Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/34352e3233362e382e302f32342d3234203d3e20323638323133.roa
File:                     34352e3233362e382e302f32342d3234203d3e20323638323133.roa (raw, json)
Hash identifier:          qQOGNfZnT5mffxdqeHtNkr7ht2U7Y54CEV4WxsAyLn8=
Subject key identifier:   9E:29:A5:50:8B:EF:32:59:CC:D6:D6:51:84:F7:B7:16:F6:65:63:B9
Certificate issuer:       /CN=C3254EFA5C4E9FDA6768D0294247DF70DABBEF22
Certificate serial:       4F32791EE383918D103E1B24B843BA0FBDBA9600
Authority key identifier: C3:25:4E:FA:5C:4E:9F:DA:67:68:D0:29:42:47:DF:70:DA:BB:EF:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/34352e3233362e382e302f32342d3234203d3e20323638323133.roa
Signing time:             Fri 11 Sep 2026 19:02:31 +0000
ROA not before:           Fri 11 Sep 2026 18:57:31 +0000
ROA not after:            Fri 10 Sep 2027 19:02:31 +0000
asID:                     268213
IP address blocks:        45.236.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.crl
                          rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 22:21:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:32:79:1e:e3:83:91:8d:10:3e:1b:24:b8:43:ba:0f:bd:ba:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3254EFA5C4E9FDA6768D0294247DF70DABBEF22
        Validity
            Not Before: Sep 11 18:57:31 2026 GMT
            Not After : Sep 10 19:02:31 2027 GMT
        Subject: CN=9E29A5508BEF3259CCD6D65184F7B716F66563B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:05:03:a9:2f:b2:5b:6b:fd:76:13:88:a0:fd:
                    2f:70:11:ae:f2:a1:65:6f:49:d1:5e:92:b2:9f:24:
                    e5:23:6b:a2:89:5f:03:9d:53:0a:c7:4d:32:75:b5:
                    66:29:ed:ba:77:0f:7c:c9:f8:53:8b:17:80:74:82:
                    5d:7f:91:0d:80:4e:dd:5f:f4:c0:e0:c8:7a:a2:d6:
                    29:0b:ca:a4:e3:95:1d:8f:97:79:b0:42:39:ab:cf:
                    fb:15:6e:6a:38:ef:7b:5a:01:21:e2:78:0d:46:83:
                    43:4b:6d:e4:9c:21:9c:60:be:1e:16:f6:5c:42:3c:
                    23:e7:d5:a0:6f:e6:7e:07:5b:a7:20:f2:79:c2:a4:
                    71:71:8d:69:e6:c1:26:63:fd:50:d5:ea:f2:44:e0:
                    b0:d2:42:4b:db:46:ee:a1:8c:f3:b7:30:cf:9a:94:
                    b6:9a:f4:17:af:53:8e:1d:d7:2a:c6:44:b8:7d:68:
                    15:f8:77:df:c0:e9:70:47:36:3a:c4:c6:7f:1f:b7:
                    3a:f0:b8:a4:94:63:ef:05:fb:93:20:c2:ca:11:da:
                    c4:21:85:d3:6c:3b:4a:78:84:ef:0b:d3:25:4a:64:
                    b6:ab:4f:36:35:fe:dc:ea:b2:3f:31:eb:0c:70:63:
                    e2:fe:15:38:39:de:06:52:ac:84:cf:73:67:d0:54:
                    a9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:29:A5:50:8B:EF:32:59:CC:D6:D6:51:84:F7:B7:16:F6:65:63:B9
            X509v3 Authority Key Identifier:
                keyid:C3:25:4E:FA:5C:4E:9F:DA:67:68:D0:29:42:47:DF:70:DA:BB:EF:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/34352e3233362e382e302f32342d3234203d3e20323638323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:e5:d9:c0:6d:c9:ce:47:a4:12:55:27:d9:aa:9c:e5:ae:fc:
         e6:f0:3d:07:10:c4:49:dc:8b:6d:4a:e7:9a:20:4c:5b:23:0a:
         44:88:95:2a:0f:6a:c0:54:5f:bd:14:bd:ab:5b:ad:49:72:d1:
         8d:a2:09:f1:2b:0e:a7:b3:bf:06:b9:73:f6:50:ed:31:2a:4b:
         bc:08:01:bc:b6:3c:33:8d:cc:26:7d:2e:1f:31:a4:56:6f:7b:
         9c:eb:1c:fa:f3:f0:8c:54:d6:be:05:15:ca:d9:90:33:0a:9b:
         07:ed:48:bc:35:53:e3:2a:95:0d:30:75:43:1a:44:76:d5:03:
         df:7b:bb:f1:58:7d:20:d0:18:24:5f:ec:17:4c:19:5b:07:fe:
         23:5b:0c:4a:d9:7a:ae:97:c9:70:17:45:da:df:6f:70:27:a5:
         4b:e3:19:2a:6e:80:a0:91:86:f4:31:25:77:7f:08:ef:87:0a:
         e2:f2:12:49:c4:94:b6:8b:13:0a:51:29:92:b6:8e:19:cc:9b:
         68:32:36:34:c8:54:30:39:0d:ae:80:c2:91:98:de:1c:71:3b:
         34:2a:44:9a:03:4a:a5:a9:75:37:60:0f:ea:18:a7:0f:77:35:
         f2:d4:a1:e8:6e:1d:56:5c:14:22:a3:a0:9f:ff:11:9c:98:11:
         72:60:14:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:54:50 2026 by rpki-client