Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5HRYxhUYxLXEy2rdi2482so6B5UiNFznvTWst79Fujr/0/34352e3137332e33322e302f32322d3332203d3e20323638383038.roa
File:                     34352e3137332e33322e302f32322d3332203d3e20323638383038.roa (raw, json)
Hash identifier:          nv7bFV/tE+SjhbC1BQKFaF4Ka2fOhE2z1/h3Ouse0oo=
Subject key identifier:   1C:D1:CC:36:01:41:0C:C4:F3:C1:47:D0:C5:AE:AD:07:92:25:4B:41
Certificate issuer:       /CN=366B86A4B6D254063ACAAF75435DEEB07D37E2ED
Certificate serial:       325E68C6529B270DB54FF021493D18739A48EB41
Authority key identifier: 36:6B:86:A4:B6:D2:54:06:3A:CA:AF:75:43:5D:EE:B0:7D:37:E2:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/366B86A4B6D254063ACAAF75435DEEB07D37E2ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5HRYxhUYxLXEy2rdi2482so6B5UiNFznvTWst79Fujr/0/34352e3137332e33322e302f32322d3332203d3e20323638383038.roa
Signing time:             Tue 27 Jan 2026 13:25:37 +0000
ROA not before:           Tue 27 Jan 2026 13:20:37 +0000
ROA not after:            Tue 26 Jan 2027 13:25:37 +0000
asID:                     268808
IP address blocks:        45.173.32.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C5HRYxhUYxLXEy2rdi2482so6B5UiNFznvTWst79Fujr/0/366B86A4B6D254063ACAAF75435DEEB07D37E2ED.crl
                          rsync://rpki-repo.registro.br/repo/C5HRYxhUYxLXEy2rdi2482so6B5UiNFznvTWst79Fujr/0/366B86A4B6D254063ACAAF75435DEEB07D37E2ED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/366B86A4B6D254063ACAAF75435DEEB07D37E2ED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 11:59:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:5e:68:c6:52:9b:27:0d:b5:4f:f0:21:49:3d:18:73:9a:48:eb:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=366B86A4B6D254063ACAAF75435DEEB07D37E2ED
        Validity
            Not Before: Jan 27 13:20:37 2026 GMT
            Not After : Jan 26 13:25:37 2027 GMT
        Subject: CN=1CD1CC3601410CC4F3C147D0C5AEAD0792254B41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b3:2b:ae:aa:31:36:5c:0d:9c:d6:07:8d:04:
                    7c:90:e4:99:6a:10:08:d3:67:41:f5:5b:cc:c6:38:
                    09:18:09:f5:43:82:3a:38:1f:43:0e:02:22:26:90:
                    de:bd:19:15:8c:9e:06:37:66:51:0f:3a:61:a5:6e:
                    84:12:c9:4b:51:f8:e7:2a:7a:97:81:f5:da:c5:0a:
                    f2:c2:b3:6a:61:19:9d:39:0c:99:69:08:70:a7:f4:
                    93:3e:03:87:8d:5a:d8:9e:02:dd:75:e9:c4:2c:c1:
                    9b:b8:dc:f0:5b:19:d1:e2:ed:31:ad:34:95:43:1c:
                    98:c4:03:a6:dd:da:30:45:3e:03:8b:d3:ea:3c:4c:
                    77:42:a9:a7:31:ae:be:74:aa:7f:26:5a:5d:f9:32:
                    d3:8e:ff:63:c6:9f:2f:8c:1e:df:65:c2:8b:84:e8:
                    a6:45:47:d3:27:32:69:51:35:6f:f9:cd:24:27:2c:
                    d8:7e:09:e6:9e:72:1d:60:62:70:62:34:dc:06:b0:
                    9b:90:a1:c9:4c:42:fc:ea:4c:77:47:71:90:50:1d:
                    0a:cf:7f:b5:7a:ab:ff:20:21:85:d5:d0:0f:e4:1c:
                    f8:c1:4a:d1:3b:96:5f:33:0e:1f:78:9d:4a:03:32:
                    bc:53:04:90:86:e6:0c:1b:17:5f:e6:dd:0c:0c:1d:
                    16:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D1:CC:36:01:41:0C:C4:F3:C1:47:D0:C5:AE:AD:07:92:25:4B:41
            X509v3 Authority Key Identifier:
                keyid:36:6B:86:A4:B6:D2:54:06:3A:CA:AF:75:43:5D:EE:B0:7D:37:E2:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5HRYxhUYxLXEy2rdi2482so6B5UiNFznvTWst79Fujr/0/366B86A4B6D254063ACAAF75435DEEB07D37E2ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/366B86A4B6D254063ACAAF75435DEEB07D37E2ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5HRYxhUYxLXEy2rdi2482so6B5UiNFznvTWst79Fujr/0/34352e3137332e33322e302f32322d3332203d3e20323638383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:82:b3:1e:ba:2c:82:c6:fe:18:ec:16:6c:34:fd:ef:19:0e:
         d5:fb:2c:e6:34:55:0d:30:0c:5c:8d:1b:50:2a:2d:41:05:9c:
         52:06:4e:2f:7e:d8:a3:6b:45:b5:b1:65:fc:81:b8:ec:7f:3c:
         1f:35:45:53:32:2a:46:45:76:0e:cd:1e:39:3b:ae:e6:5d:48:
         83:bb:34:de:dc:57:35:b2:49:88:c0:7c:4d:ac:90:16:ca:29:
         de:bc:00:2e:6a:ac:2b:01:9a:df:af:a3:27:b6:69:bc:bc:d8:
         e1:6a:2f:8e:ae:d1:57:bf:12:e5:2d:18:d1:a9:2f:db:f4:51:
         ce:3f:a6:e2:d6:ec:33:4c:a4:9f:8b:de:85:cc:6a:c1:2a:9c:
         27:6d:a8:07:68:32:4d:65:50:02:83:1a:64:d9:53:0f:a2:09:
         e0:12:ba:eb:ae:31:56:cd:2c:37:c5:a2:62:d2:28:20:69:af:
         8d:55:b2:6b:1a:5d:77:0d:27:44:9c:ac:36:5b:24:e8:23:70:
         b9:15:11:95:8d:17:b9:4c:45:a5:52:a7:a2:52:1e:4a:28:bb:
         f7:94:5f:05:ce:0f:0c:9b:74:a5:a3:f2:6e:f7:4e:43:73:60:
         9e:ba:23:64:3b:82:10:7d:b0:fb:8a:15:63:4e:6d:e0:c7:f0:
         47:aa:a5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:54:28 2026 by rpki-client