Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/34352e3136312e3231322e302f32332d3233203d3e2030.roa
File:                     34352e3136312e3231322e302f32332d3233203d3e2030.roa (raw, json)
Hash identifier:          HvKtSw8emQio/y8tfe1PnEtLVhAXda2VgI0jK7OzecI=
Subject key identifier:   00:8A:95:EC:3F:CA:4F:62:FE:CC:98:47:27:45:A1:2D:1D:8E:5B:50
Certificate issuer:       /CN=E4D8CCD977C22C786BC1F173FC4E7792E8A4420A
Certificate serial:       46BA691F6F5D22C18E745EDF93A510AB57D69103
Authority key identifier: E4:D8:CC:D9:77:C2:2C:78:6B:C1:F1:73:FC:4E:77:92:E8:A4:42:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/34352e3136312e3231322e302f32332d3233203d3e2030.roa
Signing time:             Thu 05 Feb 2026 04:44:39 +0000
ROA not before:           Thu 05 Feb 2026 04:39:39 +0000
ROA not after:            Thu 04 Feb 2027 04:44:39 +0000
asID:                     0
IP address blocks:        45.161.212.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.crl
                          rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Mar 2026 21:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ba:69:1f:6f:5d:22:c1:8e:74:5e:df:93:a5:10:ab:57:d6:91:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4D8CCD977C22C786BC1F173FC4E7792E8A4420A
        Validity
            Not Before: Feb  5 04:39:39 2026 GMT
            Not After : Feb  4 04:44:39 2027 GMT
        Subject: CN=008A95EC3FCA4F62FECC98472745A12D1D8E5B50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:05:f2:4b:7f:88:7b:b6:b8:06:ef:8f:87:4b:
                    bd:32:e6:8e:99:e3:9b:18:d2:25:03:1f:58:f3:89:
                    fc:09:1e:6c:17:35:3b:ad:a5:be:e4:56:24:3b:cd:
                    fd:80:6d:84:50:d2:ae:73:d8:f7:67:04:9a:d5:2b:
                    fd:3d:a1:9c:f6:95:84:4d:24:35:c9:be:64:2b:37:
                    60:fa:79:09:13:db:20:ee:b7:43:d2:be:4b:db:25:
                    ad:c7:f7:c3:eb:e6:cd:b5:03:af:f3:45:a3:d9:23:
                    87:6c:2e:67:d3:a6:80:07:c8:4e:b4:4d:9c:6c:6b:
                    96:70:93:46:b5:f3:25:5b:28:a5:4a:9c:45:00:30:
                    8e:55:93:4a:3e:f6:3e:c7:13:e4:57:16:de:d9:4d:
                    40:67:e9:f0:fc:17:c9:bc:06:75:72:8d:2f:6b:23:
                    72:b3:82:3e:10:cd:54:c6:10:50:7d:fa:06:ff:ff:
                    cc:16:3c:17:0f:f7:f7:be:bf:f2:01:b7:73:c1:ab:
                    99:14:2d:a6:f4:d4:d0:44:08:3b:37:cc:91:f4:65:
                    88:4b:b4:20:c2:94:9a:89:08:ba:2b:23:26:bb:31:
                    51:e5:ae:4f:9b:03:6b:43:8e:96:7f:b6:e1:0e:cc:
                    0a:e8:1c:db:37:c5:78:83:c2:25:38:c6:86:4b:c3:
                    c2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:8A:95:EC:3F:CA:4F:62:FE:CC:98:47:27:45:A1:2D:1D:8E:5B:50
            X509v3 Authority Key Identifier:
