Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7hiYrSWTrKSa5bxbjCxXoXp6ZVN55nAi1aiPSDZXTGNp/0/34352e3138322e3234342e302f32322d3234203d3e20323639323434.roa
File:                     34352e3138322e3234342e302f32322d3234203d3e20323639323434.roa (raw, json)
Hash identifier:          YNbGpTSXSfpqg6sGhG1dgnnZ5EhvP/lMk6bp3Q1N7RY=
Subject key identifier:   EB:59:06:7F:9F:E5:B3:7B:ED:06:6F:89:89:BD:82:2D:55:18:C5:7E
Certificate issuer:       /CN=574D83680A71BA8C6BF66ADC922E4A74EDDC50F4
Certificate serial:       0D9F188C89D5B6DBFBDCBF8779365F278CB90FCA
Authority key identifier: 57:4D:83:68:0A:71:BA:8C:6B:F6:6A:DC:92:2E:4A:74:ED:DC:50:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/574D83680A71BA8C6BF66ADC922E4A74EDDC50F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7hiYrSWTrKSa5bxbjCxXoXp6ZVN55nAi1aiPSDZXTGNp/0/34352e3138322e3234342e302f32322d3234203d3e20323639323434.roa
Signing time:             Fri 10 Apr 2026 13:01:12 +0000
ROA not before:           Fri 10 Apr 2026 12:56:12 +0000
ROA not after:            Fri 09 Apr 2027 13:01:12 +0000
asID:                     269244
IP address blocks:        45.182.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7hiYrSWTrKSa5bxbjCxXoXp6ZVN55nAi1aiPSDZXTGNp/0/574D83680A71BA8C6BF66ADC922E4A74EDDC50F4.crl
                          rsync://rpki-repo.registro.br/repo/7hiYrSWTrKSa5bxbjCxXoXp6ZVN55nAi1aiPSDZXTGNp/0/574D83680A71BA8C6BF66ADC922E4A74EDDC50F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/574D83680A71BA8C6BF66ADC922E4A74EDDC50F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 10:41:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:9f:18:8c:89:d5:b6:db:fb:dc:bf:87:79:36:5f:27:8c:b9:0f:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=574D83680A71BA8C6BF66ADC922E4A74EDDC50F4
        Validity
            Not Before: Apr 10 12:56:12 2026 GMT
            Not After : Apr  9 13:01:12 2027 GMT
        Subject: CN=EB59067F9FE5B37BED066F8989BD822D5518C57E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d8:f3:6b:9a:67:91:51:06:81:cc:e4:30:b5:
                    12:d5:c1:8e:6d:08:57:af:85:b0:11:fd:b1:cd:51:
                    c1:c0:d2:c2:b1:98:c3:9e:e3:b0:f7:44:e9:13:f4:
                    fe:bb:b5:8b:f9:25:e1:61:6d:ff:05:8d:1e:a0:b3:
                    d2:6d:5f:1b:fd:c1:33:fb:9a:f5:1b:a2:15:06:da:
                    cc:f9:e7:00:3b:22:6b:33:ff:04:52:ef:3f:40:ca:
                    b8:a8:3b:7f:10:b5:01:1c:89:c3:b4:ba:86:ec:e9:
                    43:7a:2c:34:7a:28:ec:10:25:a7:c7:3d:ae:39:1c:
                    8c:50:da:41:71:4f:a3:06:03:32:8e:6a:66:f1:02:
                    db:3d:d9:ff:4b:5d:5f:da:f3:89:3e:6a:fa:26:f3:
                    cd:52:83:07:dd:f9:d4:75:60:ca:3c:6e:32:60:4c:
                    7a:7b:f2:89:0d:0e:a8:2d:51:4d:ec:dc:f7:3b:35:
                    02:b0:45:49:4b:61:40:f9:56:fe:a7:d3:36:56:23:
                    a5:ea:8b:db:2e:ca:4e:bf:c5:1a:e1:42:95:42:e4:
                    d0:de:2f:95:48:6f:76:ed:98:04:ae:ba:b4:b9:0f:
                    63:59:d1:ff:95:41:fd:d1:7b:d0:f1:83:0e:4f:fa:
                    67:9a:9b:de:55:c8:96:8a:96:07:12:f3:c4:95:3d:
                    e1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:59:06:7F:9F:E5:B3:7B:ED:06:6F:89:89:BD:82:2D:55:18:C5:7E
            X509v3 Authority Key Identifier:
                keyid:57:4D:83:68:0A:71:BA:8C:6B:F6:6A:DC:92:2E:4A:74:ED:DC:50:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7hiYrSWTrKSa5bxbjCxXoXp6ZVN55nAi1aiPSDZXTGNp/0/574D83680A71BA8C6BF66ADC922E4A74EDDC50F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/574D83680A71BA8C6BF66ADC922E4A74EDDC50F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hiYrSWTrKSa5bxbjCxXoXp6ZVN55nAi1aiPSDZXTGNp/0/34352e3138322e3234342e302f32322d3234203d3e20323639323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:80:5f:f0:17:6b:86:35:00:8d:a1:92:9b:90:d0:d4:82:c7:
         2c:e5:c4:7a:7e:73:f0:93:c4:7e:ee:db:60:85:25:d3:b9:68:
         d9:83:cb:fb:57:70:5a:61:27:cb:61:fe:f3:41:ac:28:f4:77:
         3f:92:dc:4a:4f:be:6d:f0:78:6c:0e:6d:f6:a2:90:ed:ba:00:
         4a:e1:8a:1c:cc:37:56:31:78:00:5a:fc:a8:3c:90:4f:20:42:
         ed:e4:46:2c:ce:b2:b8:1c:e2:57:e8:5b:29:64:52:95:a9:48:
         1f:81:d8:2d:ac:42:57:8e:bb:62:31:74:24:51:ad:71:3a:e8:
         99:20:71:62:97:e7:cc:e4:2e:d2:e3:da:a7:d6:3f:89:8c:05:
         d3:ee:78:9b:a7:a7:c0:51:aa:85:3f:23:63:d1:35:d3:1f:1e:
         48:7f:81:8f:75:26:d6:ab:d3:c5:9c:7f:14:5d:11:5f:fe:0d:
         4a:0b:2f:08:29:7d:33:a7:0c:e3:c7:ad:b6:f2:be:8f:b4:cf:
         36:98:3d:3b:4c:d1:5f:3d:55:cc:1d:6d:7b:f0:6d:1f:10:3a:
         83:32:2a:52:17:88:c9:09:cf:a0:02:ba:14:b9:b4:ba:a2:10:
         34:44:76:5a:df:9d:d6:0f:09:c9:0d:a5:d1:76:70:3a:56:fb:
         8a:99:f0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:39:29 2026 by rpki-client