Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/34352e3136332e3130302e302f32322d3332203d3e20323638353935.roa
File:                     34352e3136332e3130302e302f32322d3332203d3e20323638353935.roa (raw, json)
Hash identifier:          1EHxXQ2dmBvFEwqj2q5kU9tstbXSjGH6eJ2tEBJ3QL0=
Subject key identifier:   72:5E:AF:D6:C0:BF:4D:6F:D0:13:C7:A2:07:5B:1D:F0:95:7B:22:5A
Certificate issuer:       /CN=5AB81206EE4FA918D4C431BE747879186DE15C96
Certificate serial:       5A28F70391B512B70FB00F82610BF021D3682584
Authority key identifier: 5A:B8:12:06:EE:4F:A9:18:D4:C4:31:BE:74:78:79:18:6D:E1:5C:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB81206EE4FA918D4C431BE747879186DE15C96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/34352e3136332e3130302e302f32322d3332203d3e20323638353935.roa
Signing time:             Thu 04 Jun 2026 00:09:24 +0000
ROA not before:           Thu 04 Jun 2026 00:04:24 +0000
ROA not after:            Thu 03 Jun 2027 00:09:24 +0000
asID:                     268595
IP address blocks:        45.163.100.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/5AB81206EE4FA918D4C431BE747879186DE15C96.crl
                          rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/5AB81206EE4FA918D4C431BE747879186DE15C96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB81206EE4FA918D4C431BE747879186DE15C96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:05:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:28:f7:03:91:b5:12:b7:0f:b0:0f:82:61:0b:f0:21:d3:68:25:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AB81206EE4FA918D4C431BE747879186DE15C96
        Validity
            Not Before: Jun  4 00:04:24 2026 GMT
            Not After : Jun  3 00:09:24 2027 GMT
        Subject: CN=725EAFD6C0BF4D6FD013C7A2075B1DF0957B225A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4c:c1:10:e3:98:53:00:a7:76:00:9e:08:a8:
                    c4:0a:09:7e:e1:39:df:5c:2b:53:5b:af:ad:10:e9:
                    bc:2d:9c:f3:fd:10:06:6c:3a:25:fd:a2:a0:0a:2c:
                    e8:71:1d:41:c0:f7:b9:81:86:28:7d:5e:30:17:93:
                    86:4f:ad:78:31:e5:a0:86:fc:e8:0b:2f:f6:3a:1d:
                    d4:57:ce:8e:e8:d3:67:08:55:68:fa:db:13:15:38:
                    99:68:a8:fb:52:81:56:e7:96:7b:e1:fc:63:e1:a8:
                    c1:8a:46:09:f9:fe:80:b7:92:91:fb:93:35:3c:18:
                    40:35:f0:81:91:20:ba:e1:25:ca:fb:64:e3:cd:40:
                    40:a4:32:30:6e:d5:5a:d3:04:f6:0b:72:14:96:ca:
                    7e:74:01:38:e7:56:11:54:e2:93:7f:86:f5:c6:5b:
                    8a:c4:ae:fe:d3:29:c2:2c:f7:b8:f9:97:39:64:80:
                    3e:9b:21:e6:e4:9f:ea:85:04:31:97:e8:18:7f:34:
                    cb:aa:fe:52:e0:22:53:36:52:b0:13:71:ac:79:d6:
                    a9:7b:72:25:4a:a5:c3:4e:41:0e:ba:61:b3:d2:c6:
                    46:33:52:bf:fe:68:59:74:4a:69:1d:d3:de:23:ff:
                    a5:92:aa:d9:96:06:ce:47:19:c3:d9:11:88:a0:42:
                    81:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:5E:AF:D6:C0:BF:4D:6F:D0:13:C7:A2:07:5B:1D:F0:95:7B:22:5A
            X509v3 Authority Key Identifier:
                keyid:5A:B8:12:06:EE:4F:A9:18:D4:C4:31:BE:74:78:79:18:6D:E1:5C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/5AB81206EE4FA918D4C431BE747879186DE15C96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB81206EE4FA918D4C431BE747879186DE15C96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/34352e3136332e3130302e302f32322d3332203d3e20323638353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:c9:35:c4:84:65:6b:a7:ca:87:1a:b7:10:4b:26:3c:66:61:
         04:36:5f:b8:c0:0d:4b:2e:9a:ab:1b:bf:14:80:6c:1c:b2:25:
         42:df:ef:fb:ec:9f:f7:19:18:12:fe:f4:a2:0b:70:ec:d9:37:
         c6:77:84:38:03:4f:55:67:b2:43:5c:89:dd:a7:86:73:87:6c:
         bb:24:60:86:a3:5c:d3:a9:e4:3f:02:13:c9:1b:4d:d3:41:df:
         0a:8c:09:b5:0a:8e:2e:04:17:6e:f4:49:89:f1:a3:45:40:ef:
         de:85:3a:a1:1c:c4:dd:ee:3a:ec:c9:f4:56:78:94:b3:24:d6:
         65:49:a9:d2:2c:0f:80:4a:f4:54:a9:e0:4b:bd:10:9b:55:fe:
         16:27:e5:b4:83:84:8c:40:68:d4:73:1a:b8:ce:1e:d0:62:11:
         4d:f4:d6:52:97:e2:de:99:d0:28:44:f7:90:1f:1a:7c:d4:a0:
         47:b3:81:83:96:ed:d8:a7:a2:d7:af:18:c7:e4:13:5a:29:49:
         44:59:74:a2:c4:65:3f:e7:7a:d0:43:e1:f2:48:9b:36:7c:a9:
         c9:5b:5a:5d:01:07:21:02:ed:a2:0a:ed:4c:de:2b:14:87:be:
         7b:88:30:ee:32:de:32:3f:22:e9:6b:06:f3:e9:00:1b:13:ab:
         d2:73:a9:bd
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWij3A5G1ErcPsA+CYQvwIdNoJYQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUFCODEyMDZFRTRGQTkxOEQ0QzQzMUJFNzQ3ODc5MTg2
REUxNUM5NjAeFw0yNjA2MDQwMDA0MjRaFw0yNzA2MDMwMDA5MjRaMDMxMTAvBgNV
BAMTKDcyNUVBRkQ2QzBCRjRENkZEMDEzQzdBMjA3NUIxREYwOTU3QjIyNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYTMEQ45hTAKd2AJ4IqMQKCX7h
Od9cK1Nbr60Q6bwtnPP9EAZsOiX9oqAKLOhxHUHA97mBhih9XjAXk4ZPrXgx5aCG
/OgLL/Y6HdRXzo7o02cIVWj62xMVOJloqPtSgVbnlnvh/GPhqMGKRgn5/oC3kpH7
kzU8GEA18IGRILrhJcr7ZOPNQECkMjBu1VrTBPYLchSWyn50ATjnVhFU4pN/hvXG
W4rErv7TKcIs97j5lzlkgD6bIebkn+qFBDGX6Bh/NMuq/lLgIlM2UrATcax51ql7
ciVKpcNOQQ66YbPSxkYzUr/+aFl0Smkd094j/6WSqtmWBs5HGcPZEYigQoE7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUcl6v1sC/TW/QE8eiB1sd8JV7IlowHwYDVR0j
BBgwFoAUWrgSBu5PqRjUxDG+dHh5GG3hXJYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlBjeWRodDFNSlVpc1FBeVdkZEZpNWhCVXRCS2hHZFhHSzlyRE5ZdHVG
TTQvMC81QUI4MTIwNkVFNEZBOTE4RDRDNDMxQkU3NDc4NzkxODZERTE1Qzk2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBQjgxMjA2RUU0RkE5MThE
NEM0MzFCRTc0Nzg3OTE4NkRFMTVDOTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJQY3lkaHQxTUpVaXNRQXlXZGRGaTVoQlV0QktoR2RYR0s5ckROWXR1Rk00LzAv
MzQzNTJlMzEzNjMzMmUzMTMwMzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzgzNTM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIto2QwDQYJKoZIhvcNAQELBQADggEBADjJNcSE
ZWunyocatxBLJjxmYQQ2X7jADUsumqsbvxSAbByyJULf7/vsn/cZGBL+9KILcOzZ
N8Z3hDgDT1VnskNcid2nhnOHbLskYIajXNOp5D8CE8kbTdNB3wqMCbUKji4EF270
SYnxo0VA796FOqEcxN3uOuzJ9FZ4lLMk1mVJqdIsD4BK9FSp4Eu9EJtV/hYn5bSD
hIxAaNRzGrjOHtBiEU301lKX4t6Z0ChE95AfGnzUoEezgYOW7dinotevGMfkE1op
SURZdKLEZT/netBD4fJImzZ8qclbWl0BByEC7aIK7UzeKxSHvnuIMO4y3jI/Iulr
BvPpABsTq9Jzqb0=
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:06:53 2026 by rpki-client