Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233372e302f32342d3234203d3e20323639353935.roa
File:                     34352e3138382e3233372e302f32342d3234203d3e20323639353935.roa (raw, json)
Hash identifier:          X4V3hiefVagX2QVjb1eKIirPQxcPfRE6NFvg+ivvIw0=
Subject key identifier:   28:88:46:FA:B9:E9:62:D4:F7:AE:37:03:B1:CF:4A:F7:C8:84:5A:1F
Certificate issuer:       /CN=865E4084EB9CC37490D84CAD248A42FB9B96C698
Certificate serial:       5DE5D5B207F658F6A7978B6165C60A328A100475
Authority key identifier: 86:5E:40:84:EB:9C:C3:74:90:D8:4C:AD:24:8A:42:FB:9B:96:C6:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/865E4084EB9CC37490D84CAD248A42FB9B96C698.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233372e302f32342d3234203d3e20323639353935.roa
Signing time:             Mon 23 Feb 2026 19:22:29 +0000
ROA not before:           Mon 23 Feb 2026 19:17:29 +0000
ROA not after:            Mon 22 Feb 2027 19:22:29 +0000
asID:                     269595
IP address blocks:        45.188.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/865E4084EB9CC37490D84CAD248A42FB9B96C698.crl
                          rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/865E4084EB9CC37490D84CAD248A42FB9B96C698.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/865E4084EB9CC37490D84CAD248A42FB9B96C698.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 11:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e5:d5:b2:07:f6:58:f6:a7:97:8b:61:65:c6:0a:32:8a:10:04:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=865E4084EB9CC37490D84CAD248A42FB9B96C698
        Validity
            Not Before: Feb 23 19:17:29 2026 GMT
            Not After : Feb 22 19:22:29 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f2:f9:7a:8a:7d:48:6b:e6:92:34:f0:5a:fc:
                    36:9d:66:5d:67:4a:52:a3:8e:42:a6:f6:71:8d:d8:
                    95:04:db:3e:91:1b:57:7f:b0:9c:5b:06:21:18:3a:
                    6b:d1:16:93:61:f1:da:32:9d:24:8a:c9:bb:b9:38:
                    a3:0e:55:05:41:89:6d:4f:e3:fd:c2:90:44:38:4b:
                    83:bd:2c:49:5f:78:a0:2c:66:c8:4e:5b:e9:f5:3e:
                    6e:8f:02:1c:94:84:e3:d6:2c:1f:1b:52:a8:5b:88:
                    80:5b:bd:b7:65:85:ab:49:06:88:69:51:2a:01:2a:
                    3c:b0:30:a8:97:f2:f7:d7:7f:d1:76:72:ac:de:bd:
                    8b:d9:ac:b8:d0:60:5c:19:18:f9:62:28:49:af:13:
                    68:10:43:f8:5a:6b:3b:12:8f:6e:d2:b1:c8:97:31:
                    1c:ab:c3:ad:1c:72:3c:19:26:55:59:dc:d1:a1:9c:
                    71:65:85:c8:47:3d:9b:fc:91:c3:b1:6f:44:9e:fe:
                    67:8a:cb:6c:b3:bd:d0:44:14:e4:a0:84:8d:93:2f:
                    9d:95:ef:9f:3c:f3:39:98:15:cb:0d:9f:36:a8:9d:
                    50:d8:b2:7e:b7:ed:98:b2:45:81:e3:87:60:d2:07:
                    ee:78:f3:28:95:25:4f:06:bf:d7:d1:d8:df:35:59:
                    0a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:88:46:FA:B9:E9:62:D4:F7:AE:37:03:B1:CF:4A:F7:C8:84:5A:1F
            X509v3 Authority Key Identifier:
                keyid:86:5E:40:84:EB:9C:C3:74:90:D8:4C:AD:24:8A:42:FB:9B:96:C6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/865E4084EB9CC37490D84CAD248A42FB9B96C698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/865E4084EB9CC37490D84CAD248A42FB9B96C698.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233372e302f32342d3234203d3e20323639353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:a0:da:97:5c:31:b4:a4:da:ae:91:38:7c:cb:83:22:6c:b7:
         a4:09:83:dd:6f:79:07:a4:07:60:c9:e8:c5:b1:1f:19:ff:94:
         2f:31:3b:44:3f:2b:c6:ff:01:b7:d1:55:bd:73:55:bd:2e:33:
         3c:83:36:f5:b3:99:50:95:39:17:f2:90:46:fc:3c:20:11:5b:
         fd:26:f2:57:0c:a4:a8:6d:c2:9e:ae:27:4d:37:a0:26:48:31:
         36:8a:24:83:bc:ed:50:88:93:29:dd:af:96:91:35:87:50:b4:
         ee:50:a7:f9:79:9c:4b:4c:3e:2a:6b:80:25:65:1a:56:01:fd:
         1c:11:ab:8d:00:e1:31:30:52:66:49:d4:1c:2a:a9:cc:17:37:
         9b:09:b5:eb:06:d6:3d:89:41:01:e0:51:ce:1e:0a:55:dc:b8:
         0d:bd:e2:a2:af:c8:ea:f7:f9:8a:3e:3b:a9:a2:70:a6:db:91:
         14:03:5f:53:ec:81:8b:b4:27:12:a5:73:db:60:e2:db:46:7d:
         11:9e:b5:6a:8d:9e:70:a8:96:70:c0:61:e7:17:da:57:93:7e:
         3e:7a:39:4c:2e:7e:6d:23:d2:84:3f:a8:fa:c8:53:47:27:06:
         03:f9:7a:8c:cd:32:cf:24:33:84:4d:7b:a8:b2:2a:34:ec:60:
         23:5a:f4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:36:20 2026 by rpki-client