Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/34352e3137382e3134362e302f32332d3233203d3e20323639303232.roa
File:                     34352e3137382e3134362e302f32332d3233203d3e20323639303232.roa (raw, json)
Hash identifier:          KnBek0tccLlv7DCQKLhljuhkV2df8s5mzXyhJW2ubWE=
Subject key identifier:   61:A1:2B:52:10:4F:A1:43:CA:EC:28:FD:8B:AA:AB:3B:6B:89:8B:8E
Certificate issuer:       /CN=CDCD83F4405AFD2B52943F9838374A340858512F
Certificate serial:       59F12B83A07BAF2A8E94C5C31A6AC6344527A286
Authority key identifier: CD:CD:83:F4:40:5A:FD:2B:52:94:3F:98:38:37:4A:34:08:58:51:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCD83F4405AFD2B52943F9838374A340858512F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/34352e3137382e3134362e302f32332d3233203d3e20323639303232.roa
Signing time:             Mon 02 Mar 2026 15:50:29 +0000
ROA not before:           Mon 02 Mar 2026 15:45:29 +0000
ROA not after:            Mon 01 Mar 2027 15:50:29 +0000
asID:                     269022
IP address blocks:        45.178.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.crl
                          rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCD83F4405AFD2B52943F9838374A340858512F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 16:51:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:f1:2b:83:a0:7b:af:2a:8e:94:c5:c3:1a:6a:c6:34:45:27:a2:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDCD83F4405AFD2B52943F9838374A340858512F
        Validity
            Not Before: Mar  2 15:45:29 2026 GMT
            Not After : Mar  1 15:50:29 2027 GMT
        Subject: CN=61A12B52104FA143CAEC28FD8BAAAB3B6B898B8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d7:cd:22:e4:b9:3c:fe:56:69:05:58:17:5d:
                    5d:3d:32:02:11:c6:ea:b6:c3:7b:a3:c3:0a:b9:c2:
                    c8:38:a1:74:5c:f1:7c:19:2c:7d:5c:04:78:74:b3:
                    7d:16:8a:37:db:1a:90:d1:65:42:3d:cc:5d:9d:e0:
                    9b:e7:4d:ca:d3:b5:d5:5c:c3:69:d4:84:75:e7:f8:
                    cb:fd:4d:de:c7:74:eb:07:ff:b3:dd:ed:e8:e1:68:
                    91:e6:cf:27:a0:18:9a:e2:b7:6c:76:b9:ff:8b:7b:
                    1b:1d:2e:c2:ca:cf:99:1e:12:58:1e:e5:c0:1b:43:
                    27:33:e9:c7:ba:3d:e3:d9:33:1a:f8:57:45:c5:ef:
                    91:78:4b:f9:2d:54:94:82:70:bf:cb:1b:04:ef:43:
                    68:48:db:d9:90:0a:bd:69:57:5b:88:b8:39:36:81:
                    7e:3a:a8:59:75:5e:4b:08:0f:3f:42:92:24:b9:6e:
                    5b:ab:e3:ee:40:d3:68:7b:0a:81:aa:db:11:fc:13:
                    68:2e:f1:8f:47:45:86:a0:7d:27:3f:b5:5c:37:80:
                    bc:04:42:86:24:1f:0b:a1:2c:88:8c:be:96:9d:50:
                    bf:0f:c9:a7:6e:ea:85:3d:7e:29:56:b6:ad:2f:b8:
                    2d:82:11:e6:57:b0:f0:45:ff:c3:a4:a8:c2:b1:0d:
                    bc:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A1:2B:52:10:4F:A1:43:CA:EC:28:FD:8B:AA:AB:3B:6B:89:8B:8E
            X509v3 Authority Key Identifier:
                keyid:CD:CD:83:F4:40:5A:FD:2B:52:94:3F:98:38:37:4A:34:08:58:51:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCD83F4405AFD2B52943F9838374A340858512F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/34352e3137382e3134362e302f32332d3233203d3e20323639303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:cd:c0:41:47:8d:fe:82:5e:b2:d2:6f:c0:b2:cd:87:63:23:
         77:34:a2:2e:5a:02:e1:a3:20:38:a2:1f:fe:2b:fc:9c:de:2e:
         77:73:71:9a:02:4f:41:81:b7:ff:5b:e2:46:a7:77:d4:14:07:
         6c:bf:60:e2:f9:f1:37:95:c5:34:4a:93:1e:01:d0:cc:04:37:
         c8:79:77:45:68:59:d6:11:a5:af:61:e4:e6:91:eb:65:f8:22:
         d7:b9:84:23:7f:b2:02:b7:53:c9:ad:9a:37:91:74:7c:68:65:
         52:ab:51:d2:32:5e:e6:38:58:4d:1a:87:38:c5:c8:cc:a5:2b:
         be:f2:03:68:5f:9c:52:63:59:4c:0a:4f:20:1d:07:62:35:e9:
         ab:15:cf:92:b8:45:6d:4a:a1:01:b0:fa:0c:90:1b:7e:83:95:
         f5:e1:9a:a3:b1:8b:a2:56:f4:c6:7a:8f:78:44:25:4b:08:66:
         67:a2:8c:0f:df:ff:05:03:87:16:2f:d4:bc:d9:99:e9:14:c8:
         bc:87:61:7c:ce:98:96:30:2d:fa:64:5a:77:55:f9:7a:38:87:
         69:a2:f0:59:c9:0e:9b:ce:41:83:cd:39:d1:e7:12:90:1f:83:
         96:2a:84:17:b9:03:bf:4b:29:c2:47:6c:70:b3:b9:20:24:ac:
         cd:2f:b6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:12:13 2026 by rpki-client