Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ek5Qv82ABkvd8ZDM8uMYitkghMn8JA1HCjGsQ9x656Ub/0/34352e3138372e34302e302f32322d3332203d3e20323639343834.roa
File:                     34352e3138372e34302e302f32322d3332203d3e20323639343834.roa (raw, json)
Hash identifier:          bjDWYSR3VLwu/1U9PwZa3jBmSDncGEJeingQjWsRkxc=
Subject key identifier:   32:8C:90:0A:64:43:8D:DF:75:B9:97:C1:0C:BA:9F:C4:18:A5:02:4E
Certificate issuer:       /CN=143298B08D8709A1286FF347632874F903802FF3
Certificate serial:       3050128D44837464187F1800700A0CD37D53581C
Authority key identifier: 14:32:98:B0:8D:87:09:A1:28:6F:F3:47:63:28:74:F9:03:80:2F:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/143298B08D8709A1286FF347632874F903802FF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ek5Qv82ABkvd8ZDM8uMYitkghMn8JA1HCjGsQ9x656Ub/0/34352e3138372e34302e302f32322d3332203d3e20323639343834.roa
Signing time:             Mon 02 Mar 2026 19:53:50 +0000
ROA not before:           Mon 02 Mar 2026 19:48:50 +0000
ROA not after:            Mon 01 Mar 2027 19:53:50 +0000
asID:                     269484
IP address blocks:        45.187.40.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ek5Qv82ABkvd8ZDM8uMYitkghMn8JA1HCjGsQ9x656Ub/0/143298B08D8709A1286FF347632874F903802FF3.crl
                          rsync://rpki-repo.registro.br/repo/Ek5Qv82ABkvd8ZDM8uMYitkghMn8JA1HCjGsQ9x656Ub/0/143298B08D8709A1286FF347632874F903802FF3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/143298B08D8709A1286FF347632874F903802FF3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 20:55:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:50:12:8d:44:83:74:64:18:7f:18:00:70:0a:0c:d3:7d:53:58:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143298B08D8709A1286FF347632874F903802FF3
        Validity
            Not Before: Mar  2 19:48:50 2026 GMT
            Not After : Mar  1 19:53:50 2027 GMT
        Subject: CN=328C900A64438DDF75B997C10CBA9FC418A5024E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:37:cd:83:13:49:7d:b3:d7:61:be:f5:75:42:
                    f3:da:93:54:76:fa:3f:f0:42:9a:fa:55:3d:a4:08:
                    a9:7e:0c:e9:07:07:86:54:2d:bd:88:97:78:70:d3:
                    0d:cc:0d:8a:6d:ae:88:d1:34:ff:4a:a8:19:8c:9e:
                    21:68:42:6a:22:69:22:aa:7e:eb:c8:5c:c1:75:73:
                    7e:0f:93:dd:49:ca:3e:41:a0:7e:4c:4f:95:20:1b:
                    9e:c6:53:40:0b:fb:c1:9d:bd:a7:a4:61:c8:80:cb:
                    75:b6:88:9c:86:90:b1:a2:d6:95:0e:15:f2:d8:26:
                    8b:f6:52:f0:78:1e:2d:75:e6:ac:ce:2c:ba:10:5c:
                    0c:19:df:00:4b:bd:7f:68:df:76:7a:45:c0:9e:7f:
                    58:4f:bd:a6:27:5e:da:f7:41:ac:e5:ff:cc:4a:55:
                    a7:af:a6:c3:26:9e:db:67:3e:b7:44:45:e8:57:3e:
                    40:7b:e2:02:f2:92:42:fe:29:06:b1:92:cc:51:f9:
                    9d:ae:17:f3:4b:c5:00:04:6f:df:57:95:3e:a0:a7:
                    23:ae:0f:e2:b2:a4:e7:00:44:90:31:6d:d1:75:cb:
                    d5:4a:7e:2b:5f:3b:db:19:b4:f6:78:ee:aa:ad:fb:
                    2e:78:d7:91:f4:ff:38:0f:78:8e:5f:22:4f:af:ef:
                    dd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:8C:90:0A:64:43:8D:DF:75:B9:97:C1:0C:BA:9F:C4:18:A5:02:4E
