Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/F96wKeQj7dkbfVamntmrt249axjSYp4wAQVGi7urbedG/0/34352e3138332e3134382e302f32322d3234203d3e20323639333938.roa
File:                     34352e3138332e3134382e302f32322d3234203d3e20323639333938.roa (raw, json)
Hash identifier:          HiSk+SaE5HSljJt/vF34m3SJ6oUL7/q4FqJGgUnljKg=
Subject key identifier:   E7:00:B6:38:3C:D8:4B:4C:35:AB:86:DC:30:B2:D2:3D:53:F4:CD:A2
Certificate issuer:       /CN=F5E8EE38593579F263FA0D7109586081825A6476
Certificate serial:       284F17BF2EEEEFA64BB92821BA6DDCE73D98D01E
Authority key identifier: F5:E8:EE:38:59:35:79:F2:63:FA:0D:71:09:58:60:81:82:5A:64:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5E8EE38593579F263FA0D7109586081825A6476.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F96wKeQj7dkbfVamntmrt249axjSYp4wAQVGi7urbedG/0/34352e3138332e3134382e302f32322d3234203d3e20323639333938.roa
Signing time:             Thu 20 Aug 2026 15:56:52 +0000
ROA not before:           Thu 20 Aug 2026 15:51:52 +0000
ROA not after:            Thu 19 Aug 2027 15:56:52 +0000
asID:                     269398
IP address blocks:        45.183.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F96wKeQj7dkbfVamntmrt249axjSYp4wAQVGi7urbedG/0/F5E8EE38593579F263FA0D7109586081825A6476.crl
                          rsync://rpki-repo.registro.br/repo/F96wKeQj7dkbfVamntmrt249axjSYp4wAQVGi7urbedG/0/F5E8EE38593579F263FA0D7109586081825A6476.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5E8EE38593579F263FA0D7109586081825A6476.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 00:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:4f:17:bf:2e:ee:ef:a6:4b:b9:28:21:ba:6d:dc:e7:3d:98:d0:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5E8EE38593579F263FA0D7109586081825A6476
        Validity
            Not Before: Aug 20 15:51:52 2026 GMT
            Not After : Aug 19 15:56:52 2027 GMT
        Subject: CN=E700B6383CD84B4C35AB86DC30B2D23D53F4CDA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d3:5c:3d:80:76:c3:9b:49:f1:fa:e6:8f:7d:
                    a7:78:60:38:a9:79:83:a2:89:54:25:60:f5:9f:7b:
                    23:b2:94:d0:ee:92:77:af:56:6b:f1:f6:ff:71:a9:
                    cc:58:0f:41:aa:b0:43:ef:74:81:28:66:fd:01:db:
                    d3:3a:c6:cc:84:27:c1:1b:01:0d:24:1d:63:8c:a1:
                    e4:64:27:51:d5:16:2c:b1:ea:b4:dd:a0:98:86:41:
                    6c:31:e7:ea:0d:34:d8:c4:d6:7d:ac:31:fe:f1:0e:
                    af:ee:9e:9d:99:87:e0:28:77:8b:1a:7e:0f:bf:fb:
                    49:0d:72:76:7c:8e:65:04:a4:8b:91:ef:75:a2:80:
                    c0:ec:a1:d2:af:81:d0:7b:3c:08:25:42:5c:de:e1:
                    6e:44:50:16:4c:e6:7e:1d:08:f8:77:6d:e3:6d:a5:
                    c7:c6:5b:6c:3b:07:eb:a4:af:34:b3:10:d9:d7:a5:
                    2e:0c:bf:9e:13:72:fd:61:66:ba:67:63:ff:86:05:
                    98:7b:75:ee:0f:ca:77:03:a8:e3:6d:a9:9e:68:f9:
                    9e:38:1c:3c:a1:8f:15:03:87:38:b2:a2:24:5b:d1:
                    bf:e4:99:71:8a:ba:0d:26:0a:87:e9:b6:d2:40:3c:
                    7f:f9:e5:99:dc:a8:a2:d3:93:6e:93:b6:83:f0:b3:
                    a9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:00:B6:38:3C:D8:4B:4C:35:AB:86:DC:30:B2:D2:3D:53:F4:CD:A2
            X509v3 Authority Key Identifier:
                keyid:F5:E8:EE:38:59:35:79:F2:63:FA:0D:71:09:58:60:81:82:5A:64:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F96wKeQj7dkbfVamntmrt249axjSYp4wAQVGi7urbedG/0/F5E8EE38593579F263FA0D7109586081825A6476.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5E8EE38593579F263FA0D7109586081825A6476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F96wKeQj7dkbfVamntmrt249axjSYp4wAQVGi7urbedG/0/34352e3138332e3134382e302f32322d3234203d3e20323639333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:02:f2:34:3f:b9:18:3f:45:2e:ff:f2:a8:93:86:89:38:13:
         c9:d1:f7:e9:c8:ae:56:ac:2a:9b:9a:6a:7f:d1:d4:f6:84:5e:
         4b:3a:89:c5:e5:4f:bb:9e:a8:3d:2d:90:5b:06:d3:53:08:4e:
         90:be:79:f6:c4:20:b8:c5:25:f6:1e:f3:a5:2e:b6:4b:f0:2d:
         fe:b7:eb:0e:89:b7:b7:72:df:8f:d1:d5:e1:c9:d7:08:40:6f:
         41:69:78:dd:55:4d:d0:66:0a:cf:60:ef:48:e9:c0:12:38:f8:
         88:61:8a:95:1c:01:19:a7:a6:be:e7:19:24:1d:76:74:18:00:
         87:1d:7f:92:5c:87:0e:37:ab:8e:f6:e3:0b:47:01:2a:ab:7a:
         c7:26:22:ab:5a:fd:64:b7:82:13:63:85:79:01:61:e1:5b:50:
         a3:a8:4d:85:bf:a6:1b:3a:15:8e:50:81:9f:ae:c4:b0:92:46:
         86:5e:65:c2:df:8d:cd:c5:4d:5b:0c:6d:d1:2c:11:50:b0:36:
         73:2f:7a:0f:83:74:f9:56:d6:ff:ff:9f:af:e2:b1:b1:fb:a1:
         c2:04:56:3d:a5:7e:be:e5:f1:99:a7:85:21:35:ab:6a:15:28:
         44:7b:03:5b:fc:55:a2:36:54:97:8f:8c:c0:05:1f:97:35:6c:
         33:ef:dd:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 06:03:50 2026 by rpki-client