Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/34352e3139312e3132342e302f32322d3332203d3e20323639363731.roa
File:                     34352e3139312e3132342e302f32322d3332203d3e20323639363731.roa (raw, json)
Hash identifier:          TAgB33+YLMyYFeqpiRDUz9Q6ZNOJUWexMzzwvhPs3V4=
Subject key identifier:   64:B4:47:52:CE:D0:0B:78:C0:87:99:7F:1C:B9:94:F7:11:8F:2F:E5
Certificate issuer:       /CN=4E8B361B95AC54F01D2EE4C16049026E50FE807A
Certificate serial:       7AE60B53667E7E035CBB7E58BA547B3FB632FD69
Authority key identifier: 4E:8B:36:1B:95:AC:54:F0:1D:2E:E4:C1:60:49:02:6E:50:FE:80:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E8B361B95AC54F01D2EE4C16049026E50FE807A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/34352e3139312e3132342e302f32322d3332203d3e20323639363731.roa
Signing time:             Mon 23 Feb 2026 18:49:47 +0000
ROA not before:           Mon 23 Feb 2026 18:44:47 +0000
ROA not after:            Mon 22 Feb 2027 18:49:47 +0000
asID:                     269671
IP address blocks:        45.191.124.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/4E8B361B95AC54F01D2EE4C16049026E50FE807A.crl
                          rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/4E8B361B95AC54F01D2EE4C16049026E50FE807A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E8B361B95AC54F01D2EE4C16049026E50FE807A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 11:50:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:e6:0b:53:66:7e:7e:03:5c:bb:7e:58:ba:54:7b:3f:b6:32:fd:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E8B361B95AC54F01D2EE4C16049026E50FE807A
        Validity
            Not Before: Feb 23 18:44:47 2026 GMT
            Not After : Feb 22 18:49:47 2027 GMT
        Subject: CN=64B44752CED00B78C087997F1CB994F7118F2FE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:11:29:a3:5a:e3:bf:82:aa:b7:64:fb:f2:ce:
                    93:c7:dc:80:a6:ec:6e:e6:5e:8f:f4:17:c5:b6:07:
                    9b:df:92:df:6a:e4:6f:7f:0e:0f:42:4f:5d:db:ae:
                    85:cc:45:88:dd:75:21:15:06:b1:d1:a0:91:d3:72:
                    e2:1d:de:8b:31:07:32:d8:e1:91:96:ba:6e:13:a7:
                    01:1b:de:91:68:9b:cb:60:72:4b:3b:86:51:c4:42:
                    32:bf:a0:ea:f2:7f:0f:eb:9a:5e:40:57:1f:64:20:
                    40:9b:cd:b8:c7:c2:16:ac:6c:ba:2d:d1:f2:d0:46:
                    60:1c:97:e4:78:a6:2d:31:9f:8b:77:6c:f5:c1:e1:
                    43:24:2a:1c:34:68:95:12:d3:ed:df:ca:3d:f0:0e:
                    ad:9e:51:22:1c:2b:c2:43:2e:60:a9:5a:52:63:8a:
                    20:6a:3f:94:6c:a7:6c:28:87:25:55:3c:e1:7a:34:
                    7b:46:a7:ce:f2:b0:29:df:9b:7e:60:be:0a:e6:7a:
                    0b:ab:c5:91:5e:79:b5:f1:95:4d:10:1a:36:f6:b1:
                    48:8d:b6:90:3f:b9:b2:ff:1b:99:31:82:d6:4b:57:
                    4f:53:06:5f:bf:78:64:c6:e5:f4:0d:29:78:03:c6:
                    95:fd:f3:47:3c:73:4b:35:91:4b:ef:16:52:3e:7e:
                    c1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B4:47:52:CE:D0:0B:78:C0:87:99:7F:1C:B9:94:F7:11:8F:2F:E5
            X509v3 Authority Key Identifier:
