Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/0/34352e3137312e31362e302f32332d3233203d3e20323638313831.roa
File:                     34352e3137312e31362e302f32332d3233203d3e20323638313831.roa (raw, json)
Hash identifier:          FdBdwU/n9JawoRw4eXvf6ovePqNnMdPh/3kLmZpQrM0=
Subject key identifier:   CA:9C:C0:F7:8C:5C:8D:7F:44:45:F8:54:02:76:91:28:C0:89:33:D9
Certificate issuer:       /CN=A97765788ABBF9CF9F38CFF907138FBAE29C9607
Certificate serial:       2C41925DC8ED596BF7806B6FEB08B322F07E933C
Authority key identifier: A9:77:65:78:8A:BB:F9:CF:9F:38:CF:F9:07:13:8F:BA:E2:9C:96:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A97765788ABBF9CF9F38CFF907138FBAE29C9607.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/0/34352e3137312e31362e302f32332d3233203d3e20323638313831.roa
Signing time:             Fri 28 Aug 2026 17:32:00 +0000
ROA not before:           Fri 28 Aug 2026 17:27:00 +0000
ROA not after:            Fri 27 Aug 2027 17:32:00 +0000
asID:                     268181
IP address blocks:        45.171.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/0/A97765788ABBF9CF9F38CFF907138FBAE29C9607.crl
                          rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/0/A97765788ABBF9CF9F38CFF907138FBAE29C9607.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A97765788ABBF9CF9F38CFF907138FBAE29C9607.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 00:17:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:41:92:5d:c8:ed:59:6b:f7:80:6b:6f:eb:08:b3:22:f0:7e:93:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A97765788ABBF9CF9F38CFF907138FBAE29C9607
        Validity
            Not Before: Aug 28 17:27:00 2026 GMT
            Not After : Aug 27 17:32:00 2027 GMT
        Subject: CN=CA9CC0F78C5C8D7F4445F85402769128C08933D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d9:5d:33:85:56:58:13:2a:6d:50:7c:ea:1e:
                    de:e6:7e:4b:58:6f:24:0d:eb:35:3d:27:11:b5:7e:
                    ea:a3:ca:2a:55:cf:07:49:06:5d:e8:24:13:d0:e7:
                    4d:88:09:fa:cd:8a:fa:38:2f:18:c1:4b:62:1a:28:
                    8c:77:c2:5c:22:a7:86:4e:d5:b3:7a:25:d0:0d:4e:
                    17:4f:40:95:3e:7d:24:b7:ea:07:14:2f:bf:51:bb:
                    8b:de:29:90:09:3d:7f:dc:1b:e0:9c:54:45:7e:c1:
                    d5:0f:9d:ce:7e:a3:f0:cf:65:6b:a2:c8:11:7b:51:
                    e4:b3:61:85:d3:a7:c4:0e:5a:aa:67:db:42:3c:15:
                    91:b2:01:df:fe:97:c8:a8:88:fa:90:e7:c5:59:c8:
                    d9:26:7f:7a:be:da:b5:a6:68:c2:41:65:dd:86:3a:
                    08:08:4b:95:7a:f7:90:f7:db:49:00:be:dd:f2:58:
                    16:6c:7c:29:dd:fa:8e:dc:e6:4a:0c:8b:80:1e:14:
                    ee:7f:4d:5f:28:13:69:c1:08:75:c0:94:87:89:1f:
                    4c:1d:82:00:d4:19:65:6d:33:9e:22:40:ad:4b:4d:
                    20:6d:07:f3:fe:c8:7f:ee:fe:5e:a1:72:6b:86:1f:
                    c2:b2:d0:46:4d:62:cb:a7:a4:68:09:9d:d2:91:73:
                    63:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:9C:C0:F7:8C:5C:8D:7F:44:45:F8:54:02:76:91:28:C0:89:33:D9
            X509v3 Authority Key Identifier:
                keyid:A9:77:65:78:8A:BB:F9:CF:9F:38:CF:F9:07:13:8F:BA:E2:9C:96:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/0/A97765788ABBF9CF9F38CFF907138FBAE29C9607.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A97765788ABBF9CF9F38CFF907138FBAE29C9607.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/0/34352e3137312e31362e302f32332d3233203d3e20323638313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:7e:04:eb:cd:50:fc:57:8b:c3:86:95:16:e8:93:b8:dd:90:
         78:1e:69:70:89:5f:65:d5:ad:aa:6a:3f:57:7d:ed:f6:3f:27:
         7c:a6:f6:65:eb:19:7a:da:f4:a2:51:58:2b:85:6a:a0:00:b3:
         01:6f:77:23:5a:c6:0d:d5:01:be:b0:29:13:1c:9d:6f:35:5f:
         bd:16:ca:73:c3:f5:41:c5:f6:ab:ed:e3:05:79:05:0d:c5:b2:
         8c:43:cc:14:b1:7a:82:cb:63:dd:5e:2c:bd:47:d2:5a:16:f7:
         23:f8:37:f4:7b:1b:0e:10:d5:36:20:44:b1:da:67:74:8e:e1:
         49:09:6e:23:41:fa:21:69:bd:77:8b:3e:01:ba:dd:31:83:16:
         8d:15:5e:96:70:a2:bf:20:b2:87:0a:b3:a2:ed:32:0d:a1:6b:
         8e:67:f5:bc:fc:11:e7:2c:87:b6:21:11:b9:48:ce:4e:e7:1c:
         9c:0e:7b:1e:e2:cf:af:b5:bd:ff:1f:42:1d:9e:bf:be:92:ae:
         6f:d7:35:8d:d9:f4:8f:4d:d9:06:6d:71:86:08:cb:5b:d4:47:
         a4:1b:f9:9e:44:79:82:a2:a9:3c:dc:86:33:37:d6:cf:99:63:
         0c:ec:e8:32:fd:47:26:5a:e6:ce:56:88:5b:76:61:76:6f:7c:
         ab:2d:23:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:41:07 2026 by rpki-client