Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/34352e3232392e32302e302f32322d3232203d3e20323637303931.roa
File:                     34352e3232392e32302e302f32322d3232203d3e20323637303931.roa (raw, json)
Hash identifier:          mYYkx7CDdNQO2yv//6LVteQ0/ztzpQrDAMQ+Q0pc9yU=
Subject key identifier:   03:EA:47:DE:C3:E8:3E:EB:1C:A8:E8:56:CD:15:D8:66:C4:8D:B1:EB
Certificate issuer:       /CN=E533674BA5C26CC97186C54907220754478B1596
Certificate serial:       3A504969DFE43448666D964F199B982412F0D013
Authority key identifier: E5:33:67:4B:A5:C2:6C:C9:71:86:C5:49:07:22:07:54:47:8B:15:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E533674BA5C26CC97186C54907220754478B1596.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/34352e3232392e32302e302f32322d3232203d3e20323637303931.roa
Signing time:             Wed 03 Jun 2026 18:37:15 +0000
ROA not before:           Wed 03 Jun 2026 18:32:15 +0000
ROA not after:            Wed 02 Jun 2027 18:37:15 +0000
asID:                     267091
IP address blocks:        45.229.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/E533674BA5C26CC97186C54907220754478B1596.crl
                          rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/E533674BA5C26CC97186C54907220754478B1596.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E533674BA5C26CC97186C54907220754478B1596.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 17:43:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:50:49:69:df:e4:34:48:66:6d:96:4f:19:9b:98:24:12:f0:d0:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E533674BA5C26CC97186C54907220754478B1596
        Validity
            Not Before: Jun  3 18:32:15 2026 GMT
            Not After : Jun  2 18:37:15 2027 GMT
        Subject: CN=03EA47DEC3E83EEB1CA8E856CD15D866C48DB1EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8b:a2:ae:9f:3b:ad:6d:01:27:b8:3b:1c:88:
                    e6:f6:33:0f:16:3f:a2:9e:02:47:3a:d6:f3:c4:76:
                    af:ee:9c:d1:83:d3:8f:2c:f3:f7:32:0c:78:dd:88:
                    90:b2:64:43:95:50:4e:4e:93:9d:35:9a:ae:21:98:
                    f9:6b:9b:89:0a:c9:fc:b6:ac:6c:ed:0b:a8:c0:ba:
                    1e:cd:d2:b5:97:27:da:76:60:f6:da:c7:d2:27:c5:
                    88:15:58:de:b2:81:65:cc:d0:9d:dd:10:71:d3:7e:
                    d6:ec:a7:19:eb:64:2f:72:b1:75:31:ec:e8:50:35:
                    e2:d1:67:f3:c4:3b:f8:78:42:52:0e:72:b9:33:f3:
                    7d:f7:91:75:e1:07:b2:80:8e:2b:0d:dc:94:45:5c:
                    a6:70:3a:0e:5e:7a:fd:f7:7e:7c:5d:e3:cb:1c:a1:
                    0b:b1:ab:4d:ef:dc:2b:df:0c:33:4e:d1:7d:e1:43:
                    4b:04:2c:ae:a9:b4:5e:b6:a5:8d:0e:17:85:10:5a:
                    4e:b8:ef:01:d3:b7:cf:72:9e:46:cb:ee:e2:f6:38:
                    20:8a:3f:02:1c:48:dd:bd:03:f1:d4:f4:ec:4c:2c:
                    be:65:19:b7:ae:a0:ab:c6:7f:0a:4c:cf:e8:c7:46:
                    02:64:b8:83:59:75:b2:f1:14:16:71:73:60:f1:a1:
                    36:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:EA:47:DE:C3:E8:3E:EB:1C:A8:E8:56:CD:15:D8:66:C4:8D:B1:EB
            X509v3 Authority Key Identifier:
                keyid:E5:33:67:4B:A5:C2:6C:C9:71:86:C5:49:07:22:07:54:47:8B:15:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/E533674BA5C26CC97186C54907220754478B1596.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E533674BA5C26CC97186C54907220754478B1596.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/34352e3232392e32302e302f32322d3232203d3e20323637303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:b1:87:1f:1c:1a:06:90:6e:df:5a:9a:fd:cf:1e:2d:03:5c:
         29:e6:51:6f:8e:1e:75:ff:c1:a2:b9:41:cf:15:a9:d8:87:07:
         90:4d:8d:bb:ea:1b:3c:60:cd:7f:97:ef:fb:a4:37:6a:27:21:
         f7:76:94:99:52:53:8b:73:72:02:c0:e3:95:30:07:f7:9e:28:
         fa:8d:91:fa:59:60:7d:37:97:58:47:98:a5:6b:29:ff:5f:d0:
         d1:63:20:9c:2a:2b:c6:48:8f:ff:f0:d7:f3:32:73:91:8a:41:
         7f:f2:e8:fa:b6:f1:76:7f:ff:9f:d6:3f:9a:c2:20:4f:3c:ff:
         a6:6f:d1:da:fe:e4:e6:28:21:0b:cf:ac:cc:9f:4c:5c:14:4a:
         f1:e8:79:da:87:db:90:9f:22:7f:47:83:21:a8:34:ad:4c:41:
         ff:2a:77:3d:b5:b4:75:30:47:7b:5a:52:d1:f1:0d:d4:1f:e9:
         b1:ca:dd:85:e2:52:a5:9f:75:25:4b:b0:f3:3d:8b:e9:3f:21:
         69:cf:b5:37:04:06:01:7d:0d:28:9c:14:d5:3c:f7:5a:83:32:
         26:ae:72:62:c4:2d:68:15:d8:53:a0:ad:06:05:74:36:ee:e8:
         4c:53:44:fa:3c:a3:b7:5e:86:69:e1:67:4d:02:bb:5d:72:f0:
         7d:9c:cd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:39:29 2026 by rpki-client