Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/34352e3138312e37362e302f32342d3332203d3e20323731343239.roa
File:                     34352e3138312e37362e302f32342d3332203d3e20323731343239.roa (raw, json)
Hash identifier:          yPQIcKVkP4RJiIIsftHkaAgcWnUr32zjuTlLzf5Bt1k=
Subject key identifier:   76:09:72:E4:1A:17:D7:C2:14:7D:2F:67:25:CA:BC:EB:6F:DD:3C:45
Certificate issuer:       /CN=FE8B6A2F97EFEE895225A82F015A599368FECF7C
Certificate serial:       2641CA0355083CECF9BAD456C2C083883C8AF1FA
Authority key identifier: FE:8B:6A:2F:97:EF:EE:89:52:25:A8:2F:01:5A:59:93:68:FE:CF:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE8B6A2F97EFEE895225A82F015A599368FECF7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/34352e3138312e37362e302f32342d3332203d3e20323731343239.roa
Signing time:             Fri 02 Oct 2026 12:50:12 +0000
ROA not before:           Fri 02 Oct 2026 12:45:12 +0000
ROA not after:            Fri 01 Oct 2027 12:50:12 +0000
asID:                     271429
IP address blocks:        45.181.76.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/FE8B6A2F97EFEE895225A82F015A599368FECF7C.crl
                          rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/FE8B6A2F97EFEE895225A82F015A599368FECF7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE8B6A2F97EFEE895225A82F015A599368FECF7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 15:12:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:41:ca:03:55:08:3c:ec:f9:ba:d4:56:c2:c0:83:88:3c:8a:f1:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE8B6A2F97EFEE895225A82F015A599368FECF7C
        Validity
            Not Before: Oct  2 12:45:12 2026 GMT
            Not After : Oct  1 12:50:12 2027 GMT
        Subject: CN=760972E41A17D7C2147D2F6725CABCEB6FDD3C45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4b:f4:48:ef:e3:3f:28:86:ab:4f:55:00:d9:
                    f6:e0:0b:02:76:cf:58:07:30:99:bb:a1:cc:c6:6b:
                    c7:8e:60:cd:87:f6:b5:35:06:dc:9d:eb:37:28:36:
                    ba:50:8d:a2:0d:42:b2:50:dd:4e:e0:9e:50:a7:c4:
                    80:b0:ae:33:8d:b3:08:5b:69:02:ce:85:fb:db:9a:
                    b9:27:7c:32:eb:7c:ab:83:b0:01:21:66:de:3b:dc:
                    bd:a2:b3:c6:3e:0c:ec:66:9b:85:f3:49:4f:11:4c:
                    19:8c:dc:96:5f:06:51:79:f3:96:59:55:33:e2:e6:
                    c1:16:e7:5c:4a:7d:ea:ab:c5:97:4b:2e:cf:b3:84:
                    26:89:83:5d:4e:2d:2e:27:01:d1:5f:b2:c8:38:a0:
                    3d:53:2c:e4:61:26:1c:1d:7e:d8:af:1d:fa:4b:fe:
                    db:5e:a0:aa:eb:76:a1:ea:36:31:ae:80:32:b7:f6:
                    6c:94:73:d9:23:42:57:82:c7:a0:70:35:df:25:26:
                    d6:10:2e:42:8e:bf:21:3b:7e:86:05:af:c0:b9:8a:
                    ff:bb:fe:5a:29:6f:81:c7:ff:a2:be:06:92:85:85:
                    d0:4c:0c:af:a2:71:63:43:0f:22:b2:ca:05:4c:11:
                    d7:0b:ef:88:1e:64:c6:e7:0f:4a:a9:c6:cf:8b:23:
                    37:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:09:72:E4:1A:17:D7:C2:14:7D:2F:67:25:CA:BC:EB:6F:DD:3C:45
            X509v3 Authority Key Identifier:
                keyid:FE:8B:6A:2F:97:EF:EE:89:52:25:A8:2F:01:5A:59:93:68:FE:CF:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/FE8B6A2F97EFEE895225A82F015A599368FECF7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE8B6A2F97EFEE895225A82F015A599368FECF7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/34352e3138312e37362e302f32342d3332203d3e20323731343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:bf:38:c4:76:09:64:2b:f6:c8:9e:3c:24:dd:6d:58:f6:11:
         92:b1:1d:74:96:9e:be:e7:58:e2:80:bc:72:a8:53:c6:a3:ea:
         ed:17:ff:09:6e:b5:e3:72:31:b0:43:38:c3:83:d9:d9:eb:8d:
         ef:3c:a6:8c:21:d5:27:66:1b:25:6a:0d:79:f0:f8:ab:46:ac:
         bb:3b:bf:9a:90:71:16:34:96:c2:24:50:72:19:e2:a9:20:37:
         91:de:00:6c:64:7d:b6:52:d5:e2:bc:af:e0:b1:ec:3c:4c:c0:
         d5:39:e6:7c:7e:58:f7:39:41:39:a7:b5:90:e7:fd:25:df:e6:
         41:44:ed:73:6a:a1:67:f6:3b:28:44:d1:f0:ca:26:50:16:40:
         39:68:e1:f8:8e:79:b5:5c:7f:7d:04:0a:d6:1c:24:e9:73:b7:
         08:82:5a:de:02:c6:99:55:9e:58:06:c7:bd:d2:9e:9a:fa:97:
         87:57:69:89:22:05:b5:63:c4:23:a8:80:3d:79:4a:1b:55:f3:
         e0:cd:a8:2d:1d:4b:45:62:11:e7:a5:0e:e3:b5:cb:66:a1:c7:
         25:96:0a:f7:4f:46:0b:31:f4:a8:a2:ce:0d:37:b6:eb:2d:ae:
         6d:92:96:89:35:23:75:55:bf:40:4e:6e:df:9d:dc:2c:dd:ae:
         d7:8c:d8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:13:34 2026 by rpki-client