Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/34352e3136342e33362e302f32342d3234203d3e20323638363232.roa
File:                     34352e3136342e33362e302f32342d3234203d3e20323638363232.roa (raw, json)
Hash identifier:          So6YPnw3BNoEDd/AvA+NxxPUvEvhvsX4vB+6CFFPES8=
Subject key identifier:   8F:94:66:13:E1:17:85:A4:79:FA:C7:2D:14:44:7B:90:FD:C3:BB:45
Certificate issuer:       /CN=0AC324E95DDE8107D6C9FCF9C7931D836843F4A4
Certificate serial:       5C7DEB0776F23C7203A5363D73886D6A5AD3D1
Authority key identifier: 0A:C3:24:E9:5D:DE:81:07:D6:C9:FC:F9:C7:93:1D:83:68:43:F4:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/34352e3136342e33362e302f32342d3234203d3e20323638363232.roa
Signing time:             Mon 07 Sep 2026 19:17:45 +0000
ROA not before:           Mon 07 Sep 2026 19:12:45 +0000
ROA not after:            Mon 06 Sep 2027 19:17:45 +0000
asID:                     268622
IP address blocks:        45.164.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.crl
                          rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 00:21:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:7d:eb:07:76:f2:3c:72:03:a5:36:3d:73:88:6d:6a:5a:d3:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AC324E95DDE8107D6C9FCF9C7931D836843F4A4
        Validity
            Not Before: Sep  7 19:12:45 2026 GMT
            Not After : Sep  6 19:17:45 2027 GMT
        Subject: CN=8F946613E11785A479FAC72D14447B90FDC3BB45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:90:dd:ec:cb:54:15:65:3a:e2:9d:08:82:5d:
                    da:00:7e:c7:d6:07:49:3e:48:5b:2d:4a:cc:9d:0d:
                    c7:3c:5b:d8:86:0c:1e:81:54:b7:4f:89:81:e2:cd:
                    d7:c3:17:b5:4b:ab:69:84:12:9e:a2:aa:68:e0:86:
                    46:7f:5d:37:b0:14:f7:0a:34:26:88:29:ca:03:41:
                    c6:94:b1:40:26:41:64:b7:94:5b:e9:44:e6:0b:c6:
                    6a:14:f7:4e:db:86:88:62:55:12:c0:d6:4e:eb:92:
                    4f:c9:20:13:be:3e:e6:85:f2:69:29:25:f5:19:5f:
                    85:95:70:71:3d:52:6d:0f:b6:55:fa:ee:b5:58:9e:
                    34:20:2b:c8:4f:77:7e:80:28:fb:47:35:e9:8f:51:
                    a8:7f:3b:e9:fd:9b:67:c1:4c:9e:de:9d:58:87:7a:
                    b9:42:3c:49:2c:3f:cf:f6:86:45:71:b0:43:49:aa:
                    e1:c2:a1:10:08:54:bf:72:d1:4d:27:d6:09:76:88:
                    24:2b:b2:e4:a5:be:eb:0f:81:1e:2d:66:bc:05:ea:
                    40:1d:2d:6f:e8:87:5c:5e:ac:b1:25:dc:7c:55:91:
                    f3:7c:af:9c:a5:c6:2b:fb:e5:4b:32:52:69:82:7d:
                    36:fb:70:40:7a:d7:5b:c4:95:16:db:73:98:c2:91:
                    1d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:94:66:13:E1:17:85:A4:79:FA:C7:2D:14:44:7B:90:FD:C3:BB:45
            X509v3 Authority Key Identifier:
                keyid:0A:C3:24:E9:5D:DE:81:07:D6:C9:FC:F9:C7:93:1D:83:68:43:F4:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/34352e3136342e33362e302f32342d3234203d3e20323638363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:4a:8e:37:ab:74:3f:a5:3b:81:74:25:54:a5:50:d5:c0:64:
         de:bf:c9:11:7b:fe:c5:8e:7d:0a:56:e0:a9:24:00:27:3a:81:
         86:33:70:4b:ac:02:70:7a:f5:c3:c6:cb:d6:ca:ab:f5:8a:56:
         3b:81:e9:71:b6:8b:47:d8:1f:14:39:48:09:a8:b1:0a:76:aa:
         9b:11:6d:15:14:25:a0:2d:55:ab:17:7b:6f:00:bc:f6:74:d3:
         0f:b5:3a:e1:c1:ab:da:7a:39:81:15:e5:a4:60:ac:cb:21:0d:
         2d:a7:90:01:b2:b3:a0:d6:03:f0:7d:53:37:1a:0c:f9:d1:f4:
         38:2e:a0:7f:ed:b7:a5:00:40:42:a5:5a:b4:18:fd:4c:a4:60:
         2b:d7:2a:6b:b8:44:40:39:a5:d2:53:76:ed:80:7a:a6:00:d3:
         0b:03:3e:67:23:81:f3:53:b4:a9:ba:08:60:fa:83:9b:ed:ad:
         47:48:ff:ad:0d:84:55:e8:b5:c6:0c:ca:bf:25:b9:29:4f:35:
         ed:82:bf:3e:99:6e:c5:9a:ba:86:14:4b:eb:4c:b0:83:09:e5:
         3f:6b:fb:6f:9c:8a:ef:5f:d2:9d:8d:35:1b:87:9f:6d:7d:22:
         30:f8:c0:2a:f7:03:1a:c6:34:84:c7:ae:8f:60:70:08:4a:13:
         1e:5b:2e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:22:32 2026 by rpki-client