Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/34352e3138372e36362e302f32342d3234203d3e20323639353238.roa
File:                     34352e3138372e36362e302f32342d3234203d3e20323639353238.roa (raw, json)
Hash identifier:          cn98vs26EAv+GUmEXqJNc0Bry9ami/MTixCD3xllDtw=
Subject key identifier:   A4:2C:D8:0B:1F:98:A0:9C:85:97:F9:4A:0E:7E:E9:4C:D0:D5:C5:C7
Certificate issuer:       /CN=0536254B395E744767A170B2A9041042916EF407
Certificate serial:       3880FF2AB1740FE9B677C434D5B21ECA68F27B5D
Authority key identifier: 05:36:25:4B:39:5E:74:47:67:A1:70:B2:A9:04:10:42:91:6E:F4:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0536254B395E744767A170B2A9041042916EF407.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/34352e3138372e36362e302f32342d3234203d3e20323639353238.roa
Signing time:             Fri 18 Sep 2026 15:02:09 +0000
ROA not before:           Fri 18 Sep 2026 14:57:09 +0000
ROA not after:            Fri 17 Sep 2027 15:02:09 +0000
asID:                     269528
IP address blocks:        45.187.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/0536254B395E744767A170B2A9041042916EF407.crl
                          rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/0536254B395E744767A170B2A9041042916EF407.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0536254B395E744767A170B2A9041042916EF407.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 21:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:80:ff:2a:b1:74:0f:e9:b6:77:c4:34:d5:b2:1e:ca:68:f2:7b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0536254B395E744767A170B2A9041042916EF407
        Validity
            Not Before: Sep 18 14:57:09 2026 GMT
            Not After : Sep 17 15:02:09 2027 GMT
        Subject: CN=A42CD80B1F98A09C8597F94A0E7EE94CD0D5C5C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:50:88:19:ea:f5:8c:96:65:c5:ba:9f:85:ff:
                    70:b3:cf:ad:e0:cf:3f:3d:5c:18:d2:e4:e5:6a:bd:
                    78:d6:60:1b:29:62:ca:eb:d6:b7:7c:69:dd:75:95:
                    57:c0:07:32:ff:29:d5:dd:d4:02:8e:71:b2:47:2f:
                    1f:90:4d:db:65:02:aa:5c:a3:1e:df:aa:01:e3:b6:
                    fc:7b:f9:4a:56:25:d1:9e:4b:63:f1:fb:58:b7:59:
                    f6:10:cf:e9:61:8e:51:4c:0f:30:92:4d:a7:47:3c:
                    75:37:9a:5b:51:6d:76:ab:23:3b:44:4b:20:b7:57:
                    eb:e0:10:b6:13:6c:f8:4f:be:99:3f:0c:ba:be:8c:
                    cd:ef:2e:f7:e5:c2:bf:f4:c7:03:1d:6c:a8:b2:a2:
                    e1:68:21:ae:9c:af:b4:cf:e2:0f:f6:92:bc:e6:7d:
                    1a:4c:3d:f4:6e:13:48:34:f9:d6:b3:d9:ee:3d:55:
                    a3:43:b5:88:8b:b6:99:70:d6:d9:cd:a5:27:42:7a:
                    13:57:c9:fd:5f:fa:ab:8a:9b:18:36:39:3e:f1:17:
                    0e:d3:86:92:f1:b1:3e:a2:7c:ae:1a:7e:c4:b7:a6:
                    07:e2:80:e0:9b:8e:0b:fb:0c:c4:17:aa:06:3f:4f:
                    c7:e7:f3:65:d5:32:05:a1:a6:62:04:d9:83:bb:17:
                    79:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:2C:D8:0B:1F:98:A0:9C:85:97:F9:4A:0E:7E:E9:4C:D0:D5:C5:C7
            X509v3 Authority Key Identifier:
                keyid:05:36:25:4B:39:5E:74:47:67:A1:70:B2:A9:04:10:42:91:6E:F4:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/0536254B395E744767A170B2A9041042916EF407.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0536254B395E744767A170B2A9041042916EF407.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/34352e3138372e36362e302f32342d3234203d3e20323639353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:8a:a1:b7:28:08:12:e3:2c:44:b1:7a:e8:69:34:0d:ba:7b:
         d8:03:9b:dc:13:e9:a7:f6:fa:d8:64:c7:f2:53:65:7f:ba:16:
         5b:08:9a:31:cd:76:62:6f:2e:e8:e6:7e:57:2e:8a:5a:66:1d:
         f1:be:87:38:8a:31:34:ee:13:dd:db:79:d6:cf:f0:9a:d2:6f:
         36:5d:3b:46:09:19:00:6a:6f:65:70:4d:9f:b7:c3:0b:a7:8a:
         79:a8:32:dd:f2:14:3e:22:ab:8b:5c:7b:65:1b:5b:2e:0d:b7:
         70:cd:5d:1c:c6:69:5a:9b:5b:4d:c1:dc:7f:d2:cf:da:58:9d:
         f4:93:29:c6:5c:aa:f3:29:9b:ce:6f:a9:4a:f5:41:9c:23:11:
         44:cf:19:9b:d5:5d:59:ec:6f:33:a7:21:37:6d:5e:e9:c5:7b:
         df:24:45:56:2c:37:c1:b3:16:7b:ec:ad:3d:0e:2f:46:51:1a:
         d4:ea:bd:95:69:53:89:ed:4e:f2:ae:a1:fb:1d:c0:9a:1c:ed:
         c6:b6:6a:80:0e:8d:7f:0f:19:db:e1:58:c5:43:11:1a:45:6c:
         55:12:f4:93:99:f2:ae:9f:53:c1:ad:37:af:58:ce:32:d5:13:
         2b:25:ea:8e:38:94:82:a5:54:ca:10:03:e4:e1:92:df:cd:46:
         f1:a6:c8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:23:28 2026 by rpki-client