Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/34352e3232392e3230332e302f32342d3234203d3e20323638383239.roa
File:                     34352e3232392e3230332e302f32342d3234203d3e20323638383239.roa (raw, json)
Hash identifier:          80fo32lgYGIdS6h0V7DsC6Js+HfZ2WJNuhNouBiCMok=
Subject key identifier:   14:2A:08:42:B1:63:0A:0B:AD:73:6D:D6:47:F0:E6:F5:39:B5:CC:9E
Certificate issuer:       /CN=31191729A0CB52CD6AB42531D9E1B5B056F5020B
Certificate serial:       2C32FC0CEDFDFCF4A913115D67DBBC3A03FC3A53
Authority key identifier: 31:19:17:29:A0:CB:52:CD:6A:B4:25:31:D9:E1:B5:B0:56:F5:02:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31191729A0CB52CD6AB42531D9E1B5B056F5020B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/34352e3232392e3230332e302f32342d3234203d3e20323638383239.roa
Signing time:             Fri 19 Jun 2026 18:13:20 +0000
ROA not before:           Fri 19 Jun 2026 18:08:20 +0000
ROA not after:            Fri 18 Jun 2027 18:13:20 +0000
asID:                     268829
IP address blocks:        45.229.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/31191729A0CB52CD6AB42531D9E1B5B056F5020B.crl
                          rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/31191729A0CB52CD6AB42531D9E1B5B056F5020B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31191729A0CB52CD6AB42531D9E1B5B056F5020B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 18:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:32:fc:0c:ed:fd:fc:f4:a9:13:11:5d:67:db:bc:3a:03:fc:3a:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31191729A0CB52CD6AB42531D9E1B5B056F5020B
        Validity
            Not Before: Jun 19 18:08:20 2026 GMT
            Not After : Jun 18 18:13:20 2027 GMT
        Subject: CN=142A0842B1630A0BAD736DD647F0E6F539B5CC9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:82:94:cf:6a:ec:79:e9:4a:25:2c:63:1c:05:
                    62:a3:29:92:7b:0e:84:fa:58:e3:7d:8e:52:86:db:
                    98:a8:aa:db:e5:23:12:25:a0:67:7b:f2:7c:6a:19:
                    77:4d:21:3d:38:c3:ed:75:8d:03:bd:37:dd:a5:c9:
                    69:51:a1:27:4a:a2:93:02:46:58:ad:f2:ef:4e:4b:
                    4e:c4:31:30:ff:63:f2:b0:9c:eb:73:f4:98:8c:17:
                    88:ea:a8:c5:5e:8f:f4:44:b4:a5:43:cc:2a:40:9f:
                    d0:2c:35:92:3b:95:ee:21:b8:18:51:4c:d4:20:2a:
                    8d:91:83:18:fc:38:0c:c6:e2:b1:57:a3:7a:c3:c5:
                    03:30:c9:a1:b5:e7:18:bf:cf:11:18:2d:33:2a:6b:
                    54:ae:61:42:a1:85:6e:69:6f:8a:1c:d9:0e:a2:a6:
                    39:78:59:c4:0e:77:05:82:d8:72:d1:c7:8b:ea:3a:
                    3e:e0:11:65:dd:d7:2e:1f:72:ac:34:d0:ce:d3:6d:
                    ff:19:ba:9c:57:cf:3c:e2:04:46:4d:b8:2b:bf:6f:
                    8d:e9:9f:e9:93:4a:c7:39:9c:ea:a8:da:e2:ff:94:
                    ab:7d:33:89:05:56:13:4d:ae:a0:eb:b5:ad:d2:1b:
                    34:81:f1:aa:c9:22:e3:9e:41:49:29:bf:3f:75:fa:
                    4e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2A:08:42:B1:63:0A:0B:AD:73:6D:D6:47:F0:E6:F5:39:B5:CC:9E
            X509v3 Authority Key Identifier:
                keyid:31:19:17:29:A0:CB:52:CD:6A:B4:25:31:D9:E1:B5:B0:56:F5:02:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/31191729A0CB52CD6AB42531D9E1B5B056F5020B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31191729A0CB52CD6AB42531D9E1B5B056F5020B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/34352e3232392e3230332e302f32342d3234203d3e20323638383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:20:60:b4:94:05:58:f1:b8:ea:6e:b0:e7:53:39:d9:ca:36:
         63:69:af:1b:1d:1f:14:f8:7f:55:e4:78:72:bb:84:0b:d9:fc:
         b6:60:6d:ba:81:d7:a3:dd:ed:aa:89:25:83:7e:53:64:d7:85:
         bc:03:98:7d:e4:43:9a:89:1d:91:e3:ea:c6:9a:da:bf:02:7f:
         60:12:bb:7e:30:bf:e3:6d:af:a2:9c:21:d9:ee:4c:62:a8:78:
         be:af:99:ad:32:88:84:b4:01:64:8c:6b:bc:53:a1:75:e9:2f:
         9d:cb:85:22:ed:7b:2c:19:61:98:18:b0:b2:e1:8a:70:9d:11:
         5b:b0:c4:e2:4c:04:b1:13:cf:c8:8a:73:f3:49:f1:61:dd:dc:
         ff:18:fc:c6:d1:f9:fa:35:58:3e:15:62:db:f1:6e:87:2f:c0:
         f1:20:84:e3:b0:2b:b9:ff:05:d2:6a:1e:16:3c:15:2b:02:94:
         56:69:be:bc:cf:91:63:41:71:39:4c:2d:3a:00:93:65:67:06:
         db:2e:20:02:4b:34:09:ee:a6:fd:47:de:39:b5:da:78:bf:8c:
         ae:04:d9:cc:25:a8:a5:2e:e0:57:94:f9:72:35:13:1f:38:9d:
         da:69:0a:40:a4:26:e4:87:0c:96:d6:7f:a1:0b:95:db:44:5d:
         7a:73:c6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:11:36 2026 by rpki-client