                keyid:E4:D8:CC:D9:77:C2:2C:78:6B:C1:F1:73:FC:4E:77:92:E8:A4:42:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/34352e3136312e3231322e302f32332d3233203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:93:26:43:25:23:b1:54:7a:7c:4e:18:59:31:30:6d:a2:5b:
         e9:2f:c3:bb:33:aa:9a:8b:cb:52:82:08:b2:af:2e:82:36:97:
         41:9e:e6:04:b8:60:6a:ce:dd:00:d0:90:f7:48:11:f7:7c:f5:
         aa:e7:b9:6a:07:a1:41:64:44:28:67:4d:2a:da:30:86:63:b3:
         d7:b8:ec:2c:22:da:a1:b1:fc:13:b5:be:53:6d:a8:85:99:ea:
         75:91:51:4d:a9:ad:95:b3:33:59:82:1f:b2:f6:9a:2c:bb:d8:
         18:dc:d1:4c:d9:ac:a6:53:c7:a5:21:32:39:b5:3f:f8:f0:ee:
         88:e3:4a:1e:5c:59:71:07:c2:38:2d:c5:5a:c9:70:15:b3:b3:
         e6:7b:36:77:8e:74:b0:8e:47:de:86:4c:6a:c3:0f:e7:d6:52:
         d4:d7:32:f7:90:bb:e3:f3:c9:aa:0e:50:4c:01:09:36:7b:64:
         01:56:b6:b6:0f:7a:70:2a:ce:8f:03:e3:7f:ae:b1:7f:62:d7:
         7b:d3:6f:b3:7c:d2:7f:6c:ec:62:27:dd:a7:ff:7e:6e:b2:4f:
         e1:f8:5a:1b:68:f7:69:c1:06:f0:ea:9c:0f:d1:c4:dc:43:92:
         7e:63:f5:a9:fc:7f:a8:6f:31:96:65:b3:36:0b:83:64:05:3d:
         4b:d7:3a:52
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIURrppH29dIsGOdF7fk6UQq1fWkQMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTREOENDRDk3N0MyMkM3ODZCQzFGMTczRkM0RTc3OTJF
OEE0NDIwQTAeFw0yNjAyMDUwNDM5MzlaFw0yNzAyMDQwNDQ0MzlaMDMxMTAvBgNV
BAMTKDAwOEE5NUVDM0ZDQTRGNjJGRUNDOTg0NzI3NDVBMTJEMUQ4RTVCNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChBfJLf4h7trgG74+HS70y5o6Z
45sY0iUDH1jzifwJHmwXNTutpb7kViQ7zf2AbYRQ0q5z2PdnBJrVK/09oZz2lYRN
JDXJvmQrN2D6eQkT2yDut0PSvkvbJa3H98Pr5s21A6/zRaPZI4dsLmfTpoAHyE60
TZxsa5Zwk0a18yVbKKVKnEUAMI5Vk0o+9j7HE+RXFt7ZTUBn6fD8F8m8BnVyjS9r
I3Kzgj4QzVTGEFB9+gb//8wWPBcP9/e+v/IBt3PBq5kULab01NBECDs3zJH0ZYhL
tCDClJqJCLorIya7MVHlrk+bA2tDjpZ/tuEOzAroHNs3xXiDwiU4xoZLw8J9AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUAIqV7D/KT2L+zJhHJ0WhLR2OW1AwHwYDVR0j
BBgwFoAU5NjM2XfCLHhrwfFz/E53kuikQgowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGZhdnBQVVlFdGFEWHp1bUJvQmo0ZmhQVTV2Y21Ld0ozSEJ1cmRlWkJi
b2IvMS9FNEQ4Q0NEOTc3QzIyQzc4NkJDMUYxNzNGQzRFNzc5MkU4QTQ0MjBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U0RDhDQ0Q5NzdDMjJDNzg2
QkMxRjE3M0ZDNEU3NzkyRThBNDQyMEEuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCB
kQYIKwYBBQUHMAuGgYRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRmYXZwUFVZRXRhRFh6dW1Cb0JqNGZoUFU1dmNtS3dKM0hCdXJkZVpCYm9iLzEv
MzQzNTJlMzEzNjMxMmUzMjMxMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAS2h1DANBgkqhkiG9w0BAQsFAAOCAQEAJJMmQyUjsVR6fE4YWTEw
baJb6S/DuzOqmovLUoIIsq8ugjaXQZ7mBLhgas7dANCQ90gR93z1que5agehQWRE
KGdNKtowhmOz17jsLCLaobH8E7W+U22ohZnqdZFRTamtlbMzWYIfsvaaLLvYGNzR
TNmsplPHpSEyObU/+PDuiONKHlxZcQfCOC3FWslwFbOz5ns2d450sI5H3oZMasMP
59ZS1Ncy95C74/PJqg5QTAEJNntkAVa2tg96cCrOjwPjf66xf2LXe9Nvs3zSf2zs
Yifdp/9+brJP4fhaG2j3acEG8OqcD9HE3EOSfmP1qfx/qG8xlmWzNguDZAU9S9c6
Ug==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:03:31 2026 by rpki-client