Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/5/34352e3137342e342e302f32322d3232203d3e20323638393134.roa
File:                     34352e3137342e342e302f32322d3232203d3e20323638393134.roa (raw, json)
Hash identifier:          O7f/r7lhR+pct8OoiT5Wbc7KswVNhZwz+z3ipCanuUk=
Subject key identifier:   EE:A5:3A:46:DA:F7:BA:2E:A2:F1:73:CD:D1:CB:20:B5:A7:04:8E:D4
Certificate issuer:       /CN=9652752ADADE81419E0621ACCD592D9B4892CE9F
Certificate serial:       790FC3BEA0C75BC8F984AFF010D7A45DC47EB49C
Authority key identifier: 96:52:75:2A:DA:DE:81:41:9E:06:21:AC:CD:59:2D:9B:48:92:CE:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9652752ADADE81419E0621ACCD592D9B4892CE9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/5/34352e3137342e342e302f32322d3232203d3e20323638393134.roa
Signing time:             Thu 13 Aug 2026 17:33:27 +0000
ROA not before:           Thu 13 Aug 2026 17:28:27 +0000
ROA not after:            Thu 12 Aug 2027 17:33:27 +0000
asID:                     268914
IP address blocks:        45.174.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/5/9652752ADADE81419E0621ACCD592D9B4892CE9F.crl
                          rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/5/9652752ADADE81419E0621ACCD592D9B4892CE9F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9652752ADADE81419E0621ACCD592D9B4892CE9F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 15:26:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:0f:c3:be:a0:c7:5b:c8:f9:84:af:f0:10:d7:a4:5d:c4:7e:b4:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9652752ADADE81419E0621ACCD592D9B4892CE9F
        Validity
            Not Before: Aug 13 17:28:27 2026 GMT
            Not After : Aug 12 17:33:27 2027 GMT
        Subject: CN=EEA53A46DAF7BA2EA2F173CDD1CB20B5A7048ED4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:23:6d:e7:89:40:04:86:6f:0c:b8:4c:d2:1b:
                    2b:64:41:0a:e5:0a:cc:8e:a4:1a:7b:dc:08:0f:1d:
                    c1:bf:84:f0:11:d8:13:35:c1:4c:73:eb:8e:a0:41:
                    ea:99:ed:4f:ae:fb:f4:93:49:43:87:a8:b4:7b:15:
                    6a:b2:a1:4f:1c:8b:31:db:e3:f9:96:02:87:06:5c:
                    d1:d9:e6:a1:1f:c3:4e:4a:c7:51:02:d1:cf:16:5c:
                    b4:a4:ee:a4:94:77:16:b0:b8:d8:9d:1c:0f:03:ae:
                    75:c1:1a:40:66:fa:5e:84:83:d6:03:3b:24:2d:28:
                    cc:26:32:ea:49:2d:1b:2f:74:19:91:9c:06:50:24:
                    d9:22:45:9d:20:5a:7e:79:9d:e3:40:84:6d:a5:57:
                    4b:4c:38:26:68:b0:07:a5:05:c3:1e:f0:a6:d1:fd:
                    e4:d8:73:4c:9e:48:35:b6:e5:d0:8d:f2:f8:21:8c:
                    04:fc:2f:a1:ac:0a:d7:52:bb:62:1a:c2:a1:79:6f:
                    3c:b1:21:ea:48:bd:4c:7c:f0:ba:7f:a4:ee:12:32:
                    d3:a5:a2:61:0e:f9:72:a8:c4:c1:0f:50:4a:57:82:
                    47:45:5b:0b:79:1c:79:97:e7:92:be:28:36:ef:7f:
                    64:ca:1c:84:f0:6a:ef:4d:49:df:0f:f2:17:cf:6d:
                    6b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A5:3A:46:DA:F7:BA:2E:A2:F1:73:CD:D1:CB:20:B5:A7:04:8E:D4
            X509v3 Authority Key Identifier:
                keyid:96:52:75:2A:DA:DE:81:41:9E:06:21:AC:CD:59:2D:9B:48:92:CE:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/5/9652752ADADE81419E0621ACCD592D9B4892CE9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9652752ADADE81419E0621ACCD592D9B4892CE9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/5/34352e3137342e342e302f32322d3232203d3e20323638393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:b7:63:16:5f:30:9f:74:06:cd:7a:6b:8d:c6:ac:8b:e4:d9:
         ce:55:2d:71:fb:a2:a6:a1:fc:1f:d8:a2:a4:30:ec:c4:d4:bc:
         ca:96:0f:0e:66:bb:63:25:fb:54:fb:4b:c5:bb:54:49:1b:19:
         d2:35:1c:30:bf:9f:12:ad:a7:b6:c5:6a:6d:82:9c:6e:f3:c6:
         e2:34:3a:96:1c:92:d5:0b:0c:e6:a5:b1:24:8a:61:d5:07:3e:
         bd:74:56:c1:09:83:39:d3:fe:54:44:c7:de:07:11:f2:94:fe:
         17:6b:f3:39:a2:67:a3:9e:e4:10:af:1e:7f:d9:39:09:cc:29:
         da:8a:a9:aa:39:8d:1f:fe:c7:a0:df:2c:4a:16:72:b3:7b:f7:
         c0:28:e3:ee:36:dc:9e:ee:3b:ec:32:d9:5b:0d:6d:b5:9d:ac:
         4a:f1:72:d5:41:b5:a0:63:2d:6c:03:50:c0:ab:21:6c:65:fc:
         f0:d1:66:55:5f:42:55:39:6a:cf:52:d2:af:87:af:87:b7:ba:
         43:46:3e:3f:b8:82:53:40:34:c8:76:85:df:11:8c:b6:f2:93:
         d6:20:40:7a:ef:7b:2f:7c:59:e6:f3:6b:39:0e:75:97:d4:9c:
         6d:b9:c2:0a:f6:4d:63:e7:68:3a:0a:b5:68:88:98:a5:3e:e9:
         c1:fc:33:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 06:02:58 2026 by rpki-client