                keyid:4E:8B:36:1B:95:AC:54:F0:1D:2E:E4:C1:60:49:02:6E:50:FE:80:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/4E8B361B95AC54F01D2EE4C16049026E50FE807A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E8B361B95AC54F01D2EE4C16049026E50FE807A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/34352e3139312e3132342e302f32322d3332203d3e20323639363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:9c:b9:d9:c7:c5:e7:70:5b:22:ed:81:d7:84:4b:03:bf:d8:
         9e:4e:84:71:6d:08:ba:b7:d0:2d:4b:0b:71:4f:c0:2c:96:ad:
         8d:f4:63:24:a8:27:57:8e:24:3c:83:d3:6d:a6:cb:37:f3:0f:
         f3:09:0f:b8:46:33:5a:74:d7:63:c9:8a:c6:b0:9f:b1:98:d3:
         7f:62:bf:04:5f:f8:c4:91:be:00:af:59:1c:2c:93:c4:9d:52:
         47:4d:58:c3:05:14:ca:a5:f0:25:c9:e7:04:7d:39:7a:6d:6f:
         7c:bb:bb:e9:63:3e:cf:4c:12:2d:ff:c2:39:af:8b:14:e7:30:
         94:6a:54:8c:74:1e:a1:94:d9:67:d2:81:f4:40:76:47:8b:cc:
         e0:cd:2e:c2:3d:1e:b3:14:5f:1b:58:76:08:6b:17:5d:6f:73:
         44:35:c2:b1:af:0c:0e:95:e7:fb:e6:9c:d4:f4:17:8f:b6:88:
         d2:e5:7d:a2:c6:6c:db:e6:27:b0:8f:73:27:26:fe:e8:06:83:
         7e:f7:41:e4:60:4a:b5:2d:9f:7c:db:11:a5:4b:7b:ce:73:c5:
         7f:15:2c:f3:8d:f0:c8:11:a3:7c:f5:0b:55:df:49:3f:81:9d:
         42:fc:f3:b6:67:02:90:01:ad:c4:70:c3:4e:70:ec:6c:f5:26:
         0b:15:e0:f8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUeuYLU2Z+fgNcu35YulR7P7Yy/WkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEU4QjM2MUI5NUFDNTRGMDFEMkVFNEMxNjA0OTAyNkU1
MEZFODA3QTAeFw0yNjAyMjMxODQ0NDdaFw0yNzAyMjIxODQ5NDdaMDMxMTAvBgNV
BAMTKDY0QjQ0NzUyQ0VEMDBCNzhDMDg3OTk3RjFDQjk5NEY3MTE4RjJGRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJESmjWuO/gqq3ZPvyzpPH3ICm
7G7mXo/0F8W2B5vfkt9q5G9/Dg9CT13broXMRYjddSEVBrHRoJHTcuId3osxBzLY
4ZGWum4TpwEb3pFom8tgcks7hlHEQjK/oOryfw/rml5AVx9kIECbzbjHwhasbLot
0fLQRmAcl+R4pi0xn4t3bPXB4UMkKhw0aJUS0+3fyj3wDq2eUSIcK8JDLmCpWlJj
iiBqP5Rsp2wohyVVPOF6NHtGp87ysCnfm35gvgrmegurxZFeebXxlU0QGjb2sUiN
tpA/ubL/G5kxgtZLV09TBl+/eGTG5fQNKXgDxpX980c8c0s1kUvvFlI+fsHJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZLRHUs7QC3jAh5l/HLmU9xGPL+UwHwYDVR0j
BBgwFoAUTos2G5WsVPAdLuTBYEkCblD+gHowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVlKWVJjUlRrY05CaUNEakE0Mk5uU1RnNDNucEVyVzRoV0Jaa29waWlD
TFkvMC80RThCMzYxQjk1QUM1NEYwMUQyRUU0QzE2MDQ5MDI2RTUwRkU4MDdBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRFOEIzNjFCOTVBQzU0RjAx
RDJFRTRDMTYwNDkwMjZFNTBGRTgwN0EuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FZSllSY1JUa2NOQmlDRGpBNDJOblNUZzQzbnBFclc0aFdCWmtvcGlpQ0xZLzAv
MzQzNTJlMzEzOTMxMmUzMTMyMzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzkzNjM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItv3wwDQYJKoZIhvcNAQELBQADggEBAKmcudnH
xedwWyLtgdeESwO/2J5OhHFtCLq30C1LC3FPwCyWrY30YySoJ1eOJDyD022myzfz
D/MJD7hGM1p012PJisawn7GY039ivwRf+MSRvgCvWRwsk8SdUkdNWMMFFMql8CXJ
5wR9OXptb3y7u+ljPs9MEi3/wjmvixTnMJRqVIx0HqGU2WfSgfRAdkeLzODNLsI9
HrMUXxtYdghrF11vc0Q1wrGvDA6V5/vmnNT0F4+2iNLlfaLGbNvmJ7CPcycm/ugG
g373QeRgSrUtn3zbEaVLe85zxX8VLPON8MgRo3z1C1XfST+BnUL887ZnApABrcRw
w05w7Gz1JgsV4Pg=
-----END CERTIFICATE-----
Generated at Tue Mar 3 00:58:10 2026 by rpki-client