Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGP63hbJbS2V5hmV5hmLozG31tFz7spM5iqnm7Kcnhqs/0/34352e3136372e3138342e302f32322d3332203d3e20323638303139.roa
File:                     34352e3136372e3138342e302f32322d3332203d3e20323638303139.roa (raw, json)
Hash identifier:          cf9tCJToTkHfWTyYbnwgJJUNYOtg8G4O9CvRfU40jUo=
Subject key identifier:   12:5A:C5:F9:82:49:5B:52:45:6D:25:EE:AA:1D:67:FC:B0:A8:D3:19
Certificate issuer:       /CN=AAB82211A9DC72774798082A78A14DF30D04EA65
Certificate serial:       5F1BA0C29EE1E32EF7D9DC18B9ED011AD7A7EB91
Authority key identifier: AA:B8:22:11:A9:DC:72:77:47:98:08:2A:78:A1:4D:F3:0D:04:EA:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAB82211A9DC72774798082A78A14DF30D04EA65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGP63hbJbS2V5hmV5hmLozG31tFz7spM5iqnm7Kcnhqs/0/34352e3136372e3138342e302f32322d3332203d3e20323638303139.roa
Signing time:             Tue 07 Apr 2026 14:34:47 +0000
ROA not before:           Tue 07 Apr 2026 14:29:47 +0000
ROA not after:            Tue 06 Apr 2027 14:34:47 +0000
asID:                     268019
IP address blocks:        45.167.184.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GGP63hbJbS2V5hmV5hmLozG31tFz7spM5iqnm7Kcnhqs/0/AAB82211A9DC72774798082A78A14DF30D04EA65.crl
                          rsync://rpki-repo.registro.br/repo/GGP63hbJbS2V5hmV5hmLozG31tFz7spM5iqnm7Kcnhqs/0/AAB82211A9DC72774798082A78A14DF30D04EA65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAB82211A9DC72774798082A78A14DF30D04EA65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 06:44:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:1b:a0:c2:9e:e1:e3:2e:f7:d9:dc:18:b9:ed:01:1a:d7:a7:eb:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB82211A9DC72774798082A78A14DF30D04EA65
        Validity
            Not Before: Apr  7 14:29:47 2026 GMT
            Not After : Apr  6 14:34:47 2027 GMT
        Subject: CN=125AC5F982495B52456D25EEAA1D67FCB0A8D319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c8:72:5c:cb:16:a8:62:d7:94:f1:f0:05:4e:
                    9f:ef:5a:92:00:ab:b8:c6:f8:48:1e:eb:79:da:0d:
                    42:72:70:0c:21:a1:38:2c:34:29:57:1a:14:d4:ff:
                    67:55:60:8a:d9:91:e8:6b:20:8a:62:2f:2b:4a:8a:
                    6c:d2:c9:b1:9e:a1:cd:1d:a0:2f:aa:02:d4:92:a3:
                    80:d0:b5:e6:26:6d:65:7b:a3:3b:83:a9:7a:35:a9:
                    c8:c9:2c:5f:ff:9d:c3:79:15:e7:0f:b8:4a:61:44:
                    c7:5c:f4:f9:8f:1c:54:c4:2c:bf:74:02:ac:7e:b5:
                    63:6b:4d:98:58:d6:c6:93:40:4d:e1:ec:35:08:1a:
                    f9:95:57:36:1f:a7:f5:1f:87:65:ae:31:c0:8f:da:
                    88:d6:49:c4:54:71:62:31:d3:c0:1e:98:58:36:86:
                    54:be:4f:d7:8a:38:13:58:88:4a:c8:53:30:2a:9b:
                    7f:96:3c:9e:10:25:36:19:d2:22:84:c1:aa:0a:59:
                    9b:3c:63:74:ac:9c:02:2f:32:96:06:67:03:e2:d8:
                    dc:1b:52:7a:01:9d:dc:e9:87:fb:42:d8:3e:f8:b2:
                    bb:84:74:30:80:d5:01:5d:f4:3a:76:b4:6e:78:01:
                    88:46:6b:d3:d2:16:f2:a9:94:5e:03:f9:dc:ea:d7:
                    e2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:5A:C5:F9:82:49:5B:52:45:6D:25:EE:AA:1D:67:FC:B0:A8:D3:19
            X509v3 Authority Key Identifier:
                keyid:AA:B8:22:11:A9:DC:72:77:47:98:08:2A:78:A1:4D:F3:0D:04:EA:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGP63hbJbS2V5hmV5hmLozG31tFz7spM5iqnm7Kcnhqs/0/AAB82211A9DC72774798082A78A14DF30D04EA65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAB82211A9DC72774798082A78A14DF30D04EA65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGP63hbJbS2V5hmV5hmLozG31tFz7spM5iqnm7Kcnhqs/0/34352e3136372e3138342e302f32322d3332203d3e20323638303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:cb:7b:17:5d:de:f6:70:68:fb:c0:53:83:2e:13:5e:1f:5a:
         b8:28:ed:02:62:4b:4f:3b:8b:c9:57:53:b3:ea:e5:f9:7c:c7:
         13:3e:9b:ec:8c:ba:ed:fa:45:da:36:17:8c:38:9b:4d:2a:ca:
         00:97:67:c2:96:8d:39:db:d0:dd:dd:78:1c:40:32:ff:9a:bb:
         aa:85:db:51:e0:15:d0:71:cc:dc:c1:58:cc:d4:62:08:5d:8d:
         f0:6c:4a:5b:5e:96:05:39:47:f4:f5:ca:3b:85:5b:39:19:c0:
         5a:67:3d:6d:f0:60:e4:a5:0b:f3:aa:64:8a:a5:52:fb:18:99:
         96:c8:27:f6:7f:9d:af:6b:9c:1c:7f:88:40:79:08:73:0f:06:
         87:3f:13:10:80:f4:a5:99:e3:22:58:9d:e1:2d:cc:73:bd:09:
         68:25:57:ce:9d:44:8e:fa:61:82:b7:e8:ef:49:84:f6:63:62:
         c1:ce:02:b7:56:5c:f1:fc:85:e2:49:1f:72:6d:f3:ba:7f:01:
         d7:4d:33:59:aa:33:8f:95:a3:0d:52:2f:18:76:57:0c:4f:d9:
         83:04:73:cd:68:6e:9f:26:c6:a5:b4:7a:9b:e1:0b:63:5a:d8:
         ab:8e:33:c3:57:57:fb:6f:10:92:13:d0:a8:0c:af:fa:69:a6:
         86:bc:71:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 17:58:17 2026 by rpki-client