Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/34352e3138322e33322e302f32322d3232203d3e20323639323635.roa
File:                     34352e3138322e33322e302f32322d3232203d3e20323639323635.roa (raw, json)
Hash identifier:          cNba0wNAIwHvuOFSqoWR0vNGwRk9AxCRP3N+JU/pFD8=
Subject key identifier:   14:3B:E2:EB:F5:9E:BC:64:F8:2F:DB:38:DE:74:E8:D9:36:0D:9B:47
Certificate issuer:       /CN=583EBED8D11DAA8FF7F307B11D88A891D630F09B
Certificate serial:       45CEF59352DCE517D75E0F4E5B0E6BEDD1A6AB67
Authority key identifier: 58:3E:BE:D8:D1:1D:AA:8F:F7:F3:07:B1:1D:88:A8:91:D6:30:F0:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/583EBED8D11DAA8FF7F307B11D88A891D630F09B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/34352e3138322e33322e302f32322d3232203d3e20323639323635.roa
Signing time:             Fri 07 Aug 2026 13:30:54 +0000
ROA not before:           Fri 07 Aug 2026 13:25:54 +0000
ROA not after:            Fri 06 Aug 2027 13:30:54 +0000
asID:                     269265
IP address blocks:        45.182.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/583EBED8D11DAA8FF7F307B11D88A891D630F09B.crl
                          rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/583EBED8D11DAA8FF7F307B11D88A891D630F09B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/583EBED8D11DAA8FF7F307B11D88A891D630F09B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 13 Aug 2026 21:15:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:ce:f5:93:52:dc:e5:17:d7:5e:0f:4e:5b:0e:6b:ed:d1:a6:ab:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=583EBED8D11DAA8FF7F307B11D88A891D630F09B
        Validity
            Not Before: Aug  7 13:25:54 2026 GMT
            Not After : Aug  6 13:30:54 2027 GMT
        Subject: CN=143BE2EBF59EBC64F82FDB38DE74E8D9360D9B47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5c:4c:ac:30:ea:03:82:9f:3a:0e:ea:0d:eb:
                    70:82:ae:b1:8e:f8:6e:26:e1:e3:a7:2f:5f:52:8d:
                    89:d1:b4:e2:84:2d:0b:dd:f4:82:de:2d:dd:6a:e1:
                    f6:17:93:fd:2f:e5:cb:86:59:63:7e:96:d4:ce:f6:
                    4c:df:4e:5f:e5:e4:90:e3:6f:ed:38:7e:a8:d4:bd:
                    25:f2:8c:e4:29:e0:b8:5e:e9:53:43:96:c1:d3:66:
                    04:18:98:34:1e:52:04:3c:ac:b7:77:de:84:c9:90:
                    cd:64:3d:91:21:40:35:c8:70:d6:18:bf:1b:a6:65:
                    f6:49:94:88:89:0f:c9:bc:ae:ef:4c:ab:ed:64:a0:
                    62:1c:5d:70:6b:e3:16:49:c2:56:85:4e:fa:a3:f8:
                    95:2c:cb:3e:82:89:27:78:5c:a4:ca:9d:b3:01:dd:
                    91:e1:d6:cc:3e:22:3e:46:01:fc:d4:80:67:61:52:
                    c3:4c:d8:81:7a:e8:a0:6c:e5:cd:ab:c0:53:6e:0a:
                    98:d1:e8:88:55:b2:82:68:55:33:b0:a3:8b:78:d5:
                    f2:91:2f:87:44:92:c8:27:5c:7f:1c:0d:23:e9:7d:
                    4f:4d:d2:49:db:93:73:4f:28:1b:7d:59:48:99:2b:
                    a6:02:bc:73:5e:90:87:06:dc:c0:b2:3c:93:b8:17:
                    3f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:3B:E2:EB:F5:9E:BC:64:F8:2F:DB:38:DE:74:E8:D9:36:0D:9B:47
            X509v3 Authority Key Identifier:
                keyid:58:3E:BE:D8:D1:1D:AA:8F:F7:F3:07:B1:1D:88:A8:91:D6:30:F0:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/583EBED8D11DAA8FF7F307B11D88A891D630F09B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/583EBED8D11DAA8FF7F307B11D88A891D630F09B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/34352e3138322e33322e302f32322d3232203d3e20323639323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:96:48:ea:b8:bc:e1:2b:a5:78:fb:78:bf:bb:ca:c1:cb:88:
         a3:2e:78:b1:6b:6e:db:85:41:3e:c8:92:7a:c8:15:eb:a1:a8:
         43:50:f5:4a:aa:9a:07:49:4f:52:86:38:2c:b3:f9:5e:f8:a4:
         92:9b:a1:41:05:b1:68:f3:6b:74:a8:9e:ba:07:f0:c6:b7:9f:
         dc:cb:17:0f:1d:93:31:87:b0:88:ed:00:7f:60:f6:31:aa:70:
         22:4e:e1:c8:57:09:0f:f2:b3:eb:83:ef:33:d1:88:47:83:f1:
         3e:2a:c0:c4:a4:da:af:ba:e8:ce:d0:97:0e:0e:35:f2:61:20:
         f8:5f:94:1b:48:d8:11:ab:ea:d1:d1:30:15:72:d2:59:3a:10:
         71:3c:e3:ae:b0:03:5e:50:4c:9f:0c:b8:49:1d:40:1a:32:fd:
         11:5b:27:ef:4c:b2:9e:a2:4c:87:f8:b8:fc:66:29:a5:a9:30:
         3d:81:c1:9b:53:8e:f1:e9:17:e9:b0:fc:50:02:b4:7c:19:16:
         e8:1b:ea:d1:00:f3:21:52:4e:82:2d:2a:ce:88:c2:db:84:fb:
         6c:81:93:e3:d2:79:7d:19:17:52:f8:68:12:24:c5:e7:cb:8a:
         44:da:04:34:53:4f:b5:b8:87:dc:fb:1c:5d:a9:84:48:f2:5c:
         7e:7f:80:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:06:44 2026 by rpki-client