Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F1Zo4U5ddp9meFFNXNWynR2pP4ZWBDUKUcRZsQQMbYrM/0/34352e3136362e3138302e302f32342d3332203d3e20323637393836.roa
File:                     34352e3136362e3138302e302f32342d3332203d3e20323637393836.roa (raw, json)
Hash identifier:          WV9dndzWM2KxWGCU4nW4hfdO6q3Pk5PIJ/VDdPWvHQo=
Subject key identifier:   32:7A:B3:2F:AB:07:63:E2:1E:B5:BE:24:4C:34:B0:97:3C:A3:F7:AB
Certificate issuer:       /CN=54AC13F155FB128EE1E54BFFA49AFA8D920396B2
Certificate serial:       7FCF158A0A5F485DF221E6C3A00D4D4D171DA462
Authority key identifier: 54:AC:13:F1:55:FB:12:8E:E1:E5:4B:FF:A4:9A:FA:8D:92:03:96:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54AC13F155FB128EE1E54BFFA49AFA8D920396B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F1Zo4U5ddp9meFFNXNWynR2pP4ZWBDUKUcRZsQQMbYrM/0/34352e3136362e3138302e302f32342d3332203d3e20323637393836.roa
Signing time:             Tue 07 Jul 2026 15:20:08 +0000
ROA not before:           Tue 07 Jul 2026 15:15:08 +0000
ROA not after:            Tue 06 Jul 2027 15:20:08 +0000
asID:                     267986
IP address blocks:        45.166.180.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F1Zo4U5ddp9meFFNXNWynR2pP4ZWBDUKUcRZsQQMbYrM/0/54AC13F155FB128EE1E54BFFA49AFA8D920396B2.crl
                          rsync://rpki-repo.registro.br/repo/F1Zo4U5ddp9meFFNXNWynR2pP4ZWBDUKUcRZsQQMbYrM/0/54AC13F155FB128EE1E54BFFA49AFA8D920396B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54AC13F155FB128EE1E54BFFA49AFA8D920396B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 10:43:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:cf:15:8a:0a:5f:48:5d:f2:21:e6:c3:a0:0d:4d:4d:17:1d:a4:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54AC13F155FB128EE1E54BFFA49AFA8D920396B2
        Validity
            Not Before: Jul  7 15:15:08 2026 GMT
            Not After : Jul  6 15:20:08 2027 GMT
        Subject: CN=327AB32FAB0763E21EB5BE244C34B0973CA3F7AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:80:29:5d:2a:24:e6:fa:a7:4c:5f:68:c1:6e:
                    7d:2a:40:d2:0f:d1:f2:0b:07:86:c7:19:3d:9a:db:
                    4f:cc:c7:b0:7e:df:c7:6c:24:38:db:d0:05:67:16:
                    30:bf:d6:e3:e9:5b:5a:b6:f9:ec:53:2d:2e:98:fd:
                    81:47:fe:82:13:d6:aa:75:d2:80:48:47:a2:3c:f4:
                    0c:0e:06:6d:5c:e3:b3:89:4c:4a:31:ff:ac:04:a8:
                    7b:60:a8:48:80:33:0b:06:d3:03:b5:90:8d:63:a9:
                    f3:9b:e9:15:8b:71:f5:59:7f:06:96:f3:53:b6:19:
                    1d:aa:ba:7a:e2:6b:f3:66:50:8b:9a:50:ab:c9:b4:
                    09:3a:ae:50:0d:20:84:dc:88:a4:7f:d2:97:88:ab:
                    5b:97:c7:f2:80:4a:12:22:d0:b3:5a:69:0f:01:c4:
                    5d:2f:c7:5f:a8:ec:88:f3:66:37:c0:2c:7a:fa:35:
                    d6:e2:f3:27:c1:db:48:fa:fe:9d:b6:0c:e3:e4:96:
                    3b:3a:c9:0f:9e:98:f3:13:03:f7:75:a0:8f:6b:eb:
                    d9:81:0d:81:59:a3:78:ee:43:a3:40:95:d6:28:b6:
                    a1:3a:23:81:17:80:d0:c3:17:63:7e:a8:ed:55:50:
                    d8:de:2d:de:19:9b:ca:03:12:3d:63:d7:4c:8e:70:
                    ef:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:7A:B3:2F:AB:07:63:E2:1E:B5:BE:24:4C:34:B0:97:3C:A3:F7:AB
            X509v3 Authority Key Identifier:
                keyid:54:AC:13:F1:55:FB:12:8E:E1:E5:4B:FF:A4:9A:FA:8D:92:03:96:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F1Zo4U5ddp9meFFNXNWynR2pP4ZWBDUKUcRZsQQMbYrM/0/54AC13F155FB128EE1E54BFFA49AFA8D920396B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54AC13F155FB128EE1E54BFFA49AFA8D920396B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F1Zo4U5ddp9meFFNXNWynR2pP4ZWBDUKUcRZsQQMbYrM/0/34352e3136362e3138302e302f32342d3332203d3e20323637393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:54:07:c3:f5:93:c5:d0:38:0a:26:7f:eb:e7:e4:96:f7:49:
         b4:22:ac:e5:e7:f9:67:4a:d2:c8:d6:e4:09:ce:c4:9d:9a:ea:
         88:0c:05:59:aa:33:31:0a:3a:ee:eb:b1:1f:d6:fa:0c:ab:23:
         d6:75:4b:79:e4:16:5e:41:59:6f:9e:75:f6:59:3f:1f:19:03:
         20:c7:bc:d3:71:da:f4:c6:e2:e5:0a:41:87:49:bd:10:3c:e6:
         d4:9c:7c:98:29:35:2d:85:f8:f3:d4:12:66:38:68:f9:70:0c:
         e6:d1:28:c1:42:bc:cb:97:1e:91:b9:1a:33:6b:4c:e3:90:c1:
         30:9c:89:53:f6:60:d4:c6:4f:94:65:ea:e1:80:5b:b9:ff:8f:
         f3:f7:f9:79:d3:4b:e0:d0:81:6f:f4:6e:c9:96:67:54:11:6f:
         a8:35:44:46:0c:30:ed:ac:eb:df:99:67:0d:fb:a6:14:1c:58:
         13:c6:b5:be:ef:52:5a:22:4f:11:73:df:58:7a:b6:36:8f:ba:
         5f:ef:5e:2a:ef:c9:14:0a:e3:b5:f1:d7:5c:51:ca:7e:54:38:
         32:8b:eb:4a:fa:20:1c:8a:4c:73:96:bf:17:8f:d5:bb:25:b3:
         1e:4f:3d:98:77:f6:63:11:cc:b1:76:16:e5:ad:74:f7:e5:b8:
         a7:a8:f3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 20:18:03 2026 by rpki-client