Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BmEm8ExER7rrs7FrSJBP6DkKqwvkK65hVds3jU3GLrwX/0/34352e3138302e3133362e302f32322d3234203d3e20323639313336.roa
File:                     34352e3138302e3133362e302f32322d3234203d3e20323639313336.roa (raw, json)
Hash identifier:          LylEUNyLaM/K6PMLY5Uqq35qUsUSKo62WAlaMsZ3WF0=
Subject key identifier:   A8:8E:DF:C5:62:8D:79:DD:03:A1:80:1C:F8:23:BB:A2:95:22:07:CE
Certificate issuer:       /CN=6D116F9E3C733D36B8C998049E0A509BB6C59F78
Certificate serial:       1061824F8FD271D76478EB2CCB22EB82B0ED6CC4
Authority key identifier: 6D:11:6F:9E:3C:73:3D:36:B8:C9:98:04:9E:0A:50:9B:B6:C5:9F:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D116F9E3C733D36B8C998049E0A509BB6C59F78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BmEm8ExER7rrs7FrSJBP6DkKqwvkK65hVds3jU3GLrwX/0/34352e3138302e3133362e302f32322d3234203d3e20323639313336.roa
Signing time:             Tue 15 Sep 2026 18:53:09 +0000
ROA not before:           Tue 15 Sep 2026 18:48:09 +0000
ROA not after:            Tue 14 Sep 2027 18:53:09 +0000
asID:                     269136
IP address blocks:        45.180.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BmEm8ExER7rrs7FrSJBP6DkKqwvkK65hVds3jU3GLrwX/0/6D116F9E3C733D36B8C998049E0A509BB6C59F78.crl
                          rsync://rpki-repo.registro.br/repo/BmEm8ExER7rrs7FrSJBP6DkKqwvkK65hVds3jU3GLrwX/0/6D116F9E3C733D36B8C998049E0A509BB6C59F78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D116F9E3C733D36B8C998049E0A509BB6C59F78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 20:40:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:61:82:4f:8f:d2:71:d7:64:78:eb:2c:cb:22:eb:82:b0:ed:6c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D116F9E3C733D36B8C998049E0A509BB6C59F78
        Validity
            Not Before: Sep 15 18:48:09 2026 GMT
            Not After : Sep 14 18:53:09 2027 GMT
        Subject: CN=A88EDFC5628D79DD03A1801CF823BBA2952207CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3d:85:f7:fd:45:e8:88:11:f8:b5:5f:08:2f:
                    f7:5d:f7:1a:56:80:5d:aa:87:ab:88:03:2f:57:23:
                    47:ee:5f:63:73:81:2e:46:8e:45:04:e7:67:cd:34:
                    8c:3a:28:61:9d:4e:e6:e3:64:6b:03:6f:cd:57:9a:
                    93:fc:fc:43:80:f2:25:01:48:7b:a3:38:c7:c1:ee:
                    e1:a6:5c:99:1f:5f:30:49:64:1b:23:9e:29:3e:f3:
                    50:66:63:f3:12:68:cc:1e:e0:65:1a:65:05:54:d0:
                    ff:4f:11:73:08:0a:a9:6b:27:f4:4f:08:99:c4:81:
                    8c:60:83:6f:e5:68:e0:d1:8d:10:5f:c3:89:29:5f:
                    bc:5c:70:87:44:ac:79:76:34:96:92:84:e7:c7:b0:
                    86:15:59:68:f0:52:6d:21:41:10:81:66:eb:cd:be:
                    19:d8:35:bb:13:b2:62:a9:7f:7a:f0:41:27:48:88:
                    46:69:4c:17:88:48:26:f1:c7:cb:33:0f:14:cf:c1:
                    7c:34:81:16:e7:0d:c5:2c:d2:e9:17:a3:f7:8b:05:
                    08:0e:d1:96:f6:6e:52:17:68:9e:2f:d5:c7:cb:20:
                    58:48:cb:c0:8f:0e:cc:e4:e7:b4:89:5e:dc:80:b9:
                    34:e1:2c:ea:a0:64:de:c8:c6:0f:2c:02:8b:51:81:
                    99:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:8E:DF:C5:62:8D:79:DD:03:A1:80:1C:F8:23:BB:A2:95:22:07:CE
            X509v3 Authority Key Identifier:
                keyid:6D:11:6F:9E:3C:73:3D:36:B8:C9:98:04:9E:0A:50:9B:B6:C5:9F:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BmEm8ExER7rrs7FrSJBP6DkKqwvkK65hVds3jU3GLrwX/0/6D116F9E3C733D36B8C998049E0A509BB6C59F78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D116F9E3C733D36B8C998049E0A509BB6C59F78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BmEm8ExER7rrs7FrSJBP6DkKqwvkK65hVds3jU3GLrwX/0/34352e3138302e3133362e302f32322d3234203d3e20323639313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:10:55:5f:ef:15:89:57:41:0e:fd:ef:ea:ed:b1:f9:82:4a:
         f2:2a:df:85:70:03:56:aa:9c:96:c9:06:34:0c:eb:d9:d2:15:
         85:7a:0e:44:02:b1:5f:42:4d:03:e5:2b:f3:7f:7c:05:00:7c:
         ea:07:14:66:ee:77:33:eb:0a:b2:9d:fc:54:d4:5c:b4:72:ad:
         ae:db:b1:ca:73:84:1b:95:9f:1a:ce:eb:70:d2:1b:84:f5:0c:
         2a:70:fe:da:b9:a0:15:68:7e:15:07:e1:8c:0e:98:b2:b9:c9:
         66:f5:dd:70:60:59:0f:0e:d5:8f:47:a6:d5:4d:f9:c7:ee:03:
         87:cf:a6:f8:7c:25:54:08:ac:94:63:31:37:57:04:9e:35:d8:
         81:ca:af:c6:4e:cf:0d:fd:b7:88:ea:33:20:91:94:c5:f7:87:
         34:ae:00:dd:19:e9:7e:d4:a8:55:29:3a:3d:5b:88:c8:42:72:
         85:48:e1:18:90:a2:9a:f3:39:ca:5f:2d:4e:81:aa:2b:02:01:
         d2:01:20:08:62:e7:a8:8c:6d:ed:69:76:63:52:51:61:a3:0a:
         b9:04:4c:1d:35:54:b0:31:be:ab:5c:50:7b:1e:cb:49:5a:d0:
         06:e7:0a:9c:84:bb:72:16:79:17:15:da:a2:d3:a7:fc:8d:ff:
         2d:ab:b6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 23:08:40 2026 by rpki-client