Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/34352e3138392e38382e302f32322d3232203d3e20323639353734.roa
File:                     34352e3138392e38382e302f32322d3232203d3e20323639353734.roa (raw, json)
Hash identifier:          IYi9F1zwbfx5DT2l83cGYXJBSNv2HQGtUYPnwFQgh4U=
Subject key identifier:   52:D8:46:9A:4C:7C:2A:5F:F2:62:4D:52:0E:CE:35:5F:BB:41:4E:38
Certificate issuer:       /CN=061D03C44232FDCCB0116EF465F68ABDA94D2858
Certificate serial:       15315F0D60C926EECC868BAC3B8DD0DDA226B4A8
Authority key identifier: 06:1D:03:C4:42:32:FD:CC:B0:11:6E:F4:65:F6:8A:BD:A9:4D:28:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061D03C44232FDCCB0116EF465F68ABDA94D2858.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/34352e3138392e38382e302f32322d3232203d3e20323639353734.roa
Signing time:             Sat 11 Apr 2026 15:34:27 +0000
ROA not before:           Sat 11 Apr 2026 15:29:27 +0000
ROA not after:            Sat 10 Apr 2027 15:34:27 +0000
asID:                     269574
IP address blocks:        45.189.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/061D03C44232FDCCB0116EF465F68ABDA94D2858.crl
                          rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/061D03C44232FDCCB0116EF465F68ABDA94D2858.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061D03C44232FDCCB0116EF465F68ABDA94D2858.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 Apr 2026 11:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:31:5f:0d:60:c9:26:ee:cc:86:8b:ac:3b:8d:d0:dd:a2:26:b4:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061D03C44232FDCCB0116EF465F68ABDA94D2858
        Validity
            Not Before: Apr 11 15:29:27 2026 GMT
            Not After : Apr 10 15:34:27 2027 GMT
        Subject: CN=52D8469A4C7C2A5FF2624D520ECE355FBB414E38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:32:de:0c:7d:f8:41:89:38:fa:80:a4:15:ba:
                    66:5b:9a:c6:83:c1:1a:f6:22:4a:6b:46:c9:d2:66:
                    19:6f:9f:f7:62:e7:ea:7a:ec:cc:69:70:25:22:b8:
                    43:f9:b2:e8:d3:0b:63:6e:4b:c3:f3:6b:c8:c4:0f:
                    48:e5:52:a6:7c:a5:cc:de:bb:ec:d4:e2:b1:56:7c:
                    d9:dc:28:2e:b6:f1:7f:67:12:64:e2:a7:bc:b8:73:
                    94:de:65:97:10:49:c7:b6:26:40:c9:f7:47:8a:c9:
                    04:4a:db:a0:c6:f8:7f:c5:e6:3f:7b:a2:cb:71:a4:
                    72:a6:54:ce:39:e5:67:74:95:f2:56:8d:00:fe:48:
                    70:d3:f9:ff:21:4b:56:80:fa:7e:49:39:bf:4a:75:
                    da:8b:9b:46:a4:8a:61:95:a3:3b:9f:05:c4:c4:68:
                    a5:b3:9f:10:08:f4:b2:2e:b8:08:6f:72:42:68:91:
                    b3:1c:d6:bc:e7:a4:b1:40:d1:33:98:e6:0e:8e:15:
                    fb:fc:6f:47:3b:a4:b4:cb:ce:9a:77:8f:52:7c:b0:
                    11:b0:0a:31:99:3f:d4:7f:38:65:84:08:3f:98:4b:
                    10:3a:be:72:96:11:fc:85:5b:32:25:cc:1b:8c:d0:
                    eb:bf:34:eb:18:88:f7:00:ae:54:12:ae:6c:3b:d3:
                    6b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D8:46:9A:4C:7C:2A:5F:F2:62:4D:52:0E:CE:35:5F:BB:41:4E:38
            X509v3 Authority Key Identifier:
                keyid:06:1D:03:C4:42:32:FD:CC:B0:11:6E:F4:65:F6:8A:BD:A9:4D:28:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/061D03C44232FDCCB0116EF465F68ABDA94D2858.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061D03C44232FDCCB0116EF465F68ABDA94D2858.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/34352e3138392e38382e302f32322d3232203d3e20323639353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:bc:f6:de:8b:b7:c5:b1:e5:43:4f:4c:c3:01:40:e1:28:07:
         ed:da:56:16:95:18:c0:f9:2a:c7:9b:9d:2b:60:c0:36:e7:34:
         28:d4:b0:98:1a:4c:76:4b:35:72:d4:12:d4:f9:d9:b4:c5:67:
         80:26:ea:0f:dd:80:3e:76:fe:23:58:8a:77:d8:34:cf:2d:b9:
         cc:02:72:ac:f4:76:65:ad:af:9c:64:ed:a9:d0:22:a4:98:9e:
         61:20:b4:44:59:cd:46:c1:24:06:5b:80:de:68:a3:9d:37:2d:
         d3:f6:2d:c0:9d:81:31:f7:d5:44:93:f5:6e:26:75:70:50:b0:
         69:24:4b:fb:10:38:34:27:1a:92:16:b8:5b:5f:7c:07:90:c6:
         bf:09:66:e0:0d:d9:7f:d3:2d:58:f9:36:10:83:33:33:3a:ed:
         bd:52:08:1f:70:44:b4:95:95:cd:d7:13:4a:3e:c2:c8:95:0a:
         6d:8d:be:7e:b9:eb:e7:cc:e2:11:89:af:13:7e:41:5f:0d:57:
         09:a4:eb:fd:a6:b8:8b:04:b5:85:b5:bb:37:50:70:84:e7:a1:
         72:78:05:05:e7:d7:3b:41:6e:4a:32:da:97:53:56:0e:96:fb:
         84:c1:d7:3a:ac:47:16:de:95:bd:f4:b2:58:4f:72:56:5d:94:
         8c:9a:1f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 02:04:55 2026 by rpki-client