Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/34352e3138372e3133302e302f32342d3234203d3e20323639343636.roa
File:                     34352e3138372e3133302e302f32342d3234203d3e20323639343636.roa (raw, json)
Hash identifier:          WeaUd8D/R9IdGlCL0BU+EGTX9yAqQwZXbi3kHzCW1zE=
Subject key identifier:   F5:9C:D3:B1:E9:C0:59:CD:A4:48:4D:4E:BB:4F:88:D4:C6:96:32:57
Certificate issuer:       /CN=A9A12339E6516165145BF0BEBCAA6D86DAFCEB52
Certificate serial:       086D9EC8637CF2345DF24C9FC652382E7F9A8303
Authority key identifier: A9:A1:23:39:E6:51:61:65:14:5B:F0:BE:BC:AA:6D:86:DA:FC:EB:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9A12339E6516165145BF0BEBCAA6D86DAFCEB52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/34352e3138372e3133302e302f32342d3234203d3e20323639343636.roa
Signing time:             Tue 29 Sep 2026 00:37:54 +0000
ROA not before:           Tue 29 Sep 2026 00:32:54 +0000
ROA not after:            Tue 28 Sep 2027 00:37:54 +0000
asID:                     269466
IP address blocks:        45.187.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/A9A12339E6516165145BF0BEBCAA6D86DAFCEB52.crl
                          rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/A9A12339E6516165145BF0BEBCAA6D86DAFCEB52.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9A12339E6516165145BF0BEBCAA6D86DAFCEB52.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 21:16:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:6d:9e:c8:63:7c:f2:34:5d:f2:4c:9f:c6:52:38:2e:7f:9a:83:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9A12339E6516165145BF0BEBCAA6D86DAFCEB52
        Validity
            Not Before: Sep 29 00:32:54 2026 GMT
            Not After : Sep 28 00:37:54 2027 GMT
        Subject: CN=F59CD3B1E9C059CDA4484D4EBB4F88D4C6963257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:74:8e:ad:33:2e:7c:14:f2:66:7a:78:d4:23:
                    d7:e1:53:c1:ac:01:44:4d:2b:31:aa:aa:e3:e8:61:
                    2b:e4:73:26:14:45:f6:0f:c0:fa:85:04:0a:c0:fc:
                    1c:9d:e3:39:7f:a9:fa:ea:4f:74:41:9b:aa:fe:80:
                    83:a2:ba:f2:14:40:7b:02:b0:05:e9:01:65:86:13:
                    8f:44:2e:c8:3b:e8:7f:d0:c6:7d:4d:b2:7c:18:90:
                    db:45:3a:66:ad:77:49:1e:e6:6b:d8:19:53:14:9d:
                    8c:00:aa:24:a2:c9:cf:8d:0a:31:c1:27:dc:70:fc:
                    20:14:97:da:d5:be:c1:df:88:7b:cb:f5:05:65:1a:
                    bf:00:30:4c:5b:3d:a7:a3:5b:17:c7:18:7d:3d:74:
                    65:95:e3:df:9f:7b:95:9b:04:f1:fa:a0:a7:4c:8a:
                    65:8a:5e:20:02:18:cd:50:c9:dc:44:66:95:4a:92:
                    26:a8:66:b9:65:26:df:83:65:4a:e5:d1:f8:c2:36:
                    bc:36:ca:e4:37:ef:9a:c6:d5:67:00:bb:d8:c5:7b:
                    93:0b:d1:74:8e:af:cc:14:39:b7:87:9d:51:61:7a:
                    18:9e:12:8e:d1:a3:fc:75:7b:b7:c7:54:70:37:9c:
                    f3:6f:d9:b8:58:5e:ef:ca:d1:fc:d9:18:e3:b2:47:
                    91:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:9C:D3:B1:E9:C0:59:CD:A4:48:4D:4E:BB:4F:88:D4:C6:96:32:57
            X509v3 Authority Key Identifier:
                keyid:A9:A1:23:39:E6:51:61:65:14:5B:F0:BE:BC:AA:6D:86:DA:FC:EB:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/A9A12339E6516165145BF0BEBCAA6D86DAFCEB52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9A12339E6516165145BF0BEBCAA6D86DAFCEB52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/34352e3138372e3133302e302f32342d3234203d3e20323639343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:0b:47:0d:11:02:82:c0:e3:f2:ae:34:e3:bf:e0:30:40:1f:
         f5:74:c4:14:e9:83:45:25:4b:d7:99:9c:79:5a:8d:6a:35:26:
         e9:f5:82:99:33:55:07:77:ce:fb:2a:b6:92:02:e6:6e:e6:d1:
         aa:0a:f4:d6:8a:c2:9a:6e:e4:2f:f2:d8:11:79:32:62:6d:29:
         bf:c1:c2:c0:e2:3f:57:81:50:41:fc:fa:92:96:ed:9d:ce:38:
         a1:cd:83:f9:ab:f2:ff:89:0f:50:f8:17:28:90:f2:29:49:62:
         72:38:db:10:07:42:af:6f:75:13:37:7c:30:e1:32:68:01:da:
         0b:8c:7d:04:21:98:07:3b:c4:61:4c:cf:9c:fc:4b:7f:a3:72:
         44:0a:98:49:13:d4:d3:66:7f:6b:0a:6e:b9:2e:e8:e4:af:e8:
         ce:86:34:53:72:38:bd:56:1a:fe:58:e7:b0:e6:77:37:30:24:
         95:82:70:a2:62:47:6f:2e:8b:f7:44:23:cd:dc:cd:33:fe:69:
         be:ea:60:dc:42:7a:d3:42:da:06:bb:6f:d4:01:39:b2:d8:71:
         fe:26:11:ab:08:0c:5b:ff:c9:48:09:09:4c:c8:4f:62:87:0d:
         77:12:8a:78:c3:eb:61:75:b2:33:08:6f:14:69:4b:a4:cf:bb:
         bc:d6:cf:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 04:57:58 2026 by rpki-client