Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/34352e3232392e3230302e302f32342d3234203d3e20323638383239.roa
File:                     34352e3232392e3230302e302f32342d3234203d3e20323638383239.roa (raw, json)
Hash identifier:          2KvQ3xynIXSHK7O+2z0/iweQhILfyE0b8ubUUA4gaJQ=
Subject key identifier:   95:04:E9:2F:B1:0B:CE:7A:AA:8C:0B:AF:E1:99:E1:04:CF:FC:83:FA
Certificate issuer:       /CN=31191729A0CB52CD6AB42531D9E1B5B056F5020B
Certificate serial:       62E39930FCA73999401A5864648E495336D6714B
Authority key identifier: 31:19:17:29:A0:CB:52:CD:6A:B4:25:31:D9:E1:B5:B0:56:F5:02:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31191729A0CB52CD6AB42531D9E1B5B056F5020B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/34352e3232392e3230302e302f32342d3234203d3e20323638383239.roa
Signing time:             Fri 19 Jun 2026 18:13:20 +0000
ROA not before:           Fri 19 Jun 2026 18:08:20 +0000
ROA not after:            Fri 18 Jun 2027 18:13:20 +0000
asID:                     268829
IP address blocks:        45.229.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/31191729A0CB52CD6AB42531D9E1B5B056F5020B.crl
                          rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/31191729A0CB52CD6AB42531D9E1B5B056F5020B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31191729A0CB52CD6AB42531D9E1B5B056F5020B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 18:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:e3:99:30:fc:a7:39:99:40:1a:58:64:64:8e:49:53:36:d6:71:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31191729A0CB52CD6AB42531D9E1B5B056F5020B
        Validity
            Not Before: Jun 19 18:08:20 2026 GMT
            Not After : Jun 18 18:13:20 2027 GMT
        Subject: CN=9504E92FB10BCE7AAA8C0BAFE199E104CFFC83FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5b:77:a4:32:51:0f:03:37:0d:46:0e:50:6e:
                    12:c0:92:43:af:58:0c:fe:9b:e0:ae:47:c6:38:4d:
                    90:d7:6c:25:6e:08:86:53:3f:3a:4b:ce:55:f9:70:
                    64:cc:63:00:77:02:ef:bf:2c:e3:80:19:c8:6c:5c:
                    91:4d:17:75:87:50:eb:56:f6:f9:49:d5:2e:84:0c:
                    93:61:17:69:c9:87:db:ca:03:19:8e:03:d0:9a:4c:
                    a6:42:f7:e3:d3:ff:7c:9c:87:b4:e8:84:b6:55:71:
                    f4:d7:c1:e6:55:22:ef:ce:1c:b0:7c:ea:3b:de:69:
                    99:36:16:2e:0e:cd:62:b5:20:3e:ca:d3:b7:45:ec:
                    59:99:da:94:2e:76:99:3a:e0:8d:27:f5:3a:59:3c:
                    e2:b8:80:93:3a:72:5e:50:a5:5c:60:73:7d:2e:1e:
                    03:29:07:5d:6e:ee:cb:c3:0d:f6:c1:d6:e3:c1:5c:
                    cf:0c:11:32:25:4c:07:28:07:32:5b:13:ab:23:19:
                    46:3f:50:18:15:e2:be:b6:f3:04:b8:b1:5f:cf:ab:
                    7c:d1:53:45:1f:c9:d7:4f:6e:30:43:73:35:9a:69:
                    f9:6b:35:a9:6e:b3:6d:a4:8d:0c:e4:ce:ad:43:87:
                    23:f0:44:7b:2f:e9:53:35:a6:39:0b:59:11:53:95:
                    a9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:04:E9:2F:B1:0B:CE:7A:AA:8C:0B:AF:E1:99:E1:04:CF:FC:83:FA
            X509v3 Authority Key Identifier:
                keyid:31:19:17:29:A0:CB:52:CD:6A:B4:25:31:D9:E1:B5:B0:56:F5:02:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/31191729A0CB52CD6AB42531D9E1B5B056F5020B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31191729A0CB52CD6AB42531D9E1B5B056F5020B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/34352e3232392e3230302e302f32342d3234203d3e20323638383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:1e:5a:8a:82:b9:f3:fb:b4:aa:4e:39:da:74:d2:98:c4:64:
         2f:f9:92:c4:e2:c9:e2:58:95:9a:7f:6e:22:2d:7f:cb:75:bd:
         e3:bc:00:32:68:16:40:dc:97:8e:58:9e:23:92:a4:7b:b3:d4:
         8f:35:4a:ce:93:53:f1:98:7c:0e:37:ae:23:b1:bc:50:95:09:
         59:28:58:b8:34:00:82:9d:7a:6e:da:0b:73:59:90:d1:57:e3:
         2f:3c:5f:df:38:1a:b7:40:92:06:10:a8:6e:f7:04:71:c8:19:
         11:cd:41:7f:e5:84:c8:59:08:e5:d6:0d:10:50:b1:29:cd:7f:
         2e:01:b2:6f:8e:60:e0:59:fa:22:15:8f:e8:42:7e:77:2f:9a:
         01:70:56:de:1c:f1:d9:83:00:0d:b4:bb:b3:15:57:73:2d:96:
         4c:ec:37:0a:11:53:a7:e9:61:b9:50:de:30:a8:42:25:f9:4c:
         f9:19:49:9d:5c:83:34:15:45:80:8e:6d:b6:1e:44:af:98:68:
         ed:17:6b:db:28:2f:1b:ed:37:67:6a:67:50:c4:99:46:a4:fd:
         ac:58:4b:c9:02:14:e4:75:05:2e:2b:eb:3b:49:f8:88:ab:e9:
         0d:ca:69:bf:49:19:e1:96:18:84:30:8f:a8:e6:3c:8f:3b:e9:
         b1:df:4c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:07:05 2026 by rpki-client