Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/34352e3136372e39362e302f32332d3233203d3e20323637393938.roa
File:                     34352e3136372e39362e302f32332d3233203d3e20323637393938.roa (raw, json)
Hash identifier:          hTtM052tu5vre7Gi4yn7lK8Aw9NPspIg5IVx6+D3R24=
Subject key identifier:   6B:1B:6E:44:B3:D2:B0:3E:62:25:D6:27:91:F5:41:92:2F:19:69:ED
Certificate issuer:       /CN=11FB1ED5A8894DA749A7F5AD4F10E80C944D421C
Certificate serial:       4C2FE58C12C8B751F04AF5E96126666DC2644924
Authority key identifier: 11:FB:1E:D5:A8:89:4D:A7:49:A7:F5:AD:4F:10:E8:0C:94:4D:42:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/34352e3136372e39362e302f32332d3233203d3e20323637393938.roa
Signing time:             Tue 25 Aug 2026 21:55:18 +0000
ROA not before:           Tue 25 Aug 2026 21:50:18 +0000
ROA not after:            Tue 24 Aug 2027 21:55:18 +0000
asID:                     267998
IP address blocks:        45.167.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.crl
                          rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 05:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:2f:e5:8c:12:c8:b7:51:f0:4a:f5:e9:61:26:66:6d:c2:64:49:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11FB1ED5A8894DA749A7F5AD4F10E80C944D421C
        Validity
            Not Before: Aug 25 21:50:18 2026 GMT
            Not After : Aug 24 21:55:18 2027 GMT
        Subject: CN=6B1B6E44B3D2B03E6225D62791F541922F1969ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f8:aa:03:81:ba:80:20:69:2d:94:3f:9d:b4:
                    4b:92:96:21:66:1d:b6:29:7c:97:0e:fb:d1:b1:27:
                    40:12:5e:b6:7f:74:8a:2d:a3:76:c9:0a:a4:ed:98:
                    35:6b:57:ab:b0:68:fb:9c:a8:67:7e:f4:b8:a3:17:
                    d6:97:b4:b2:23:c0:13:1a:ae:6f:81:c0:95:b5:12:
                    76:09:d8:92:ca:ad:29:56:44:88:f5:e9:71:2e:31:
                    d7:af:60:a0:dd:93:0f:a5:c9:85:a2:13:51:ed:48:
                    57:fb:d8:7d:ba:b2:45:53:86:ce:01:08:03:89:22:
                    7d:db:0d:69:2a:a8:d1:9f:51:97:ae:11:db:0f:89:
                    2c:6c:38:8a:37:38:25:50:ea:fb:42:d5:58:ee:08:
                    ab:5f:9b:8c:d8:95:39:48:a5:7f:46:0b:b9:04:21:
                    ce:c0:59:f0:78:07:3f:b3:4f:f6:28:78:f5:e4:9f:
                    b1:51:e1:f5:df:63:57:28:4c:9f:28:7f:bf:7d:4c:
                    63:46:65:87:34:7a:88:fc:81:3a:3f:52:da:51:6d:
                    6b:09:73:b8:55:08:68:0b:89:f5:ef:7b:7d:ba:4a:
                    f5:50:ab:eb:b8:b5:54:3c:d6:d6:45:98:a4:7c:91:
                    d3:0c:c0:08:b8:00:05:9e:77:16:03:b5:ee:f7:00:
                    62:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:1B:6E:44:B3:D2:B0:3E:62:25:D6:27:91:F5:41:92:2F:19:69:ED
            X509v3 Authority Key Identifier:
                keyid:11:FB:1E:D5:A8:89:4D:A7:49:A7:F5:AD:4F:10:E8:0C:94:4D:42:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/34352e3136372e39362e302f32332d3233203d3e20323637393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:e3:01:ef:17:fa:c1:9f:40:7b:39:dc:a8:96:93:1b:dd:95:
         45:2f:e9:08:cc:19:1b:83:a7:94:89:6b:3d:fb:4a:b3:fc:85:
         20:db:74:c8:10:05:7c:0c:41:4b:da:33:23:94:49:00:65:4a:
         48:f1:14:8e:db:25:d8:77:b8:16:1a:03:18:25:e5:6c:ca:c2:
         5c:15:48:fa:94:e9:f7:58:ec:52:2a:29:df:e1:b0:51:86:fe:
         cf:a8:16:bf:4a:96:6b:50:38:de:fa:c8:00:f0:7b:3c:07:1c:
         cd:16:7a:a6:ae:0e:6c:33:f3:3d:0e:31:95:37:1c:4f:0e:db:
         cb:87:a9:7c:f3:7a:07:52:c2:09:48:70:f0:79:15:03:9f:ae:
         8a:a8:fe:f8:8a:a7:f2:4a:59:5a:9a:07:e6:c7:ef:18:77:b9:
         30:97:d0:13:53:59:ef:48:f7:9b:4b:a0:dd:8e:96:a3:b4:e2:
         cf:cd:89:83:54:9c:58:b8:59:e3:3b:90:e8:57:e6:47:8a:5c:
         2c:e2:08:ab:79:19:77:dc:e4:fc:aa:4a:f8:fd:36:0a:3f:f1:
         34:1e:89:f0:64:82:13:c4:14:cf:9c:97:7e:42:9b:0d:04:8f:
         0b:f4:58:bb:f7:cc:27:d5:f1:b7:3d:ec:d2:c6:cb:dc:e5:6b:
         d4:27:42:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:19:03 2026 by rpki-client