            X509v3 Authority Key Identifier:
                keyid:14:32:98:B0:8D:87:09:A1:28:6F:F3:47:63:28:74:F9:03:80:2F:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ek5Qv82ABkvd8ZDM8uMYitkghMn8JA1HCjGsQ9x656Ub/0/143298B08D8709A1286FF347632874F903802FF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/143298B08D8709A1286FF347632874F903802FF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ek5Qv82ABkvd8ZDM8uMYitkghMn8JA1HCjGsQ9x656Ub/0/34352e3138372e34302e302f32322d3332203d3e20323639343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:88:66:79:be:5b:86:af:33:08:7f:2e:fb:92:f5:36:25:e9:
         cb:35:29:d8:37:d2:b1:fd:05:a3:e7:c7:a2:11:c7:8e:9d:fa:
         e7:1f:5a:0b:dd:ec:d8:7e:60:c9:f6:38:46:94:c8:df:b4:8d:
         4a:83:8c:1a:b4:66:fb:2a:35:63:c5:6f:e3:bf:65:c6:7f:a4:
         85:3b:9c:c0:4d:4f:c4:49:ba:23:4a:0e:bd:cd:96:d8:d0:29:
         a5:77:4e:27:3e:6c:ba:34:86:f6:5f:a3:2b:5f:c9:22:6f:25:
         04:a3:4b:db:c3:ad:81:f9:c9:fb:d0:2f:a9:92:51:cf:be:ba:
         d5:90:7b:48:3a:53:14:86:9e:5d:6f:ad:5a:79:70:5d:66:4b:
         ac:33:87:c0:66:35:f7:cc:93:d4:6a:df:26:bb:b1:d7:4f:9e:
         3d:0d:30:e5:15:c4:d5:e0:b7:df:24:cc:83:17:ce:5e:e9:67:
         27:fe:9d:9f:8d:c0:8f:0d:dc:97:c3:df:53:7f:ad:4c:b9:f3:
         4f:1d:53:75:76:27:14:21:ed:f3:66:ad:a0:c2:77:37:bd:fb:
         74:6e:b4:08:9b:b4:b2:ed:e8:0e:da:97:35:53:44:88:b0:0a:
         46:ee:a8:70:35:f1:56:03:4c:81:e5:2c:e5:08:e7:1a:b9:cd:
         82:90:95:73
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMFASjUSDdGQYfxgAcAoM031TWBwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQzMjk4QjA4RDg3MDlBMTI4NkZGMzQ3NjMyODc0Rjkw
MzgwMkZGMzAeFw0yNjAzMDIxOTQ4NTBaFw0yNzAzMDExOTUzNTBaMDMxMTAvBgNV
BAMTKDMyOEM5MDBBNjQ0MzhEREY3NUI5OTdDMTBDQkE5RkM0MThBNTAyNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgN82DE0l9s9dhvvV1QvPak1R2
+j/wQpr6VT2kCKl+DOkHB4ZULb2Il3hw0w3MDYptrojRNP9KqBmMniFoQmoiaSKq
fuvIXMF1c34Pk91Jyj5BoH5MT5UgG57GU0AL+8GdvaekYciAy3W2iJyGkLGi1pUO
FfLYJov2UvB4Hi115qzOLLoQXAwZ3wBLvX9o33Z6RcCef1hPvaYnXtr3Qazl/8xK
VaevpsMmnttnPrdERehXPkB74gLykkL+KQaxksxR+Z2uF/NLxQAEb99XlT6gpyOu
D+KypOcARJAxbdF1y9VKfitfO9sZtPZ47qqt+y5415H0/zgPeI5fIk+v793RAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUMoyQCmRDjd91uZfBDLqfxBilAk4wHwYDVR0j
BBgwFoAUFDKYsI2HCaEob/NHYyh0+QOAL/MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWs1UXY4MkFCa3ZkOFpETTh1TVlpdGtnaE1uOEpBMUhDakdzUTl4NjU2
VWIvMC8xNDMyOThCMDhEODcwOUExMjg2RkYzNDc2MzI4NzRGOTAzODAyRkYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE0MzI5OEIwOEQ4NzA5QTEy
ODZGRjM0NzYzMjg3NEY5MDM4MDJGRjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VrNVF2ODJBQmt2ZDhaRE04dU1ZaXRrZ2hNbjhKQTFIQ2pHc1E5eDY1NlViLzAv
MzQzNTJlMzEzODM3MmUzNDMwMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM5
MzQzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLbsoMA0GCSqGSIb3DQEBCwUAA4IBAQBZiGZ5vluG
rzMIfy77kvU2JenLNSnYN9Kx/QWj58eiEceOnfrnH1oL3ezYfmDJ9jhGlMjftI1K
g4watGb7KjVjxW/jv2XGf6SFO5zATU/ESbojSg69zZbY0Cmld04nPmy6NIb2X6Mr
X8kibyUEo0vbw62B+cn70C+pklHPvrrVkHtIOlMUhp5db61aeXBdZkusM4fAZjX3
zJPUat8mu7HXT549DTDlFcTV4LffJMyDF85e6Wcn/p2fjcCPDdyXw99Tf61MufNP
HVN1dicUIe3zZq2gwnc3vft0brQIm7Sy7egO2pc1U0SIsApG7qhwNfFWA0yB5Szl
COcauc2CkJVz
-----END CERTIFICATE-----
Generated at Tue Mar 3 02:14:59 2026 by rpki-client