Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/34352e3233392e3137362e302f32342d3234203d3e20323634333938.roa
File:                     34352e3233392e3137362e302f32342d3234203d3e20323634333938.roa (raw, json)
Hash identifier:          Ehj7I7ITHzf8lL9E2HfiCohD0sda655kRKrKe7xm4D0=
Subject key identifier:   4B:96:AE:C8:98:DC:0B:BB:82:29:3F:6A:56:1B:57:AC:70:74:E0:1E
Certificate issuer:       /CN=9828F8A8915A72753136825A1F46FECBBF95B7E4
Certificate serial:       6159BB1F4805CC22D22DA5B4D5C40394B215B69B
Authority key identifier: 98:28:F8:A8:91:5A:72:75:31:36:82:5A:1F:46:FE:CB:BF:95:B7:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9828F8A8915A72753136825A1F46FECBBF95B7E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/34352e3233392e3137362e302f32342d3234203d3e20323634333938.roa
Signing time:             Fri 23 Oct 2026 17:58:53 +0000
ROA not before:           Fri 23 Oct 2026 17:53:53 +0000
ROA not after:            Fri 22 Oct 2027 17:58:53 +0000
asID:                     264398
IP address blocks:        45.239.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/9828F8A8915A72753136825A1F46FECBBF95B7E4.crl
                          rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/9828F8A8915A72753136825A1F46FECBBF95B7E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9828F8A8915A72753136825A1F46FECBBF95B7E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 10:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:59:bb:1f:48:05:cc:22:d2:2d:a5:b4:d5:c4:03:94:b2:15:b6:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9828F8A8915A72753136825A1F46FECBBF95B7E4
        Validity
            Not Before: Oct 23 17:53:53 2026 GMT
            Not After : Oct 22 17:58:53 2027 GMT
        Subject: CN=4B96AEC898DC0BBB82293F6A561B57AC7074E01E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8e:c6:87:89:48:e6:53:4d:74:57:ff:3d:f9:
                    80:4f:9d:87:95:58:b3:c0:9a:14:a3:5c:2d:eb:a7:
                    aa:0d:00:f6:89:a6:f5:95:1d:7a:fa:01:68:5a:e3:
                    37:ad:b5:26:63:dc:9d:a8:64:30:6f:b1:de:79:f4:
                    00:8c:6b:f1:12:85:3d:65:e0:08:94:a8:a6:35:f4:
                    6f:0e:a6:be:3f:cd:74:2c:03:de:52:d2:70:34:cb:
                    77:4f:ef:af:b9:b3:cf:1d:32:f4:22:a7:a0:20:93:
                    d6:31:fd:cc:a1:65:61:50:d1:e5:05:5e:5c:37:77:
                    47:f3:06:1b:a5:24:77:d7:9b:68:22:e5:f0:0f:16:
                    e4:6f:fb:98:27:e8:f0:57:c3:99:3b:83:90:1f:34:
                    1b:f7:3c:0d:d1:75:71:7e:a5:28:73:58:3b:3a:14:
                    ad:86:9b:32:1b:97:b6:b3:82:2f:99:ca:35:cc:e1:
                    48:3c:9e:c4:fe:25:d1:50:a5:ec:c5:85:c8:ca:ea:
                    94:59:82:2b:0d:54:73:c4:1a:6c:f4:ac:ea:f1:9d:
                    de:1a:88:77:f9:78:83:86:49:77:a0:8b:c5:94:fa:
                    98:04:7b:d3:d9:7b:71:3c:d7:f9:c4:ac:7e:92:55:
                    48:c5:ee:d9:e3:12:96:89:3f:21:1a:33:c0:44:1f:
                    b5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:96:AE:C8:98:DC:0B:BB:82:29:3F:6A:56:1B:57:AC:70:74:E0:1E
            X509v3 Authority Key Identifier:
                keyid:98:28:F8:A8:91:5A:72:75:31:36:82:5A:1F:46:FE:CB:BF:95:B7:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/9828F8A8915A72753136825A1F46FECBBF95B7E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9828F8A8915A72753136825A1F46FECBBF95B7E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/34352e3233392e3137362e302f32342d3234203d3e20323634333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:f3:ce:61:94:58:a1:0c:3a:6a:c9:ce:3e:bb:46:a7:85:fa:
         7f:7c:6b:c7:da:eb:f0:b1:aa:1d:b9:b6:8d:2b:09:68:d8:cc:
         1e:d7:a7:df:e2:8a:ad:59:51:d4:33:0b:38:b9:54:9d:4d:1a:
         cd:8c:e0:81:df:32:79:13:b6:ee:f1:ad:b7:7f:db:7e:1c:c5:
         d0:2e:5f:f4:bc:89:ee:1d:28:bf:f8:51:23:49:8c:92:5b:8c:
         09:55:42:75:e8:6c:de:b0:09:9b:1f:17:36:5e:3d:11:df:0f:
         02:28:6e:09:8b:2a:93:74:ae:f0:ea:0d:22:37:ec:65:1a:6c:
         b9:db:59:33:62:dc:cc:e9:da:8b:08:eb:6a:91:1a:ff:f7:c5:
         b8:9b:d2:b0:c7:6b:60:b1:07:83:07:5a:23:4a:1f:21:9b:bc:
         55:ab:14:6f:a1:0e:d7:72:1a:9b:0b:fe:91:f5:c2:9e:d4:08:
         c0:35:f5:c5:b0:3a:c7:2c:32:36:a1:ff:b9:89:02:7a:db:fd:
         b0:c7:98:ca:04:46:15:9d:37:87:a1:b3:dd:2f:04:ec:43:96:
         b6:cc:90:32:5e:40:c5:68:e2:61:61:57:2f:a3:f1:d1:74:92:
         51:24:fb:e9:03:68:56:86:f2:c2:d1:95:f4:79:52:00:d5:4b:
         f2:ae:9a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 15:19:16 2026 by rpki-client