Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/34352e3138372e3233322e302f32322d3332203d3e20323636323037.roa
File:                     34352e3138372e3233322e302f32322d3332203d3e20323636323037.roa (raw, json)
Hash identifier:          4+YgtoFfi+k9taiIkMeRc0LuRHQF8dZbmVqcCWlfjdE=
Subject key identifier:   91:56:36:90:FD:56:6E:48:99:8F:9A:66:D8:F1:1A:4D:10:56:C6:21
Certificate issuer:       /CN=165D5CE1AD75707F0EBAD74246A8509CC4934DE0
Certificate serial:       29AAF2E6073357465B0429E6C1206DC75FCF2C2B
Authority key identifier: 16:5D:5C:E1:AD:75:70:7F:0E:BA:D7:42:46:A8:50:9C:C4:93:4D:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/34352e3138372e3233322e302f32322d3332203d3e20323636323037.roa
Signing time:             Wed 03 Jun 2026 14:36:20 +0000
ROA not before:           Wed 03 Jun 2026 14:31:20 +0000
ROA not after:            Wed 02 Jun 2027 14:36:20 +0000
asID:                     266207
IP address blocks:        45.187.232.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.crl
                          rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 06:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:aa:f2:e6:07:33:57:46:5b:04:29:e6:c1:20:6d:c7:5f:cf:2c:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165D5CE1AD75707F0EBAD74246A8509CC4934DE0
        Validity
            Not Before: Jun  3 14:31:20 2026 GMT
            Not After : Jun  2 14:36:20 2027 GMT
        Subject: CN=91563690FD566E48998F9A66D8F11A4D1056C621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4b:13:3d:25:ee:04:4a:80:c0:37:36:2c:eb:
                    03:d8:01:26:81:a0:d6:3c:f9:c1:6f:f7:b3:93:ac:
                    c8:dc:fe:67:e6:1f:e1:a9:5d:9f:7a:18:1d:63:e9:
                    61:35:97:7e:7c:56:cc:f0:f0:32:41:dc:59:48:c9:
                    b2:02:9e:8d:ee:84:d5:95:0b:7e:1a:de:da:60:87:
                    81:bf:c8:15:56:26:97:1e:6e:87:19:b5:c9:7e:41:
                    1e:7f:12:d1:02:48:c0:68:f2:5a:06:60:c6:bf:e0:
                    1d:1b:4e:0c:0d:3b:bd:92:1a:da:84:fc:7f:b5:0d:
                    51:1c:a9:35:34:6c:8b:27:e6:06:f1:1e:0d:62:9f:
                    32:1c:4f:a4:7e:16:74:c1:d2:6a:2d:a9:51:fe:ad:
                    5c:dd:bf:ce:cb:2d:a6:a9:05:ad:4f:e0:f4:fd:01:
                    db:53:e4:41:4f:ca:a0:4d:ba:20:f1:23:56:9f:cd:
                    45:e2:5d:fb:d0:d6:10:15:3e:21:8d:48:58:68:69:
                    99:bf:b0:d4:93:10:cb:4c:26:07:17:e1:9f:b9:1d:
                    37:08:59:92:c8:d8:a2:58:3d:35:04:8d:46:ee:92:
                    4c:ed:ad:94:33:f4:26:e5:4d:a8:d0:51:80:06:7c:
                    95:a9:3b:47:d4:6e:2b:55:14:fb:e2:8d:cb:7c:3b:
                    27:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:56:36:90:FD:56:6E:48:99:8F:9A:66:D8:F1:1A:4D:10:56:C6:21
            X509v3 Authority Key Identifier:
                keyid:16:5D:5C:E1:AD:75:70:7F:0E:BA:D7:42:46:A8:50:9C:C4:93:4D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/34352e3138372e3233322e302f32322d3332203d3e20323636323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cf:75:5c:72:03:8d:21:1d:84:44:aa:77:cb:af:fb:30:e8:e7:
         74:bf:e1:26:ec:db:4c:7b:07:91:4b:66:ae:e6:08:39:f0:da:
         36:cc:1a:f2:ed:d4:d9:74:37:5c:c4:cf:33:1f:17:f4:6d:22:
         33:74:cd:57:26:cf:a1:7d:fb:c7:09:49:0c:0d:e2:73:ca:59:
         51:27:71:e0:d0:15:47:b5:8f:5d:94:29:ea:b6:e0:97:39:20:
         a0:fe:cb:8b:8a:aa:44:45:be:5d:29:e7:fc:a5:54:11:16:3f:
         94:13:9c:a3:37:32:2a:6c:6c:03:63:40:42:ef:c9:64:89:e9:
         b5:7a:63:09:a2:1b:72:96:b3:39:97:c9:f3:82:4b:a8:e1:44:
         78:ad:49:af:76:22:42:54:5d:08:01:dd:46:fd:1b:e0:6f:b1:
         ae:16:5b:13:0e:9b:6b:ab:63:03:23:8b:50:a2:be:12:35:19:
         77:a1:c5:74:59:4a:4b:45:c2:fc:f4:35:5b:70:be:a1:81:c0:
         b3:c2:86:9e:8e:31:5f:5f:3d:8f:bf:b1:d5:17:0c:36:b9:f7:
         f5:e6:23:5f:80:a9:a4:8b:7c:1c:2e:46:0e:41:b4:4e:61:e2:
         cb:01:bf:27:19:b0:d2:06:32:8b:d4:c1:99:b0:4d:c3:51:c9:
         95:8b:7b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:16:04 2026 by rpki-client