Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4f8gC33Zn6pj5ZfTcmXB3ah5jdoELqTU2MHzdvpvXLeX/0/34352e3136312e31322e302f32322d3332203d3e20323638343339.roa
File:                     34352e3136312e31322e302f32322d3332203d3e20323638343339.roa (raw, json)
Hash identifier:          Athr7WrJoUeisi/g5MNm1yM0zeplBvS4LMLd30J7gMc=
Subject key identifier:   84:77:10:B2:2C:05:AB:82:36:E4:B7:10:22:2F:98:D3:E9:A9:CD:47
Certificate issuer:       /CN=6DFF8D779C907C4E2EAB49685D35DD3BD2C37B85
Certificate serial:       7865A0CA6BDA528EEDE650A9FB1096409E1CA7FC
Authority key identifier: 6D:FF:8D:77:9C:90:7C:4E:2E:AB:49:68:5D:35:DD:3B:D2:C3:7B:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DFF8D779C907C4E2EAB49685D35DD3BD2C37B85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4f8gC33Zn6pj5ZfTcmXB3ah5jdoELqTU2MHzdvpvXLeX/0/34352e3136312e31322e302f32322d3332203d3e20323638343339.roa
Signing time:             Tue 29 Sep 2026 13:46:05 +0000
ROA not before:           Tue 29 Sep 2026 13:41:05 +0000
ROA not after:            Tue 28 Sep 2027 13:46:05 +0000
asID:                     268439
IP address blocks:        45.161.12.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4f8gC33Zn6pj5ZfTcmXB3ah5jdoELqTU2MHzdvpvXLeX/0/6DFF8D779C907C4E2EAB49685D35DD3BD2C37B85.crl
                          rsync://rpki-repo.registro.br/repo/4f8gC33Zn6pj5ZfTcmXB3ah5jdoELqTU2MHzdvpvXLeX/0/6DFF8D779C907C4E2EAB49685D35DD3BD2C37B85.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DFF8D779C907C4E2EAB49685D35DD3BD2C37B85.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 05:04:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:65:a0:ca:6b:da:52:8e:ed:e6:50:a9:fb:10:96:40:9e:1c:a7:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DFF8D779C907C4E2EAB49685D35DD3BD2C37B85
        Validity
            Not Before: Sep 29 13:41:05 2026 GMT
            Not After : Sep 28 13:46:05 2027 GMT
        Subject: CN=847710B22C05AB8236E4B710222F98D3E9A9CD47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f6:2b:40:67:c0:9f:c2:4c:96:ae:0b:c0:7d:
                    09:58:12:a8:c3:90:db:68:50:24:22:23:1b:2e:06:
                    0a:78:b9:5b:66:46:4b:0c:4e:1a:87:fd:74:59:2f:
                    03:9e:02:1b:09:30:29:49:f1:3f:2a:42:a3:3a:72:
                    61:e2:ec:d6:12:26:3c:0e:d9:b1:1d:c0:61:18:0d:
                    1b:2d:e8:ab:02:14:ff:4e:29:95:25:ca:26:7b:f0:
                    3f:8b:8a:29:1a:e8:22:ec:c2:0c:dc:b3:1d:69:c9:
                    c6:98:cc:bd:96:8c:f3:c4:d1:eb:8e:07:80:17:e6:
                    81:c3:21:09:be:11:fe:5c:06:fb:23:c2:1c:d2:86:
                    a0:a9:b8:d5:0d:9e:01:49:6d:c3:63:7d:af:45:93:
                    44:74:8c:b2:df:8c:98:53:ff:49:e5:06:3f:21:4a:
                    27:ee:ce:1d:37:78:26:29:9d:9b:d6:d9:e1:fa:16:
                    15:78:60:52:2f:de:1a:ca:6f:62:d6:ac:2a:09:3f:
                    00:40:69:dd:39:cd:10:12:f4:eb:39:f0:76:e5:d6:
                    2c:6c:45:6b:25:c7:c9:6a:60:a5:33:8d:9d:0b:1e:
                    ec:ec:c3:42:c5:51:ed:da:8b:0a:db:be:87:4d:fb:
                    f6:42:66:a7:95:88:6f:07:4c:8e:64:ea:8c:74:d8:
                    e9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:77:10:B2:2C:05:AB:82:36:E4:B7:10:22:2F:98:D3:E9:A9:CD:47
            X509v3 Authority Key Identifier:
                keyid:6D:FF:8D:77:9C:90:7C:4E:2E:AB:49:68:5D:35:DD:3B:D2:C3:7B:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4f8gC33Zn6pj5ZfTcmXB3ah5jdoELqTU2MHzdvpvXLeX/0/6DFF8D779C907C4E2EAB49685D35DD3BD2C37B85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DFF8D779C907C4E2EAB49685D35DD3BD2C37B85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4f8gC33Zn6pj5ZfTcmXB3ah5jdoELqTU2MHzdvpvXLeX/0/34352e3136312e31322e302f32322d3332203d3e20323638343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:83:52:0f:e7:c9:64:d0:57:8e:39:80:f9:fb:30:f7:bd:60:
         07:62:bf:7c:63:1b:61:96:4e:45:5f:88:96:e9:30:0f:ca:16:
         5a:14:a5:04:97:cd:30:74:75:6f:3b:17:da:4a:05:c9:7d:92:
         68:73:b7:b2:a1:f9:9c:09:13:b3:83:c5:7f:f7:20:e7:bc:ff:
         93:bc:77:1d:02:cf:73:b8:a2:90:8b:6f:35:c0:59:44:ae:b2:
         a1:bf:62:fa:0b:9b:0d:87:ee:6f:bf:20:51:f1:eb:9c:5b:1f:
         60:b5:9b:4d:56:36:cc:ac:fc:28:e3:8b:62:74:3d:52:58:b9:
         d5:d7:f9:a0:35:79:57:8b:6e:66:92:a8:dd:05:d8:ae:1c:d4:
         e2:75:6c:20:92:75:b3:3d:27:f6:fb:2a:f7:b8:bd:62:d6:ed:
         51:eb:49:89:bc:a1:18:16:f1:89:13:aa:da:4e:aa:76:37:c6:
         08:0e:a8:95:7a:18:02:a0:7c:60:b3:af:b8:c2:c3:19:86:44:
         94:1e:f4:8f:ce:cb:25:bc:18:46:54:ec:68:c3:86:2a:2a:07:
         29:8d:04:c2:06:3b:88:01:d0:c9:1c:fa:4a:3f:48:ac:ba:39:
         3a:a8:12:17:77:78:27:cc:65:cd:0e:ff:c1:1d:da:51:66:e0:
         8c:9f:0d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 08:27:54 2026 by rpki-client