Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/34352e3138372e3132382e302f32342d3234203d3e20323639343636.roa
File:                     34352e3138372e3132382e302f32342d3234203d3e20323639343636.roa (raw, json)
Hash identifier:          7bbe76k1uFIOeN6KEyBSUAUSyOy4pbnYI1okuf8A9VY=
Subject key identifier:   97:B2:5F:D8:74:E6:F7:6F:01:6B:DE:72:33:7D:A7:C5:BC:DB:6A:74
Certificate issuer:       /CN=A9A12339E6516165145BF0BEBCAA6D86DAFCEB52
Certificate serial:       6D53731F11CC0BA2C9802F98CD203F8C566F3702
Authority key identifier: A9:A1:23:39:E6:51:61:65:14:5B:F0:BE:BC:AA:6D:86:DA:FC:EB:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9A12339E6516165145BF0BEBCAA6D86DAFCEB52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/34352e3138372e3132382e302f32342d3234203d3e20323639343636.roa
Signing time:             Tue 29 Sep 2026 00:37:42 +0000
ROA not before:           Tue 29 Sep 2026 00:32:42 +0000
ROA not after:            Tue 28 Sep 2027 00:37:42 +0000
asID:                     269466
IP address blocks:        45.187.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/A9A12339E6516165145BF0BEBCAA6D86DAFCEB52.crl
                          rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/A9A12339E6516165145BF0BEBCAA6D86DAFCEB52.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9A12339E6516165145BF0BEBCAA6D86DAFCEB52.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 10:21:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:53:73:1f:11:cc:0b:a2:c9:80:2f:98:cd:20:3f:8c:56:6f:37:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9A12339E6516165145BF0BEBCAA6D86DAFCEB52
        Validity
            Not Before: Sep 29 00:32:42 2026 GMT
            Not After : Sep 28 00:37:42 2027 GMT
        Subject: CN=97B25FD874E6F76F016BDE72337DA7C5BCDB6A74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:97:8f:d9:e2:ea:8e:96:8b:0f:52:96:b2:c0:
                    58:d8:dc:1a:20:c7:40:bc:b9:00:e2:ae:40:a4:42:
                    a0:1b:99:fa:50:b9:ff:d9:2e:ec:2d:9c:2a:3e:97:
                    ac:f0:ef:74:47:4e:cc:46:0a:c0:44:32:e7:38:8e:
                    e4:08:7f:bc:0c:9c:a2:df:79:32:ad:bd:1d:56:30:
                    75:f9:0e:5a:3d:e8:8c:39:f0:13:30:0b:1e:8e:a9:
                    f3:53:29:ee:0b:98:c3:96:62:80:1a:27:34:b8:01:
                    2a:99:98:dc:0b:10:d9:61:5d:c2:47:c4:2e:ec:85:
                    be:53:4f:d6:aa:ee:d8:46:4a:b2:bc:ac:6a:22:f6:
                    06:f0:ac:72:86:76:df:16:4b:34:e2:cb:e8:40:02:
                    31:bd:44:34:10:ee:a8:5a:1b:20:31:e0:53:67:ee:
                    f8:a2:61:e4:89:2c:f8:20:c3:9c:d2:d3:3b:62:bd:
                    38:98:5d:a8:64:22:93:96:2f:4f:09:c4:1e:0b:b1:
                    ae:d0:3c:aa:a4:dc:a8:47:1b:6c:ad:88:13:6a:50:
                    f3:f4:24:e6:58:5f:0e:42:0f:b1:b4:32:ca:d7:89:
                    98:34:9b:4e:20:68:7c:98:a7:3b:91:1f:af:8d:ee:
                    33:83:f4:7b:db:19:3a:8b:ff:b4:b7:5f:d6:44:d7:
                    6e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B2:5F:D8:74:E6:F7:6F:01:6B:DE:72:33:7D:A7:C5:BC:DB:6A:74
            X509v3 Authority Key Identifier:
                keyid:A9:A1:23:39:E6:51:61:65:14:5B:F0:BE:BC:AA:6D:86:DA:FC:EB:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/A9A12339E6516165145BF0BEBCAA6D86DAFCEB52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9A12339E6516165145BF0BEBCAA6D86DAFCEB52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/34352e3138372e3132382e302f32342d3234203d3e20323639343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:22:56:b5:b3:ef:c9:13:53:fa:3a:dd:e9:d2:a2:a4:ce:48:
         3c:55:d6:ae:09:ba:45:7a:7b:77:74:2d:e5:c4:50:1c:d2:3c:
         04:a6:19:c1:2f:dc:a9:3a:bf:4a:f8:3f:d4:6a:18:72:ba:19:
         3a:5d:a2:b7:35:68:b8:5c:c6:9a:9f:6d:83:ed:81:fd:7a:51:
         69:0a:fe:5d:ee:ab:3f:3e:68:71:23:bf:eb:f2:b5:89:af:e6:
         23:9a:8b:53:38:e5:28:95:68:69:44:58:9c:f8:a5:32:b7:f6:
         5e:52:9b:da:81:f6:79:7d:7a:3e:91:57:ea:b3:d0:87:e3:a6:
         f2:37:5d:3f:a0:98:25:48:c7:d2:0e:bb:81:d6:12:d7:80:43:
         b1:46:20:27:fe:56:01:30:4a:b3:c3:91:f1:f1:75:47:f0:b2:
         6c:82:13:13:5d:c3:50:d9:16:12:ff:c6:7f:7e:51:87:c0:03:
         65:7e:6a:0c:69:b6:50:62:06:ec:e5:80:4a:0d:3c:72:df:5a:
         51:b4:31:95:e7:cd:6b:0e:74:39:14:df:2f:63:df:33:c4:db:
         5d:e2:d3:d9:df:f8:c6:cd:87:e7:9d:27:9c:fc:7f:69:b5:1d:
         00:2d:3e:53:b5:a9:7d:36:a3:dd:fd:80:c9:61:7d:b6:cb:33:
         09:58:f2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:22:26 2026 by rpki-client