Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/0/34352e3138342e3131342e302f32342d3234203d3e20323639333936.roa
File:                     34352e3138342e3131342e302f32342d3234203d3e20323639333936.roa (raw, json)
Hash identifier:          fLN8t1+juy64IDdfix98t+uwtIPRa89jEan+vU+a4zo=
Subject key identifier:   85:19:1D:A6:F2:36:7D:CA:6D:D5:21:2B:1C:1A:EC:D7:8E:BC:BA:19
Certificate issuer:       /CN=40C4F549A109C1F6566C491C90BA5F835121F34F
Certificate serial:       F9EBCE0636618893533D6F3E5105D71BFDB63B
Authority key identifier: 40:C4:F5:49:A1:09:C1:F6:56:6C:49:1C:90:BA:5F:83:51:21:F3:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40C4F549A109C1F6566C491C90BA5F835121F34F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/0/34352e3138342e3131342e302f32342d3234203d3e20323639333936.roa
Signing time:             Wed 13 May 2026 18:25:07 +0000
ROA not before:           Wed 13 May 2026 18:20:07 +0000
ROA not after:            Wed 12 May 2027 18:25:07 +0000
asID:                     269396
IP address blocks:        45.184.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/0/40C4F549A109C1F6566C491C90BA5F835121F34F.crl
                          rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/0/40C4F549A109C1F6566C491C90BA5F835121F34F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40C4F549A109C1F6566C491C90BA5F835121F34F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 16:41:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f9:eb:ce:06:36:61:88:93:53:3d:6f:3e:51:05:d7:1b:fd:b6:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40C4F549A109C1F6566C491C90BA5F835121F34F
        Validity
            Not Before: May 13 18:20:07 2026 GMT
            Not After : May 12 18:25:07 2027 GMT
        Subject: CN=85191DA6F2367DCA6DD5212B1C1AECD78EBCBA19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ff:4e:d9:76:96:2a:53:b6:82:eb:84:d5:34:
                    74:8f:2d:52:e3:1b:c1:7c:99:9e:d1:04:d5:a8:34:
                    40:5c:80:7b:65:16:04:73:3c:17:0a:f9:c2:ee:c6:
                    ac:91:6a:95:47:f3:ee:f8:21:e4:b1:d8:a5:9a:bc:
                    9a:b0:0d:cc:ed:1a:09:2e:74:f2:1e:b1:e0:73:ee:
                    f6:84:f1:e3:24:6c:f8:7f:1b:03:da:72:78:6f:79:
                    21:62:e2:4a:9d:b6:e2:d8:9a:b9:c1:9a:bb:94:87:
                    d2:65:c8:b4:50:01:65:60:29:b4:35:91:f2:98:ae:
                    24:fc:68:e8:d4:93:4d:49:e3:52:8d:cb:2a:a2:a3:
                    1d:45:34:5c:e0:60:84:d8:32:7f:80:cb:e4:35:96:
                    b2:ef:9a:a9:20:94:db:dd:c7:56:79:d1:f5:9d:89:
                    66:02:2b:0a:f1:25:50:87:f7:d6:5c:4b:c3:e5:29:
                    fd:80:9c:f8:eb:c2:ef:15:9b:eb:d1:b7:19:e6:f6:
                    f5:66:a5:bb:c4:46:53:cb:40:08:be:be:63:74:7e:
                    06:c5:63:b3:ee:18:3b:de:c8:c0:90:5c:05:a4:44:
                    26:14:4c:10:a6:da:45:95:c4:e8:5c:3a:6a:64:af:
                    f8:58:3a:25:cf:9b:89:75:9a:e9:c0:ec:76:93:65:
                    76:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:19:1D:A6:F2:36:7D:CA:6D:D5:21:2B:1C:1A:EC:D7:8E:BC:BA:19
            X509v3 Authority Key Identifier:
                keyid:40:C4:F5:49:A1:09:C1:F6:56:6C:49:1C:90:BA:5F:83:51:21:F3:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/0/40C4F549A109C1F6566C491C90BA5F835121F34F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40C4F549A109C1F6566C491C90BA5F835121F34F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/0/34352e3138342e3131342e302f32342d3234203d3e20323639333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:d4:92:09:94:d9:71:7a:3c:38:44:ff:33:62:ba:c4:32:7f:
         2f:2a:59:f2:47:25:5e:f7:a7:49:5b:70:6c:26:d0:29:56:57:
         aa:b6:1d:43:20:b3:08:b4:2d:e0:ee:1f:8c:b8:21:5c:c6:0e:
         0e:a8:fa:76:ef:34:7e:69:b9:dc:f3:04:c9:12:b9:1a:9d:49:
         aa:c7:87:ed:b1:84:1d:9d:52:e4:8e:98:d8:e1:a0:ee:b2:10:
         3b:79:2d:20:df:d9:7a:8e:56:b7:a0:45:58:6b:f2:1a:9b:7d:
         73:ef:9b:40:17:88:6c:46:95:80:77:7f:fe:84:64:36:8e:1f:
         93:b8:91:76:f3:75:f3:71:9f:29:55:0f:23:99:47:b9:1a:d9:
         c1:65:a6:74:04:2c:77:97:68:e2:d5:0f:eb:35:30:b8:3b:0d:
         b2:c9:5b:a2:db:58:45:29:db:01:16:fe:30:be:52:db:b7:93:
         86:b7:12:db:c0:d0:43:1d:59:a7:1d:52:a0:c1:ef:50:99:a7:
         61:f8:13:b6:45:a6:b9:cd:14:7f:c6:5b:b1:fe:04:97:88:5a:
         cf:97:21:46:6a:e4:0a:c7:24:7a:68:8d:26:06:04:76:d5:75:
         9f:83:de:b6:67:65:7f:45:5c:18:b1:1a:e7:05:50:a5:15:c1:
         fe:5f:1e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 18:49:16 2026 by rpki-client