Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/34352e342e34342e302f32322d3234203d3e20323636303535.roa
File:                     34352e342e34342e302f32322d3234203d3e20323636303535.roa (raw, json)
Hash identifier:          VsFfoeWft2fRjkfKD5eb4nhg92JBxC6F71Fkt1eIByk=
Subject key identifier:   C7:B0:56:06:39:7E:A9:70:63:3A:A5:96:A5:2D:B6:BC:F8:CA:23:07
Certificate issuer:       /CN=2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0
Certificate serial:       7E3D7F824BE083A30413EDE3D03F57AE6B7CE3D4
Authority key identifier: 22:64:D1:7A:1D:E6:58:F2:5F:A0:EB:77:73:DA:7F:6B:41:E5:2F:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/34352e342e34342e302f32322d3234203d3e20323636303535.roa
Signing time:             Sat 24 Oct 2026 16:25:15 +0000
ROA not before:           Sat 24 Oct 2026 16:20:15 +0000
ROA not after:            Sat 23 Oct 2027 16:25:15 +0000
asID:                     266055
IP address blocks:        45.4.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.crl
                          rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 19:39:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:3d:7f:82:4b:e0:83:a3:04:13:ed:e3:d0:3f:57:ae:6b:7c:e3:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0
        Validity
            Not Before: Oct 24 16:20:15 2026 GMT
            Not After : Oct 23 16:25:15 2027 GMT
        Subject: CN=C7B05606397EA970633AA596A52DB6BCF8CA2307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f2:dc:68:6c:fd:55:eb:2a:32:7a:85:e8:61:
                    03:f4:97:fa:44:e7:c7:1a:e9:8f:5e:5c:86:ef:3d:
                    eb:02:59:90:55:c8:30:16:73:5a:14:c1:fd:ca:36:
                    54:72:76:b8:86:90:67:6e:9b:91:18:79:04:d3:e4:
                    9a:21:8b:3f:ce:e7:33:2b:c4:47:81:b0:6a:80:51:
                    43:15:3e:d9:99:26:dc:ac:15:3b:25:b6:06:16:27:
                    dc:ee:14:d1:c4:2d:5b:a7:71:83:42:5f:ba:71:cf:
                    7c:73:5e:92:95:15:ac:e8:e6:53:7c:17:c4:fe:f8:
                    13:c5:f4:ea:5f:e3:40:35:7c:9b:80:8a:d7:fb:70:
                    9d:cf:2f:a9:e2:0a:3d:3f:5c:3a:22:c4:6c:ef:ca:
                    5a:f6:03:eb:3a:a2:0c:e8:e8:12:b3:8c:5f:9d:f2:
                    4a:e5:fb:56:73:b2:10:c3:57:21:2a:99:5f:1a:b9:
                    80:80:25:ce:27:bc:34:2d:96:46:94:ca:83:91:0a:
                    ad:84:f8:dc:4a:bf:70:5a:94:9f:8e:37:5b:a2:98:
                    f5:16:99:cc:a7:3b:6c:53:31:cb:36:d4:0e:5b:f8:
                    72:df:96:cc:dc:e4:a0:29:48:a0:94:ba:52:ba:88:
                    05:80:1c:82:9b:ad:be:44:25:af:40:4b:13:c8:6a:
                    50:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B0:56:06:39:7E:A9:70:63:3A:A5:96:A5:2D:B6:BC:F8:CA:23:07
            X509v3 Authority Key Identifier:
                keyid:22:64:D1:7A:1D:E6:58:F2:5F:A0:EB:77:73:DA:7F:6B:41:E5:2F:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/34352e342e34342e302f32322d3234203d3e20323636303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:f9:b5:b4:80:41:55:95:19:cf:c6:3e:27:bc:76:02:e3:60:
         b3:c5:9c:d0:81:c2:6a:38:84:5c:d4:17:87:44:85:15:12:ad:
         28:8f:d9:36:77:82:6a:0d:f1:ec:32:b3:6d:64:2c:ca:69:3f:
         85:da:a6:48:8b:1b:58:79:da:b8:6e:7f:0c:dd:84:66:96:b3:
         65:cf:cc:d9:73:69:e4:13:44:cf:c9:8e:c5:2e:ff:60:cf:00:
         3c:f7:d5:a9:d8:57:ff:77:6d:5d:55:6b:c1:a2:b2:fa:7f:ae:
         b6:f9:71:0c:87:ca:e8:2f:85:39:5d:64:01:70:34:b8:42:35:
         35:de:fd:ee:95:d4:75:0e:83:fe:1e:23:7e:96:7c:fc:2b:34:
         c3:ae:cf:83:42:a8:0e:88:4b:be:3f:75:37:49:3c:ce:15:3f:
         d1:6b:96:53:7f:b0:50:47:03:de:a3:a0:b7:06:b3:e1:fa:3c:
         bd:8d:13:d8:a6:1e:bc:2b:2d:b0:6d:41:b2:64:6e:26:0f:ce:
         cb:fc:18:e4:94:a3:02:f6:4f:1b:ba:a1:45:f5:61:22:50:ad:
         c6:39:ea:61:16:11:70:b4:1c:0a:85:33:2a:0b:25:1c:04:5a:
         ed:f3:d3:10:ad:16:84:a4:57:85:b9:34:a0:ee:8e:cb:e1:b2:
         9e:f2:ba:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 03:40:09 2026 by rpki-client