Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/34352e3138332e3231342e302f32342d3234203d3e20323639323932.roa
File:                     34352e3138332e3231342e302f32342d3234203d3e20323639323932.roa (raw, json)
Hash identifier:          uNNCEo5J5g3eKq3o+05LWvt772FsDmh2SAUUpchIosA=
Subject key identifier:   70:A5:82:2D:12:74:B0:8F:2C:AA:98:DB:80:6A:FE:AB:E3:31:68:1E
Certificate issuer:       /CN=5529678D92117FE38E77B9B8F8A8294F2BAD05D6
Certificate serial:       4847C7301182563333D62739E36EED08092411DB
Authority key identifier: 55:29:67:8D:92:11:7F:E3:8E:77:B9:B8:F8:A8:29:4F:2B:AD:05:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5529678D92117FE38E77B9B8F8A8294F2BAD05D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/34352e3138332e3231342e302f32342d3234203d3e20323639323932.roa
Signing time:             Wed 29 Jul 2026 17:28:05 +0000
ROA not before:           Wed 29 Jul 2026 17:23:05 +0000
ROA not after:            Wed 28 Jul 2027 17:28:05 +0000
asID:                     269292
IP address blocks:        45.183.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/5529678D92117FE38E77B9B8F8A8294F2BAD05D6.crl
                          rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/5529678D92117FE38E77B9B8F8A8294F2BAD05D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5529678D92117FE38E77B9B8F8A8294F2BAD05D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 12:12:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:47:c7:30:11:82:56:33:33:d6:27:39:e3:6e:ed:08:09:24:11:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5529678D92117FE38E77B9B8F8A8294F2BAD05D6
        Validity
            Not Before: Jul 29 17:23:05 2026 GMT
            Not After : Jul 28 17:28:05 2027 GMT
        Subject: CN=70A5822D1274B08F2CAA98DB806AFEABE331681E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ce:bb:07:df:d3:1b:eb:32:a9:4d:4c:09:da:
                    e4:91:7a:f5:d8:f3:4f:49:a6:6f:42:c9:c6:94:ed:
                    c5:5d:3f:5d:21:cd:2d:50:44:be:4d:f6:0f:83:b5:
                    f0:74:28:41:1d:fb:45:20:dc:7e:c1:3e:61:01:aa:
                    54:ec:cd:03:40:d2:98:58:85:d3:7f:fc:d2:d5:6f:
                    30:2b:79:d8:ba:d0:de:cb:ce:7c:0f:b9:e5:81:23:
                    72:4d:2e:95:aa:5b:09:65:d9:d0:7c:8e:14:9d:72:
                    60:1f:38:b5:5a:e0:55:35:a4:db:5a:78:b1:f6:c6:
                    06:5b:74:68:28:3d:35:44:97:55:97:b5:ba:81:eb:
                    d3:50:51:58:a0:79:8b:b1:8c:dc:7b:93:c6:1c:3b:
                    e4:64:66:c6:3e:09:a3:3f:ee:1e:e6:65:6e:0e:5e:
                    6b:51:e0:bb:d7:2c:d7:b5:c6:be:b0:b8:71:10:83:
                    ab:74:59:8c:75:3c:27:e4:d7:a7:5a:1f:ba:5f:d9:
                    b5:6d:27:a3:04:42:8b:97:29:7e:d4:1b:2a:5d:31:
                    06:f5:50:d3:39:9b:99:db:5b:0e:e6:77:a2:a6:83:
                    fa:10:d3:d8:6b:42:7d:e3:7e:7a:da:d9:86:88:46:
                    a9:c3:16:44:ac:b6:2c:b1:ec:3a:d9:14:61:92:0d:
                    1e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A5:82:2D:12:74:B0:8F:2C:AA:98:DB:80:6A:FE:AB:E3:31:68:1E
            X509v3 Authority Key Identifier:
                keyid:55:29:67:8D:92:11:7F:E3:8E:77:B9:B8:F8:A8:29:4F:2B:AD:05:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/5529678D92117FE38E77B9B8F8A8294F2BAD05D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5529678D92117FE38E77B9B8F8A8294F2BAD05D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/34352e3138332e3231342e302f32342d3234203d3e20323639323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:1f:8c:43:6b:9c:0a:74:a4:9a:6e:70:47:9e:b5:47:80:4c:
         99:ab:bc:fa:05:71:ad:fb:93:b3:65:9f:c6:b3:61:3c:ef:6d:
         72:d7:32:77:85:0e:60:ef:b4:07:33:80:f6:bb:dc:4b:87:67:
         d2:f1:82:28:e8:90:ca:32:1d:27:c5:85:9e:72:2a:a3:4d:39:
         e6:50:ef:90:65:df:07:9c:2f:88:19:c3:41:60:a8:01:02:76:
         75:fc:9f:c5:c8:9b:73:3e:94:40:2b:f4:71:cc:19:c8:5e:11:
         0d:a5:66:7c:04:a2:59:a4:7a:8e:9c:70:da:ba:b2:54:4e:a1:
         b7:5b:1b:50:ba:43:b1:a4:8f:80:e1:ae:b2:15:a8:f0:68:8e:
         45:5c:95:33:d8:0c:fb:32:7f:8b:4b:75:4b:1a:e4:92:25:be:
         67:c9:eb:84:ba:c7:57:fa:38:dc:93:ff:45:8f:7a:c7:f3:72:
         0e:01:e8:f6:0b:e6:30:81:16:1c:3d:65:31:a6:2a:a3:ff:2d:
         ab:62:50:fc:d8:3f:42:57:84:17:5d:ec:03:4c:53:19:f4:19:
         d4:d4:1b:b4:72:e2:fe:0a:5f:1f:ef:41:14:e9:05:7c:3b:14:
         25:af:de:8d:a1:d1:f5:0a:c3:e3:b3:7b:7f:31:63:82:30:74:
         cb:1f:26:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 01:41:59 2026 by rpki-client