Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/34352e3136332e3137342e302f32342d3234203d3e20323638353536.roa
File:                     34352e3136332e3137342e302f32342d3234203d3e20323638353536.roa (raw, json)
Hash identifier:          c6wAdPl+dabUTQmxpnBDuszTNuSTUTD/OKcH/gO6Dzk=
Subject key identifier:   C0:0D:93:AF:23:CD:C1:F3:1D:D2:EE:79:55:DB:CE:24:E0:D3:07:74
Certificate issuer:       /CN=D9870BA926720D53BB9EEBE2A59B473AB1E85E73
Certificate serial:       330B6C1C1565D9E12E7913E87AFCAC1C8CA634FA
Authority key identifier: D9:87:0B:A9:26:72:0D:53:BB:9E:EB:E2:A5:9B:47:3A:B1:E8:5E:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9870BA926720D53BB9EEBE2A59B473AB1E85E73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/34352e3136332e3137342e302f32342d3234203d3e20323638353536.roa
Signing time:             Wed 13 May 2026 13:44:46 +0000
ROA not before:           Wed 13 May 2026 13:39:46 +0000
ROA not after:            Wed 12 May 2027 13:44:46 +0000
asID:                     268556
IP address blocks:        45.163.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/D9870BA926720D53BB9EEBE2A59B473AB1E85E73.crl
                          rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/D9870BA926720D53BB9EEBE2A59B473AB1E85E73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9870BA926720D53BB9EEBE2A59B473AB1E85E73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 07:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:0b:6c:1c:15:65:d9:e1:2e:79:13:e8:7a:fc:ac:1c:8c:a6:34:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9870BA926720D53BB9EEBE2A59B473AB1E85E73
        Validity
            Not Before: May 13 13:39:46 2026 GMT
            Not After : May 12 13:44:46 2027 GMT
        Subject: CN=C00D93AF23CDC1F31DD2EE7955DBCE24E0D30774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:61:ca:a9:ce:18:eb:a9:07:4c:9a:40:bd:7a:
                    89:c8:9a:ea:2c:53:04:21:af:24:8e:db:0d:6b:5d:
                    91:0b:33:0b:2a:61:3c:34:99:ee:91:c0:ff:58:79:
                    d1:c1:f1:19:f0:d9:bc:61:c5:25:ea:9d:ce:da:f5:
                    12:39:4b:87:4d:6b:e1:5a:b6:c5:1f:86:2a:0a:88:
                    3e:a3:20:8c:ab:c5:91:c8:9e:7a:0f:80:72:96:e4:
                    23:28:bd:37:be:9d:17:df:a8:20:9a:32:24:39:ac:
                    99:cf:95:b2:c1:f8:5a:92:ff:4d:67:a3:6b:d3:04:
                    f1:30:b7:bc:6d:34:36:c6:0b:2c:09:ef:01:6d:2f:
                    10:01:c7:5d:47:0b:f5:fd:dc:ae:44:81:16:3f:ea:
                    33:61:73:a8:a0:55:7d:cc:22:25:10:97:f3:87:ec:
                    e1:6a:39:e2:66:07:5c:27:74:59:29:ad:d6:1b:a5:
                    4e:35:ed:e6:0b:65:40:d6:8c:40:11:53:33:db:85:
                    ae:7f:f2:8e:39:be:3a:06:59:8f:67:3d:10:57:12:
                    ad:91:1c:64:8a:4a:74:23:8a:dc:fd:97:9c:35:15:
                    62:97:f3:1b:c3:a7:1a:bc:ed:e8:61:3e:bf:91:11:
                    3d:3e:b6:2e:a0:59:1e:f3:32:e9:bb:99:03:0b:b1:
                    0e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:0D:93:AF:23:CD:C1:F3:1D:D2:EE:79:55:DB:CE:24:E0:D3:07:74
            X509v3 Authority Key Identifier:
                keyid:D9:87:0B:A9:26:72:0D:53:BB:9E:EB:E2:A5:9B:47:3A:B1:E8:5E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/D9870BA926720D53BB9EEBE2A59B473AB1E85E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9870BA926720D53BB9EEBE2A59B473AB1E85E73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/34352e3136332e3137342e302f32342d3234203d3e20323638353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:25:ce:26:7b:9a:b9:ce:2e:40:5f:0c:67:2e:9f:25:0e:2d:
         8e:90:39:15:47:7f:0b:c4:21:e9:7b:28:0a:a6:28:a0:1d:0a:
         79:12:94:55:9d:e3:1b:94:88:5c:76:2a:41:12:ea:b9:a3:63:
         f1:fb:a2:6d:4a:b0:ae:4d:ae:0c:d5:fd:36:6a:03:f3:92:c4:
         27:45:2b:e9:7b:71:05:3c:17:b6:8a:9d:0f:f6:25:96:40:01:
         03:8d:52:d0:21:64:0d:4e:93:ce:95:90:9e:e0:a9:10:90:15:
         d5:ec:56:69:27:ba:09:3f:43:54:52:9e:ed:a4:5d:20:b2:4b:
         2d:b3:1c:a1:c7:99:b5:fc:32:fd:93:ab:30:b5:0e:c4:52:09:
         ad:f3:32:0f:35:d1:e6:ca:e1:35:ae:a5:ba:91:ad:39:8a:5a:
         bc:e9:73:dc:1d:01:15:6b:87:1e:1a:52:cf:55:30:cf:c2:1d:
         ba:d7:05:2e:f0:52:ba:cb:a9:1e:d8:52:eb:98:1a:cf:6c:d9:
         26:f2:1a:69:48:cd:6f:dc:79:9d:9e:2d:b0:9e:ec:89:7e:d8:
         72:c8:1c:ac:67:c0:1c:53:f6:fe:0e:59:14:d5:ad:74:0e:b5:
         1d:4e:c8:27:d0:9d:78:01:01:1c:9f:ab:57:2d:6a:d2:50:96:
         94:3b:fe:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 17:11:20 2026 by rpki-client