Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/31nwE4cUS51cDYsqY663bK9cpMQ4sWDXrALAUeeQ9FR3/0/34352e3136322e3230332e302f32342d3234203d3e20323731363137.roa
File:                     34352e3136322e3230332e302f32342d3234203d3e20323731363137.roa (raw, json)
Hash identifier:          6AkKqhq5vI6SGcB4D8aygVjtEMpgoPF1uN+oIHMKk5s=
Subject key identifier:   D8:C2:C0:EF:FC:6A:B3:82:20:1C:18:00:D9:6F:52:30:3A:9C:B4:83
Certificate issuer:       /CN=D6854EFC5EF8C93CEA3A877B7BDC4B196D8181C0
Certificate serial:       27504DD516B1C2E68E38FC69D8C5E154E708C3E7
Authority key identifier: D6:85:4E:FC:5E:F8:C9:3C:EA:3A:87:7B:7B:DC:4B:19:6D:81:81:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6854EFC5EF8C93CEA3A877B7BDC4B196D8181C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/31nwE4cUS51cDYsqY663bK9cpMQ4sWDXrALAUeeQ9FR3/0/34352e3136322e3230332e302f32342d3234203d3e20323731363137.roa
Signing time:             Thu 01 Oct 2026 17:43:05 +0000
ROA not before:           Thu 01 Oct 2026 17:38:05 +0000
ROA not after:            Thu 30 Sep 2027 17:43:05 +0000
asID:                     271617
IP address blocks:        45.162.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/31nwE4cUS51cDYsqY663bK9cpMQ4sWDXrALAUeeQ9FR3/0/D6854EFC5EF8C93CEA3A877B7BDC4B196D8181C0.crl
                          rsync://rpki-repo.registro.br/repo/31nwE4cUS51cDYsqY663bK9cpMQ4sWDXrALAUeeQ9FR3/0/D6854EFC5EF8C93CEA3A877B7BDC4B196D8181C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6854EFC5EF8C93CEA3A877B7BDC4B196D8181C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 23:53:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:50:4d:d5:16:b1:c2:e6:8e:38:fc:69:d8:c5:e1:54:e7:08:c3:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6854EFC5EF8C93CEA3A877B7BDC4B196D8181C0
        Validity
            Not Before: Oct  1 17:38:05 2026 GMT
            Not After : Sep 30 17:43:05 2027 GMT
        Subject: CN=D8C2C0EFFC6AB382201C1800D96F52303A9CB483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c7:dd:fd:7e:71:58:6f:50:62:e4:dc:c1:c0:
                    31:65:14:b1:60:35:40:16:47:96:e6:8b:46:8b:74:
                    b6:ce:66:78:63:11:b2:82:93:b6:50:66:2e:e6:78:
                    07:a2:fa:92:d6:a5:5f:a8:4b:03:17:fb:b3:55:7c:
                    3a:3e:ea:ee:69:e0:e3:7f:02:26:b7:41:bb:da:0c:
                    b8:aa:e7:7a:e5:24:cd:2d:28:89:3a:c8:56:71:3a:
                    18:53:b4:02:10:c8:19:a7:c3:5c:be:f3:c5:02:83:
                    33:05:40:67:40:fe:ae:09:d6:08:63:c4:ca:78:8b:
                    f9:db:4e:73:1a:f4:ff:ab:39:a4:eb:f5:bd:06:3a:
                    44:31:df:58:6d:89:0f:25:18:44:c2:5e:57:9a:01:
                    cf:21:9f:88:0d:f0:06:12:b4:6a:57:7d:c2:4c:e5:
                    84:bb:d5:ab:1f:80:e8:a3:6d:73:ba:4f:b9:b3:b0:
                    fa:8f:e6:e3:ca:84:3d:e8:23:d4:00:cd:5d:27:58:
                    c1:22:05:3f:47:99:63:a4:b6:9f:95:ee:85:2f:d7:
                    cc:ca:23:50:b0:0d:82:19:f9:1d:92:d5:be:33:bc:
                    59:92:45:cc:3f:5f:ec:b3:45:86:c6:95:57:4a:94:
                    dc:fc:3b:73:08:79:71:0c:f8:fd:fb:82:57:59:0e:
                    98:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C2:C0:EF:FC:6A:B3:82:20:1C:18:00:D9:6F:52:30:3A:9C:B4:83
            X509v3 Authority Key Identifier:
                keyid:D6:85:4E:FC:5E:F8:C9:3C:EA:3A:87:7B:7B:DC:4B:19:6D:81:81:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/31nwE4cUS51cDYsqY663bK9cpMQ4sWDXrALAUeeQ9FR3/0/D6854EFC5EF8C93CEA3A877B7BDC4B196D8181C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6854EFC5EF8C93CEA3A877B7BDC4B196D8181C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/31nwE4cUS51cDYsqY663bK9cpMQ4sWDXrALAUeeQ9FR3/0/34352e3136322e3230332e302f32342d3234203d3e20323731363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:a1:24:05:a4:ec:51:d1:d8:63:2b:43:ee:d5:ad:13:29:5a:
         32:96:32:2a:fb:50:96:ba:f1:b0:9c:12:73:a0:55:6e:2f:ab:
         96:82:ec:99:46:c5:bf:c9:71:87:4c:a2:2b:9b:3c:f9:78:60:
         03:13:8f:3c:5c:bd:fe:28:75:7f:b8:06:e7:03:af:46:f1:27:
         35:4c:2d:82:fa:b0:c6:a6:56:f0:d2:b5:4c:e9:bb:e1:5c:56:
         e8:82:4f:dd:0b:5e:59:a2:38:5d:c2:ed:c8:b5:b4:4c:d6:3f:
         89:3d:ae:c4:38:67:27:06:9c:aa:dd:0c:20:85:5f:78:ca:0c:
         d3:aa:ae:83:2b:fb:2e:90:93:9f:56:68:f4:1c:37:69:31:18:
         21:73:27:be:5e:93:bd:77:ce:db:9c:71:37:e9:b7:c1:66:96:
         00:b1:0a:b1:bc:1e:46:11:d9:17:52:0b:92:e2:01:e0:75:9f:
         bb:47:cf:67:17:0f:76:0b:11:62:0d:39:89:0f:ca:1b:a2:c2:
         39:c9:52:3a:13:3d:b1:51:3d:94:d8:7f:1e:4e:78:01:ff:c6:
         92:59:85:e1:c7:dd:e4:47:03:17:84:68:08:9b:4c:3e:ba:a6:
         6d:a3:10:56:bd:30:42:ee:92:16:39:0c:c2:6b:26:e9:9b:a4:
         86:d7:e2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 16:08:54 2026 by rpki-client