Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGP63hbJbS2V5hmV5hmLozG31tFz7spM5iqnm7Kcnhqs/0/34352e3232352e3138322e302f32332d3332203d3e20323638303139.roa
File:                     34352e3232352e3138322e302f32332d3332203d3e20323638303139.roa (raw, json)
Hash identifier:          5ggqysIVPi0H0NRmeOzJ+0PoIO6IHbvTIDT9o7FTQrs=
Subject key identifier:   52:2A:21:09:CA:FA:1F:52:08:F0:00:3D:F4:5D:AB:93:DF:44:98:FA
Certificate issuer:       /CN=AAB82211A9DC72774798082A78A14DF30D04EA65
Certificate serial:       32029DAA9A771FCF4245D39C6FB0769AC6622655
Authority key identifier: AA:B8:22:11:A9:DC:72:77:47:98:08:2A:78:A1:4D:F3:0D:04:EA:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAB82211A9DC72774798082A78A14DF30D04EA65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGP63hbJbS2V5hmV5hmLozG31tFz7spM5iqnm7Kcnhqs/0/34352e3232352e3138322e302f32332d3332203d3e20323638303139.roa
Signing time:             Tue 07 Apr 2026 14:16:53 +0000
ROA not before:           Tue 07 Apr 2026 14:11:53 +0000
ROA not after:            Tue 06 Apr 2027 14:16:53 +0000
asID:                     268019
IP address blocks:        45.225.182.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GGP63hbJbS2V5hmV5hmLozG31tFz7spM5iqnm7Kcnhqs/0/AAB82211A9DC72774798082A78A14DF30D04EA65.crl
                          rsync://rpki-repo.registro.br/repo/GGP63hbJbS2V5hmV5hmLozG31tFz7spM5iqnm7Kcnhqs/0/AAB82211A9DC72774798082A78A14DF30D04EA65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAB82211A9DC72774798082A78A14DF30D04EA65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 06:44:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:02:9d:aa:9a:77:1f:cf:42:45:d3:9c:6f:b0:76:9a:c6:62:26:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB82211A9DC72774798082A78A14DF30D04EA65
        Validity
            Not Before: Apr  7 14:11:53 2026 GMT
            Not After : Apr  6 14:16:53 2027 GMT
        Subject: CN=522A2109CAFA1F5208F0003DF45DAB93DF4498FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6c:02:c0:bb:22:7d:8e:5d:86:cb:6b:90:bc:
                    51:41:38:7e:2b:52:73:ab:f3:2f:51:53:20:62:75:
                    fc:12:2b:39:f1:7d:e1:e5:02:37:63:ad:e0:02:61:
                    5c:aa:98:3d:c0:4a:cb:37:c1:28:7f:1c:6f:f9:35:
                    43:8a:ea:89:14:a2:96:bd:93:55:ad:70:3e:04:18:
                    d2:35:5c:8e:12:42:aa:ef:97:17:44:5f:17:bb:54:
                    75:74:35:ae:23:41:b9:09:2e:2f:9d:66:0e:0c:4b:
                    f8:ed:6d:d9:f9:23:a2:f2:ba:bb:c0:6a:38:32:09:
                    27:ae:71:f4:4b:29:48:ec:ee:a5:95:9f:4f:97:74:
                    cc:50:3d:3d:fe:25:fc:b6:96:5a:6d:de:70:a1:29:
                    1e:c1:9f:62:78:b9:f5:5c:1d:fd:87:72:2d:16:f1:
                    cc:43:05:b5:b0:86:5d:db:b1:a2:dd:20:50:af:06:
                    73:26:47:8b:8f:7d:1d:ab:a7:68:b1:7f:b4:02:73:
                    7a:f3:21:81:dc:92:18:0b:8d:73:ab:82:45:d7:15:
                    dc:1d:7a:03:62:cd:2a:4d:f3:cc:7c:dc:ba:69:16:
                    ee:fa:b4:71:0b:b9:85:2a:d1:73:eb:0c:f5:b8:72:
                    a4:d9:ec:43:32:ec:ae:b5:4b:5c:3b:42:ba:00:bb:
                    ca:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:2A:21:09:CA:FA:1F:52:08:F0:00:3D:F4:5D:AB:93:DF:44:98:FA
            X509v3 Authority Key Identifier:
                keyid:AA:B8:22:11:A9:DC:72:77:47:98:08:2A:78:A1:4D:F3:0D:04:EA:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGP63hbJbS2V5hmV5hmLozG31tFz7spM5iqnm7Kcnhqs/0/AAB82211A9DC72774798082A78A14DF30D04EA65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAB82211A9DC72774798082A78A14DF30D04EA65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGP63hbJbS2V5hmV5hmLozG31tFz7spM5iqnm7Kcnhqs/0/34352e3232352e3138322e302f32332d3332203d3e20323638303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:81:6a:3c:ac:fe:b5:ab:98:34:44:6f:69:58:49:a9:29:00:
         31:77:76:fb:1d:7d:61:f4:c1:4d:c0:2b:9e:72:bb:2d:37:68:
         e7:37:4a:54:42:17:4d:6b:39:e4:d8:d0:47:9e:02:58:65:42:
         08:74:98:9c:d9:18:90:c7:4e:54:92:6a:43:50:4a:96:f6:2e:
         1c:60:5c:90:e1:27:57:b7:b8:10:e3:87:4c:0a:74:14:02:c7:
         c0:10:11:57:83:7f:b4:80:a6:a9:7e:8b:29:0f:a4:75:12:bc:
         0e:2a:78:2e:6a:57:29:70:c8:42:2b:da:30:be:b6:47:40:0b:
         2d:70:e8:d5:e3:37:14:e8:77:55:28:29:ab:06:f0:52:83:bd:
         3e:ac:bb:54:51:31:3f:1d:19:1b:16:d0:b0:09:ea:3f:21:e9:
         cb:52:0d:e7:d6:63:7d:20:09:5e:ee:68:32:93:4e:b4:bb:6f:
         51:75:a2:e1:ed:d3:d8:65:4f:2d:36:f3:df:71:c0:aa:59:cd:
         40:db:a9:43:09:ae:b9:d2:b4:1a:7c:3b:c8:1f:4b:fe:f2:e8:
         99:72:68:0e:21:d8:36:ff:9e:2e:64:b5:89:cd:c2:b2:72:4f:
         4a:42:ad:4b:33:28:53:aa:ce:8e:f9:ae:49:88:ae:b6:eb:5a:
         c5:ee:0f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 17:58:18 2026 by rpki-client