6a:02:de:4e:90:7f:d7:ff:1c:69:f0:ca:43:cb:
         27:fc:a8:fc:01:f1:56:00:f8:05:b3:17:56:aa:98:0c:44:0a:
         cc:fd:4d:38:8c:59:bd:35:fb:c8:8d:07:71:fe:ae:29:17:cc:
         8d:ff:21:f3:c0:bd:75:44:3a:01:54:8e:36:90:ba:a3:ac:66:
         a7:7d:98:23:d6:c0:a9:12:83:92:24:b7:49:71:44:b5:92:cf:
         fd:c1:f7:0c:b1:94:84:eb:20:ac:ee:90:b4:fa:6a:92:8a:06:
         c5:43:3c:cb:f7:22:15:89:fc:bf:24:13:5e:26:6c:93:c8:1c:
         10:93:d1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:48:13 2026 by rpki-client