Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/34352e3138372e3132382e302f32322d3232203d3e20323639343636.roa
File:                     34352e3138372e3132382e302f32322d3232203d3e20323639343636.roa (raw, json)
Hash identifier:          EORPQKsNwevYOy68Nyr+4+7pw8Llu50Koxn4Nw0mn6k=
Subject key identifier:   01:B9:B6:BA:7D:D5:DF:9F:03:81:20:F6:2C:76:06:6E:76:A4:61:CD
Certificate issuer:       /CN=A9A12339E6516165145BF0BEBCAA6D86DAFCEB52
Certificate serial:       1B9F47EB471626D55102BEE7887CD720CC6F0B1B
Authority key identifier: A9:A1:23:39:E6:51:61:65:14:5B:F0:BE:BC:AA:6D:86:DA:FC:EB:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9A12339E6516165145BF0BEBCAA6D86DAFCEB52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/34352e3138372e3132382e302f32322d3232203d3e20323639343636.roa
Signing time:             Tue 29 Sep 2026 00:37:37 +0000
ROA not before:           Tue 29 Sep 2026 00:32:37 +0000
ROA not after:            Tue 28 Sep 2027 00:37:37 +0000
asID:                     269466
IP address blocks:        45.187.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/A9A12339E6516165145BF0BEBCAA6D86DAFCEB52.crl
                          rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/A9A12339E6516165145BF0BEBCAA6D86DAFCEB52.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9A12339E6516165145BF0BEBCAA6D86DAFCEB52.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 15:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:9f:47:eb:47:16:26:d5:51:02:be:e7:88:7c:d7:20:cc:6f:0b:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9A12339E6516165145BF0BEBCAA6D86DAFCEB52
        Validity
            Not Before: Sep 29 00:32:37 2026 GMT
            Not After : Sep 28 00:37:37 2027 GMT
        Subject: CN=01B9B6BA7DD5DF9F038120F62C76066E76A461CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a7:99:1c:25:8e:5b:1e:5b:23:c0:b1:3c:7c:
                    46:12:e6:3c:be:32:66:14:d5:af:54:e8:96:0c:12:
                    f0:64:44:46:fd:6f:f0:f6:4a:4e:f7:fd:ef:9d:1d:
                    77:f6:b2:c4:b3:58:e4:09:fb:5e:d6:00:76:a3:b2:
                    f4:7a:ad:ff:63:cb:5e:13:63:3b:cb:bd:fc:f4:0c:
                    d4:94:0f:1e:90:70:26:44:e5:51:98:02:76:39:d8:
                    0e:9b:75:d9:ef:48:25:4e:9b:6e:0d:c4:28:21:59:
                    28:2a:63:9b:76:ee:7a:43:41:ce:5a:e7:b8:b6:06:
                    b8:51:2e:85:ae:ee:96:d7:f1:23:50:aa:88:53:54:
                    b9:97:4b:c9:ed:e1:13:99:af:bc:0b:e1:7c:19:cf:
                    86:ab:82:68:f7:62:95:11:20:c0:4e:58:5f:43:ad:
                    3e:f6:78:6d:30:db:b1:94:67:86:3c:d3:22:34:48:
                    4b:ad:ad:ef:eb:13:5f:dd:ab:05:f6:ee:6e:d1:8e:
                    b5:61:5f:ef:1a:59:92:d6:ca:ce:6a:2d:54:71:7e:
                    b9:e1:d3:de:6a:94:97:69:f5:9f:52:d9:5a:c1:05:
                    a2:c5:5b:f6:63:91:13:3e:c2:ed:bb:f5:10:9c:8c:
                    65:0c:93:40:4e:58:c7:77:3c:3d:c8:bb:78:86:63:
                    f7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B9:B6:BA:7D:D5:DF:9F:03:81:20:F6:2C:76:06:6E:76:A4:61:CD
            X509v3 Authority Key Identifier:
                keyid:A9:A1:23:39:E6:51:61:65:14:5B:F0:BE:BC:AA:6D:86:DA:FC:EB:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/A9A12339E6516165145BF0BEBCAA6D86DAFCEB52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9A12339E6516165145BF0BEBCAA6D86DAFCEB52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/34352e3138372e3132382e302f32322d3232203d3e20323639343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:e7:9b:b7:f3:0c:b5:aa:61:45:fc:f2:ed:2c:1d:8c:4f:7d:
         2b:b1:62:4e:4f:36:36:f9:7f:6e:99:f6:ae:38:c3:98:a1:1d:
         ce:2a:46:d0:4a:09:3b:b8:56:31:53:63:7e:ff:53:29:fa:30:
         0c:43:25:53:5b:ff:be:78:20:b2:ca:17:8b:06:18:3b:9f:38:
         fe:84:56:14:bc:9d:fd:40:da:0c:8b:2e:04:89:35:1d:a7:d8:
         9f:df:f8:68:60:c4:e7:a1:73:a0:31:33:1c:47:31:8b:03:56:
         25:5a:82:84:aa:62:96:ee:1a:22:f1:a2:c4:d0:4e:e6:65:26:
         57:2c:5d:10:3e:86:3a:fe:8f:03:15:63:0c:10:fd:1d:74:e8:
         09:21:57:fe:d0:c8:3b:7e:f8:f3:fc:14:05:fd:c9:d7:1b:e5:
         af:48:5f:cc:f4:21:75:59:c6:66:8d:79:70:82:74:ba:22:1d:
         52:56:82:0a:78:d4:2f:8f:65:e3:73:d8:8e:30:39:39:37:25:
         ca:e9:92:ed:ae:b5:aa:2a:c2:4e:03:11:c2:cc:e7:f5:d7:96:
         3b:45:b8:6b:00:97:07:db:e9:66:7f:8d:07:76:f1:6f:c3:1c:
         0b:de:ae:be:cc:65:5d:19:b8:76:d5:b6:8d:72:a3:8d:82:28:
         af:ca:ca:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 08:34:10 2026 by rpki-client