Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5sDkpigeUXoG4kUotvkpAQg2civCBuZSJgzjyYedVKTk/0/34352e3138332e38302e302f32332d3234203d3e20323639323730.roa
File:                     34352e3138332e38302e302f32332d3234203d3e20323639323730.roa (raw, json)
Hash identifier:          JQ/JWZBuurUGqaMIj55lhr316LzyWu/BVezd3nNJGhg=
Subject key identifier:   73:94:6C:08:B4:3D:77:FE:26:4C:A2:19:B0:A6:F3:9B:DB:91:36:FE
Certificate issuer:       /CN=D6D2BF07629487B957BED477B9A0F98CD9127931
Certificate serial:       7F662EB9FF6803B0B8708D7D2CFAC95E2AC37323
Authority key identifier: D6:D2:BF:07:62:94:87:B9:57:BE:D4:77:B9:A0:F9:8C:D9:12:79:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6D2BF07629487B957BED477B9A0F98CD9127931.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5sDkpigeUXoG4kUotvkpAQg2civCBuZSJgzjyYedVKTk/0/34352e3138332e38302e302f32332d3234203d3e20323639323730.roa
Signing time:             Fri 25 Sep 2026 19:59:22 +0000
ROA not before:           Fri 25 Sep 2026 19:54:22 +0000
ROA not after:            Fri 24 Sep 2027 19:59:22 +0000
asID:                     269270
IP address blocks:        45.183.80.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5sDkpigeUXoG4kUotvkpAQg2civCBuZSJgzjyYedVKTk/0/D6D2BF07629487B957BED477B9A0F98CD9127931.crl
                          rsync://rpki-repo.registro.br/repo/5sDkpigeUXoG4kUotvkpAQg2civCBuZSJgzjyYedVKTk/0/D6D2BF07629487B957BED477B9A0F98CD9127931.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6D2BF07629487B957BED477B9A0F98CD9127931.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 17:37:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:66:2e:b9:ff:68:03:b0:b8:70:8d:7d:2c:fa:c9:5e:2a:c3:73:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6D2BF07629487B957BED477B9A0F98CD9127931
        Validity
            Not Before: Sep 25 19:54:22 2026 GMT
            Not After : Sep 24 19:59:22 2027 GMT
        Subject: CN=73946C08B43D77FE264CA219B0A6F39BDB9136FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bf:bd:87:60:50:ff:07:b5:a4:5a:32:5d:c9:
                    d0:3f:85:a7:f1:2d:6a:dd:7e:c4:5f:c0:17:5d:ae:
                    d9:3c:58:df:59:bf:4e:6b:5b:c6:d1:af:c5:ce:ab:
                    8c:4b:f5:e3:e8:ca:ca:36:92:be:ed:2a:41:1f:de:
                    5d:c9:be:97:7e:70:28:32:70:d8:65:fb:20:83:67:
                    f0:d2:a0:05:4c:c2:62:95:eb:75:81:8e:83:b9:77:
                    f0:fb:fa:dc:8e:d6:d0:a4:1c:fe:b9:28:94:c7:04:
                    61:e0:cc:a7:79:5d:06:21:8e:81:ce:4e:b1:c5:1b:
                    f1:d3:64:95:89:a8:2c:7d:97:9b:83:63:6d:9c:39:
                    9f:0b:2e:b2:9e:5c:1d:6a:7c:19:a1:a2:1d:ab:33:
                    18:3b:5e:ee:62:c8:b4:e1:d1:24:0c:18:14:14:fd:
                    b1:48:3b:18:83:14:f1:8d:f8:89:eb:3f:58:d1:92:
                    d8:26:a4:ad:23:21:0c:7c:9f:1e:a2:6d:08:a4:a6:
                    5b:b9:da:ab:db:e5:36:a1:20:e7:24:29:7e:34:0d:
                    fb:5b:8a:71:b3:2a:6b:9c:5b:fd:54:24:f0:c9:7e:
                    17:3b:da:b2:46:c8:b1:32:4a:31:33:b6:c9:35:d0:
                    08:0d:1e:b4:0d:a5:a7:3c:c9:7c:22:c3:85:64:88:
                    f6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:94:6C:08:B4:3D:77:FE:26:4C:A2:19:B0:A6:F3:9B:DB:91:36:FE
            X509v3 Authority Key Identifier:
                keyid:D6:D2:BF:07:62:94:87:B9:57:BE:D4:77:B9:A0:F9:8C:D9:12:79:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5sDkpigeUXoG4kUotvkpAQg2civCBuZSJgzjyYedVKTk/0/D6D2BF07629487B957BED477B9A0F98CD9127931.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6D2BF07629487B957BED477B9A0F98CD9127931.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5sDkpigeUXoG4kUotvkpAQg2civCBuZSJgzjyYedVKTk/0/34352e3138332e38302e302f32332d3234203d3e20323639323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:d2:3c:16:68:f4:ea:68:f8:34:f2:41:0d:0a:06:02:0b:12:
         4c:bc:6a:e5:c9:01:9d:6c:c5:c8:14:e7:33:80:d1:0a:8a:9a:
         72:28:2c:26:ba:60:02:20:3d:3b:89:89:bf:3e:94:2d:d5:9c:
         ff:8c:03:bf:92:eb:b2:40:98:77:72:cf:d0:72:37:31:bb:ad:
         e1:c9:2c:0c:5f:5e:b4:cc:29:0a:cd:a9:69:d7:28:5d:99:ac:
         04:45:94:a1:50:26:47:45:b3:42:02:dc:c1:66:0f:6a:28:06:
         e1:e4:aa:34:f9:c3:d3:41:9b:85:72:62:72:ad:44:58:1e:a0:
         f4:1c:e5:0f:5c:0e:56:b9:b5:da:31:69:17:25:6b:7e:ec:6a:
         52:c1:38:e2:06:93:85:13:ab:fc:61:4c:ed:e4:fd:1d:b4:be:
         d8:36:09:08:3c:14:d1:a4:c5:41:b7:4c:61:cb:cd:26:7c:7d:
         f4:ed:6d:f1:c3:48:7a:b7:0c:03:00:9a:f4:f3:0e:4e:07:5c:
         0a:33:7d:ff:8d:7a:83:f9:df:1a:0e:82:47:d9:46:b0:06:70:
         6a:88:40:ca:47:c5:1b:2e:5d:67:9b:63:17:89:fd:e9:2f:1a:
         ad:44:e5:1b:3c:70:38:46:63:ae:6d:2b:6d:a2:81:db:b0:8a:
         36:6e:1e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:53:05 2026 by rpki-client