Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/34352e3136372e3231372e302f32342d3234203d3e20323638303039.roa
File:                     34352e3136372e3231372e302f32342d3234203d3e20323638303039.roa (raw, json)
Hash identifier:          y0dcPUbaffvRQi82wYhbBnr6tIccvRVYJjOTb/C4tME=
Subject key identifier:   5B:87:B9:93:5C:F3:C4:D7:20:EA:8A:49:D2:F5:2B:E6:C8:D8:9C:90
Certificate issuer:       /CN=7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568
Certificate serial:       337B70ADFF1B3BCF07B8567228A79E0864DB1B90
Authority key identifier: 7B:D2:00:59:58:A0:D7:D9:FD:2F:6D:D3:AF:AD:D2:71:D6:2C:D5:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/34352e3136372e3231372e302f32342d3234203d3e20323638303039.roa
Signing time:             Mon 07 Sep 2026 15:59:27 +0000
ROA not before:           Mon 07 Sep 2026 15:54:27 +0000
ROA not after:            Mon 06 Sep 2027 15:59:27 +0000
asID:                     268009
IP address blocks:        45.167.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.crl
                          rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 06:31:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:7b:70:ad:ff:1b:3b:cf:07:b8:56:72:28:a7:9e:08:64:db:1b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568
        Validity
            Not Before: Sep  7 15:54:27 2026 GMT
            Not After : Sep  6 15:59:27 2027 GMT
        Subject: CN=5B87B9935CF3C4D720EA8A49D2F52BE6C8D89C90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9e:11:46:0c:d0:36:ca:2f:7d:70:f4:5e:cf:
                    80:73:46:23:2d:56:e7:5d:d9:e1:a7:ff:e3:b4:b3:
                    9b:ff:29:42:1d:40:18:33:06:b3:38:4e:0f:17:32:
                    77:97:72:11:08:cb:f9:ad:9b:5d:db:ee:8d:95:fe:
                    0d:c2:08:7e:93:a9:9e:94:13:2b:b6:46:37:9d:fc:
                    b2:00:9b:78:c1:5e:9a:04:41:18:63:9e:57:b2:44:
                    ef:1c:27:5b:ea:f2:52:f9:95:51:f0:e4:58:cb:58:
                    1d:d0:e0:37:41:74:55:d6:b8:7e:cf:e3:69:e5:64:
                    c6:8e:af:e6:e2:32:a8:16:6b:88:45:33:a9:6a:1b:
                    3c:fc:14:60:d2:63:08:5c:7a:b2:88:5c:80:60:1e:
                    93:73:b7:8f:06:f0:8b:60:db:a3:58:8b:10:02:fa:
                    82:25:e7:9f:c7:c8:f2:6f:a4:c6:95:3a:97:f4:f1:
                    11:7e:4a:3f:73:af:40:67:11:db:28:43:59:f4:09:
                    76:8e:0d:00:45:2f:e2:95:3d:d3:b9:83:65:27:2d:
                    05:b0:1b:c4:9f:b3:43:57:ed:85:dd:2d:dd:51:5e:
                    7e:78:e9:d7:85:34:fa:2f:d6:ce:34:51:ef:3a:77:
                    6c:49:91:0b:77:e8:df:b1:26:64:2f:96:42:5e:ea:
                    a8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:87:B9:93:5C:F3:C4:D7:20:EA:8A:49:D2:F5:2B:E6:C8:D8:9C:90
            X509v3 Authority Key Identifier:
                keyid:7B:D2:00:59:58:A0:D7:D9:FD:2F:6D:D3:AF:AD:D2:71:D6:2C:D5:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/34352e3136372e3231372e302f32342d3234203d3e20323638303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:f5:8f:d2:ca:43:03:ab:01:33:d9:5e:fe:06:3a:f6:13:45:
         1b:5e:63:28:7f:a3:95:b8:d0:84:cf:6f:6e:47:af:85:25:58:
         64:4f:9e:a9:a2:7b:bb:95:66:17:18:64:02:01:20:a9:d8:7e:
         73:6f:79:5a:dc:ea:d7:86:16:d2:7f:17:aa:e5:d3:fd:84:51:
         c0:0a:75:e8:e8:d8:85:57:f1:fd:b8:ac:52:e2:17:81:99:77:
         3d:1d:ae:0f:1a:d9:e9:bb:e0:7e:4c:8a:59:5e:ae:16:1f:e2:
         e5:9e:e2:a8:41:5c:92:c9:c2:d2:68:d2:9c:dc:ef:25:60:83:
         13:d9:38:f8:47:dd:85:a2:00:6e:1d:16:30:ee:b4:90:02:c0:
         08:6f:77:eb:98:7f:27:5e:c1:dc:15:eb:5a:47:1e:af:1f:4b:
         40:a4:e1:fe:8d:4e:9d:b6:51:e0:6a:5b:ec:26:60:a6:b6:9e:
         08:d9:85:c4:21:b6:15:c4:9c:85:df:e6:57:62:79:6a:7a:d1:
         f9:36:29:ab:d4:ba:50:ac:b7:31:d0:f4:4c:3c:c1:55:25:ae:
         76:25:cf:78:a8:b0:74:f4:24:22:4a:d2:2d:a0:45:27:2b:b1:
         dd:eb:f5:cd:fc:60:2b:24:e5:d6:ef:4a:a3:b1:04:41:0c:b9:
         44:88:36:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:33:00 2026 by rpki-client