Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/34352e3233392e3137362e302f32332d3234203d3e20323733353933.roa
File:                     34352e3233392e3137362e302f32332d3234203d3e20323733353933.roa (raw, json)
Hash identifier:          EkDrL7UVjOKc7PCg4QVcf85Bbj4Ymie81m/stWCm2Dw=
Subject key identifier:   41:DB:4E:59:9E:87:73:B4:01:B8:D7:CD:7D:5C:60:86:C6:E8:F5:C1
Certificate issuer:       /CN=9828F8A8915A72753136825A1F46FECBBF95B7E4
Certificate serial:       7D60A66D416E0E940E03345E287B73A9D80401DA
Authority key identifier: 98:28:F8:A8:91:5A:72:75:31:36:82:5A:1F:46:FE:CB:BF:95:B7:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9828F8A8915A72753136825A1F46FECBBF95B7E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/34352e3233392e3137362e302f32332d3234203d3e20323733353933.roa
Signing time:             Wed 20 May 2026 19:43:02 +0000
ROA not before:           Wed 20 May 2026 19:38:02 +0000
ROA not after:            Wed 19 May 2027 19:43:02 +0000
asID:                     273593
IP address blocks:        45.239.176.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/9828F8A8915A72753136825A1F46FECBBF95B7E4.crl
                          rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/9828F8A8915A72753136825A1F46FECBBF95B7E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9828F8A8915A72753136825A1F46FECBBF95B7E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 00:36:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:60:a6:6d:41:6e:0e:94:0e:03:34:5e:28:7b:73:a9:d8:04:01:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9828F8A8915A72753136825A1F46FECBBF95B7E4
        Validity
            Not Before: May 20 19:38:02 2026 GMT
            Not After : May 19 19:43:02 2027 GMT
        Subject: CN=41DB4E599E8773B401B8D7CD7D5C6086C6E8F5C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:91:f0:e1:c3:88:33:97:a8:6a:ab:d8:fe:74:
                    e4:94:5b:81:5b:7c:c9:b0:aa:56:ef:89:a0:ee:30:
                    26:d6:76:ee:c2:64:46:c6:3a:77:78:15:0b:13:07:
                    94:92:c7:55:7a:29:64:07:d5:62:b7:f4:07:a8:ab:
                    14:01:2c:a6:03:8c:c9:75:5d:aa:a2:59:17:b1:9e:
                    63:2d:d9:09:19:7b:fa:36:71:31:60:14:f1:0f:5a:
                    9e:8c:50:9f:2d:20:a9:f5:cb:71:30:be:4c:7c:fd:
                    4a:bc:cc:5f:1e:a4:1f:5f:0a:10:60:34:60:45:e5:
                    7a:07:28:4a:cf:8e:17:e1:f1:b1:97:3e:b1:45:f9:
                    3f:b7:5f:2f:03:cc:32:90:89:f4:e4:1e:54:25:14:
                    a3:96:5e:e0:49:ab:4e:46:2b:cb:ed:61:63:78:f5:
                    a7:53:f1:fe:e8:de:8e:15:28:88:d9:b9:76:20:4f:
                    e1:69:8b:03:28:c1:63:fd:d3:a9:b0:75:79:9b:f9:
                    8f:3a:ed:48:6a:35:af:1f:50:5a:23:79:34:e5:83:
                    9e:05:97:fc:6e:0c:6a:8b:99:f6:25:3c:ad:34:b1:
                    dd:90:1c:96:f0:7d:4e:3d:e2:e6:5b:e7:22:84:b2:
                    1f:d3:0b:4e:2a:7d:94:5d:fa:38:58:12:11:df:0a:
                    83:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:DB:4E:59:9E:87:73:B4:01:B8:D7:CD:7D:5C:60:86:C6:E8:F5:C1
            X509v3 Authority Key Identifier:
                keyid:98:28:F8:A8:91:5A:72:75:31:36:82:5A:1F:46:FE:CB:BF:95:B7:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/9828F8A8915A72753136825A1F46FECBBF95B7E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9828F8A8915A72753136825A1F46FECBBF95B7E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/34352e3233392e3137362e302f32332d3234203d3e20323733353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:0a:93:9e:e5:7b:6a:3a:7c:00:16:67:a2:96:e0:f3:0b:25:
         89:a5:d6:c3:a1:d6:f3:fd:a4:35:55:49:c1:8e:e3:16:1d:9b:
         45:05:11:84:ce:41:3a:13:c7:17:26:45:a2:b0:16:e6:36:5f:
         d5:37:f1:40:f7:63:f3:25:b4:a7:00:43:aa:e9:7a:ca:db:0b:
         ce:02:06:f0:46:eb:24:4e:de:4a:be:e7:65:df:78:7b:e9:c7:
         a1:b5:27:21:17:65:f9:6d:b2:f4:ef:e3:47:a4:26:76:04:7a:
         a9:cc:80:e6:bb:e9:7d:29:0e:96:ec:d3:32:9d:cb:e3:4e:97:
         3f:25:64:54:52:3a:01:3d:f1:5b:f5:25:c1:8e:6f:a7:5f:73:
         bd:68:e5:2a:23:c5:ef:0d:ed:85:9b:e3:46:e7:59:28:23:a6:
         d1:9c:26:ee:de:ba:64:bf:49:b6:cb:10:25:64:f2:74:08:75:
         46:9b:94:60:f9:f0:65:4f:b2:c2:94:44:16:a0:b0:9c:8e:b7:
         f2:bf:cf:4d:9e:2f:47:49:54:ee:0c:27:0e:10:ba:54:95:0f:
         18:64:da:cc:8e:86:b9:86:10:3d:26:80:2c:38:17:8e:7c:ce:
         48:0f:df:2b:0e:b3:6d:e8:23:80:9b:a2:d2:5e:fd:b9:74:92:
         7f:27:06:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:14:22 2026 by rpki-client