Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/34352e3136302e39372e302f32342d3234203d3e20323638343037.roa
File:                     34352e3136302e39372e302f32342d3234203d3e20323638343037.roa (raw, json)
Hash identifier:          S2AIpJx3lRdzeAiiHGpkzwfoYducHSgv0mvQQucr9g0=
Subject key identifier:   3F:52:16:EA:D1:7D:36:DB:5A:03:D0:14:62:B5:9A:E6:92:BE:F3:53
Certificate issuer:       /CN=EF19B846B3F7AC14DCE54C7D713543D804F55578
Certificate serial:       54255E997953D5FF3A22B8F01F143B96AE7794D9
Authority key identifier: EF:19:B8:46:B3:F7:AC:14:DC:E5:4C:7D:71:35:43:D8:04:F5:55:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF19B846B3F7AC14DCE54C7D713543D804F55578.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/34352e3136302e39372e302f32342d3234203d3e20323638343037.roa
Signing time:             Wed 28 Jan 2026 14:01:19 +0000
ROA not before:           Wed 28 Jan 2026 13:56:19 +0000
ROA not after:            Wed 27 Jan 2027 14:01:19 +0000
asID:                     268407
IP address blocks:        45.160.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/EF19B846B3F7AC14DCE54C7D713543D804F55578.crl
                          rsync://rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/EF19B846B3F7AC14DCE54C7D713543D804F55578.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF19B846B3F7AC14DCE54C7D713543D804F55578.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 00:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:25:5e:99:79:53:d5:ff:3a:22:b8:f0:1f:14:3b:96:ae:77:94:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF19B846B3F7AC14DCE54C7D713543D804F55578
        Validity
            Not Before: Jan 28 13:56:19 2026 GMT
            Not After : Jan 27 14:01:19 2027 GMT
        Subject: CN=3F5216EAD17D36DB5A03D01462B59AE692BEF353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ec:88:27:c4:b8:6e:2e:bd:1f:f1:62:23:56:
                    97:0f:02:41:3a:c2:cb:41:57:b1:4a:1c:d0:d0:e1:
                    8b:0e:b2:06:24:b1:5f:39:7b:dd:ff:60:c8:1a:cc:
                    d4:88:8f:b9:4a:47:ff:c3:5a:c1:1e:c3:30:74:6c:
                    f4:04:19:06:45:c7:da:f2:1e:41:26:62:15:96:22:
                    4c:18:9c:17:61:07:35:11:1d:ff:b1:06:d2:68:15:
                    a6:88:83:37:35:5a:34:e0:bd:8c:56:8d:84:6a:5b:
                    d0:3b:55:16:81:dd:b5:e4:24:52:6d:c6:47:bb:68:
                    9f:2b:63:aa:4e:6e:13:a1:a3:62:aa:5f:ef:0b:e6:
                    22:f6:bf:78:51:d3:fa:c9:be:74:4c:e3:2b:2f:c0:
                    5f:a9:4a:2f:b2:9f:c6:df:77:83:0e:3d:a1:00:3f:
                    58:a9:9d:b6:a6:e8:8f:a7:42:44:ab:e0:b6:5d:b0:
                    fb:20:e2:95:d5:0a:8f:f8:2f:6b:ef:a1:0b:93:45:
                    b5:ef:46:b9:6a:a8:4c:27:e8:d9:c8:1a:f6:c3:f9:
                    b9:d1:f5:25:70:56:2f:98:44:5f:cc:29:c3:95:d5:
                    a4:83:18:19:58:eb:86:6d:52:26:6d:c0:5e:86:c2:
                    9e:7b:f2:b9:29:fa:05:b5:dd:3c:b5:5d:2d:ee:f4:
                    c2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:52:16:EA:D1:7D:36:DB:5A:03:D0:14:62:B5:9A:E6:92:BE:F3:53
            X509v3 Authority Key Identifier:
                keyid:EF:19:B8:46:B3:F7:AC:14:DC:E5:4C:7D:71:35:43:D8:04:F5:55:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/EF19B846B3F7AC14DCE54C7D713543D804F55578.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF19B846B3F7AC14DCE54C7D713543D804F55578.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/34352e3136302e39372e302f32342d3234203d3e20323638343037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:b9:71:8a:2b:7a:c0:2c:d2:82:eb:b9:dd:42:ed:4c:6f:ad:
         47:28:72:d7:23:87:95:e0:c4:d8:df:cc:17:76:48:e5:d9:d2:
         72:ac:a9:86:36:b4:a7:c9:ec:4f:a7:43:f8:e5:3a:a9:cb:1f:
         e9:ed:0b:d5:70:83:c6:66:d4:f5:f7:81:50:5e:18:c1:9e:64:
         ab:24:c7:29:97:4a:2a:aa:13:e5:c7:d1:9d:c3:66:0c:05:65:
         06:7a:9b:37:47:e9:70:23:ac:9a:50:93:be:cc:2e:d2:e8:d3:
         f9:de:54:76:01:e3:36:27:29:cb:af:1b:c2:41:6f:be:b1:fb:
         b4:a6:9a:90:fa:ae:b4:0e:f2:2a:76:1d:a0:d6:d5:eb:c7:51:
         42:78:76:4f:69:26:cb:85:f0:af:43:27:5a:15:16:ee:4e:07:
         54:93:aa:bc:3a:b7:0c:a8:b7:d7:b5:fc:5f:d2:4c:cd:df:7f:
         15:d9:e2:a7:69:be:f0:17:a4:39:5c:7c:71:94:36:c8:ee:7b:
         06:b8:27:ba:f9:74:c3:f1:23:8c:3b:d6:c1:0c:42:c3:64:36:
         fa:fe:ea:eb:92:eb:0f:b6:b8:85:d8:01:3f:29:85:3d:a2:0c:
         34:2a:38:57:b2:4d:ed:09:84:3a:f6:1a:9b:95:30:98:56:86:
         d9:8a:38:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:54:26 2026 by rpki-client