Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/34352e3138372e36302e302f32322d3232203d3e20323639343537.roa
File:                     34352e3138372e36302e302f32322d3232203d3e20323639343537.roa (raw, json)
Hash identifier:          tfLcEiEc8hhaXA/QlUIYninO0L17syMk0jZmTh3wt5o=
Subject key identifier:   D1:00:3C:DC:88:F6:C0:80:BF:9F:F9:0F:F6:EA:9A:13:EA:17:51:14
Certificate issuer:       /CN=6A8DAE347D8121EAD92B218EBB47C1F76D2EB5F0
Certificate serial:       7987000D6837B43BAE9443FB7BB2A5AC94C4DA03
Authority key identifier: 6A:8D:AE:34:7D:81:21:EA:D9:2B:21:8E:BB:47:C1:F7:6D:2E:B5:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A8DAE347D8121EAD92B218EBB47C1F76D2EB5F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/34352e3138372e36302e302f32322d3232203d3e20323639343537.roa
Signing time:             Fri 02 Jan 2026 15:12:09 +0000
ROA not before:           Fri 02 Jan 2026 15:07:09 +0000
ROA not after:            Fri 01 Jan 2027 15:12:09 +0000
asID:                     269457
IP address blocks:        45.187.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/6A8DAE347D8121EAD92B218EBB47C1F76D2EB5F0.crl
                          rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/6A8DAE347D8121EAD92B218EBB47C1F76D2EB5F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A8DAE347D8121EAD92B218EBB47C1F76D2EB5F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 10:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:87:00:0d:68:37:b4:3b:ae:94:43:fb:7b:b2:a5:ac:94:c4:da:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A8DAE347D8121EAD92B218EBB47C1F76D2EB5F0
        Validity
            Not Before: Jan  2 15:07:09 2026 GMT
            Not After : Jan  1 15:12:09 2027 GMT
        Subject: CN=D1003CDC88F6C080BF9FF90FF6EA9A13EA175114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:df:0a:8b:5b:f0:b7:84:0f:6b:04:8b:c6:7d:
                    98:1d:c9:fa:96:09:01:d6:0e:59:71:73:00:74:e0:
                    54:97:c7:a3:26:f6:49:77:b6:1c:8c:2c:35:23:5d:
                    31:b9:42:2c:dd:1f:11:8f:50:f8:c2:97:01:94:e3:
                    5b:56:64:da:94:1d:3c:8a:dd:de:ba:63:83:60:c6:
                    2c:ea:92:c6:87:85:f4:85:bd:a7:e5:03:63:9a:51:
                    5d:c5:18:c9:a8:a8:73:c4:f4:38:10:f0:89:e6:49:
                    be:e0:90:e6:b2:cb:0f:e3:b1:ac:9d:a3:ef:ed:e0:
                    db:ca:45:2b:9d:97:5b:77:70:d4:72:60:dc:61:d9:
                    e2:79:3b:4d:fa:12:35:b9:5b:f6:53:a8:14:50:5a:
                    e5:2d:94:5d:75:6f:b9:62:be:30:06:d4:3e:55:1a:
                    b0:43:99:c9:75:f4:5f:b8:fd:e5:d0:ca:be:29:cd:
                    6d:da:8b:9b:95:ec:5f:fa:2e:50:a2:27:55:5c:00:
                    e6:53:6a:52:d3:87:fb:3a:35:02:5b:a7:29:ec:20:
                    c7:0e:79:bc:ae:5b:e4:ae:e5:d7:65:35:61:b2:d0:
                    64:1e:1a:2a:f9:49:c0:4a:92:3e:87:e3:7a:b9:54:
                    e4:bf:1c:7f:3f:82:a8:5b:36:e7:ad:47:40:a3:0a:
                    0e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:00:3C:DC:88:F6:C0:80:BF:9F:F9:0F:F6:EA:9A:13:EA:17:51:14
            X509v3 Authority Key Identifier:
                keyid:6A:8D:AE:34:7D:81:21:EA:D9:2B:21:8E:BB:47:C1:F7:6D:2E:B5:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/6A8DAE347D8121EAD92B218EBB47C1F76D2EB5F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A8DAE347D8121EAD92B218EBB47C1F76D2EB5F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/34352e3138372e36302e302f32322d3232203d3e20323639343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:66:5d:0e:47:0f:5a:89:09:c9:e7:91:bb:3d:bc:e0:48:ae:
         d4:cd:96:b3:10:3a:f5:0c:cb:d0:fa:79:c8:53:a6:d1:cd:54:
         86:70:59:28:d5:78:6f:8b:24:f7:5b:0b:b4:8f:c3:e6:f5:35:
         da:90:6c:36:f6:e0:3d:a2:5b:d3:d7:b7:74:f5:e6:76:bd:ca:
         b8:57:e5:d7:cc:75:6f:08:7b:fc:bc:a4:e3:09:07:a3:b2:37:
         31:bf:ab:f3:e9:a1:6a:0d:0e:97:21:5c:f3:41:d7:9b:79:9c:
         5f:3c:a9:69:7d:6d:7a:a4:9e:23:0f:91:bd:1e:08:37:3e:14:
         5e:48:92:b2:4b:87:e4:fc:6f:4d:30:4a:2b:df:d1:1b:38:b2:
         54:b2:67:c3:ad:c7:3e:b7:fb:d5:fa:e9:62:93:af:47:89:f4:
         f6:91:e6:73:8b:53:f5:34:ad:8a:7b:69:c2:9e:2b:13:20:05:
         3b:82:8f:11:72:b4:61:58:4d:93:a4:d9:76:50:97:f2:d0:95:
         40:cd:8f:ae:14:7a:70:10:48:17:da:c6:4f:50:9f:2e:d3:12:
         e8:06:bf:60:9a:1c:6d:9f:5b:7d:73:99:5c:b7:97:44:d9:2c:
         0d:d8:91:b2:eb:7d:86:e1:09:00:52:6e:5f:16:9a:f6:18:76:
         f8:ef:98:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:51:33 2026 by rpki-client