Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234342e302f32332d3233203d3e20323638323936.roa
File:                     34352e3233372e3234342e302f32332d3233203d3e20323638323936.roa (raw, json)
Hash identifier:          AspdRT7ssd2C/OnaRVnxVhoQfiM48ECc+5EC9U8fIns=
Subject key identifier:   AF:E4:4B:C6:4A:5D:41:01:1A:AE:80:F2:36:A5:A7:A5:BE:02:76:AC
Certificate issuer:       /CN=62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F
Certificate serial:       7629FEA2FEE0476952E492A64F92193DBE9237F4
Authority key identifier: 62:04:0E:0F:83:8A:09:ED:AD:38:CB:7E:6B:6B:BB:DC:23:B1:CB:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234342e302f32332d3233203d3e20323638323936.roa
Signing time:             Tue 13 Oct 2026 15:22:42 +0000
ROA not before:           Tue 13 Oct 2026 15:17:42 +0000
ROA not after:            Tue 12 Oct 2027 15:22:42 +0000
asID:                     268296
IP address blocks:        45.237.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 08:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:29:fe:a2:fe:e0:47:69:52:e4:92:a6:4f:92:19:3d:be:92:37:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F
        Validity
            Not Before: Oct 13 15:17:42 2026 GMT
            Not After : Oct 12 15:22:42 2027 GMT
        Subject: CN=AFE44BC64A5D41011AAE80F236A5A7A5BE0276AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2d:f5:51:e6:78:ee:1c:62:ad:4e:35:6b:76:
                    7f:1a:1a:1b:0e:53:b0:c3:a9:cc:6a:76:a9:d3:99:
                    8e:ee:36:f7:a1:5b:77:f4:cc:b1:98:77:50:20:55:
                    47:c9:d0:f8:c9:9e:b2:22:05:da:4d:22:56:3f:1c:
                    aa:4b:63:8e:8f:d6:a6:e5:c3:8d:fd:7c:68:01:64:
                    d6:dd:5d:29:c7:40:30:9a:ea:83:3e:22:51:71:f7:
                    23:d7:9b:56:17:7c:ad:85:52:2d:7f:af:64:92:38:
                    0d:e1:3c:0c:55:1c:fe:56:18:fe:18:da:d5:a9:ed:
                    5f:83:12:f5:2d:2b:2d:71:2f:82:1d:0b:b3:a3:6b:
                    40:39:4e:6d:b3:f0:7b:92:16:30:bc:46:79:0c:e8:
                    38:2d:66:8f:b6:40:34:bd:c6:16:f3:ca:c4:44:f7:
                    d6:c5:e6:cb:6a:81:af:15:f5:70:bd:a7:1c:8f:a3:
                    e9:54:c0:52:c4:38:54:8e:87:68:84:64:95:cf:c6:
                    53:b9:12:8d:80:86:6d:71:80:f6:e1:9a:b3:e9:03:
                    df:35:91:f9:a5:d5:64:65:24:44:e5:8f:b1:06:07:
                    df:0e:19:df:16:62:f1:d6:0f:96:f9:26:e2:57:94:
                    63:80:59:24:6c:c6:d1:69:d4:75:5d:e4:7c:fb:71:
                    df:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E4:4B:C6:4A:5D:41:01:1A:AE:80:F2:36:A5:A7:A5:BE:02:76:AC
            X509v3 Authority Key Identifier:
                keyid:62:04:0E:0F:83:8A:09:ED:AD:38:CB:7E:6B:6B:BB:DC:23:B1:CB:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234342e302f32332d3233203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:d8:b8:27:75:f1:1b:e6:8c:f1:bd:18:e1:61:10:ed:d4:f0:
         8d:7c:ab:a9:c3:01:4e:da:05:c4:a4:9e:32:a6:78:50:e7:1a:
         4a:91:b4:a4:c3:c1:33:62:a3:2c:70:e8:da:55:53:96:bb:0f:
         43:77:da:6a:b6:f3:6b:73:1c:f3:70:00:62:dd:70:f5:d6:b9:
         89:fb:00:d6:67:81:95:45:58:10:52:bd:6b:5c:07:ec:80:1d:
         42:47:e2:bb:5c:90:8d:fe:6e:de:f1:0e:4e:36:90:83:71:f6:
         19:01:fc:6d:c7:2b:e9:d3:b7:23:95:3d:d5:53:26:85:42:af:
         1f:40:10:e0:ab:9b:32:f0:a7:4e:4d:d8:8c:34:cd:f7:88:b9:
         df:18:53:3e:5b:6d:aa:ed:44:a2:19:54:b9:28:2a:54:b7:c9:
         36:17:b7:4b:10:d8:dd:eb:73:18:0c:a8:b0:ff:aa:8b:90:f1:
         5f:49:61:e8:58:2c:1f:85:3f:c4:99:db:81:6c:a1:b4:94:6d:
         df:08:c7:52:ca:65:61:83:91:55:ff:73:c7:c1:a6:bd:e1:6c:
         79:c0:c2:06:34:fd:53:2e:4d:9d:db:20:2e:6a:57:c7:38:47:
         aa:64:92:2d:dc:fc:b6:da:b7:7f:c3:d3:b4:c4:90:0a:36:f0:
         56:f1:4f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 08:32:00 2026 by rpki-client