Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/0/34352e3136392e3132302e302f32322d3332203d3e20323638313132.roa
File:                     34352e3136392e3132302e302f32322d3332203d3e20323638313132.roa (raw, json)
Hash identifier:          BNY8e+gPWQ1WZoEfEHviaU55JdNU5YZveig5CiE0sRM=
Subject key identifier:   2D:26:28:E9:28:F1:47:31:F5:C1:9E:26:45:42:DD:B9:96:6E:5E:79
Certificate issuer:       /CN=A43CC0A54B8BF054FA861BC64B030A447B1C0BCF
Certificate serial:       09D55328C24FAA46547A5F11D79492AB40F2E18C
Authority key identifier: A4:3C:C0:A5:4B:8B:F0:54:FA:86:1B:C6:4B:03:0A:44:7B:1C:0B:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A43CC0A54B8BF054FA861BC64B030A447B1C0BCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/0/34352e3136392e3132302e302f32322d3332203d3e20323638313132.roa
Signing time:             Mon 28 Sep 2026 11:47:41 +0000
ROA not before:           Mon 28 Sep 2026 11:42:41 +0000
ROA not after:            Mon 27 Sep 2027 11:47:41 +0000
asID:                     268112
IP address blocks:        45.169.120.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/0/A43CC0A54B8BF054FA861BC64B030A447B1C0BCF.crl
                          rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/0/A43CC0A54B8BF054FA861BC64B030A447B1C0BCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A43CC0A54B8BF054FA861BC64B030A447B1C0BCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 01:12:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:d5:53:28:c2:4f:aa:46:54:7a:5f:11:d7:94:92:ab:40:f2:e1:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A43CC0A54B8BF054FA861BC64B030A447B1C0BCF
        Validity
            Not Before: Sep 28 11:42:41 2026 GMT
            Not After : Sep 27 11:47:41 2027 GMT
        Subject: CN=2D2628E928F14731F5C19E264542DDB9966E5E79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c4:05:4c:4c:f5:27:50:f8:85:3f:a6:e6:f4:
                    35:db:e3:e7:ad:d5:17:d8:27:90:da:b4:1c:df:8d:
                    51:37:02:41:58:a9:3c:fe:78:36:8b:11:8e:7a:ec:
                    b5:c2:08:03:b0:cd:d5:01:61:b9:ef:f5:02:d0:05:
                    b4:46:38:52:b0:5c:45:bc:73:ad:a2:9d:40:82:58:
                    19:72:47:b9:3e:84:d8:1f:fe:35:1e:87:44:c4:df:
                    ab:04:38:dc:fb:ae:76:a2:ff:8f:c2:29:cf:c9:53:
                    55:be:a6:56:a0:96:11:37:68:a3:e6:54:a1:86:d2:
                    5a:5b:89:3d:3f:0d:d5:a2:12:8e:ff:27:38:bd:c5:
                    b5:fb:59:7b:8d:7e:0a:f3:c7:13:13:d7:0b:cd:98:
                    69:bf:cd:99:c5:77:74:f7:50:f4:ce:8f:95:54:6a:
                    a0:dd:9f:6f:e7:50:57:ff:9c:61:b5:db:76:0c:9b:
                    0c:3d:24:8c:2a:61:4f:77:a6:07:7a:d9:f0:ef:76:
                    08:aa:4c:26:1d:72:45:0e:87:7f:fe:1e:69:60:a9:
                    28:4d:1f:52:6a:f0:26:aa:42:a8:1f:68:04:77:5d:
                    f3:f0:68:16:67:68:f4:cb:3d:00:63:5d:79:af:78:
                    46:e4:35:eb:cd:2b:32:9a:c0:79:cf:75:ec:5a:9e:
                    5f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:26:28:E9:28:F1:47:31:F5:C1:9E:26:45:42:DD:B9:96:6E:5E:79
            X509v3 Authority Key Identifier:
                keyid:A4:3C:C0:A5:4B:8B:F0:54:FA:86:1B:C6:4B:03:0A:44:7B:1C:0B:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/0/A43CC0A54B8BF054FA861BC64B030A447B1C0BCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A43CC0A54B8BF054FA861BC64B030A447B1C0BCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/0/34352e3136392e3132302e302f32322d3332203d3e20323638313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:b0:28:56:05:01:1a:af:56:07:82:74:31:a8:06:96:3e:86:
         e5:18:8c:aa:5b:63:b0:b6:da:37:82:e4:8b:c5:46:c6:91:27:
         af:3f:fd:04:f3:bc:7f:bf:a7:d6:bb:64:2c:0a:5d:76:30:df:
         c5:38:95:92:f2:c7:80:fa:3a:90:e4:ed:45:a2:bd:25:0b:03:
         ea:3b:3b:4c:7b:ed:5c:07:90:6d:69:50:14:28:9e:87:41:b1:
         67:f8:9e:5f:e2:b8:c5:0c:4d:6f:e1:12:24:a0:27:32:8e:77:
         65:ce:82:bf:07:7e:0d:6f:4c:f9:58:6d:0b:76:ab:3b:3d:a7:
         59:66:34:77:50:02:9f:7c:ad:4d:c5:3e:95:1d:a0:6a:79:9d:
         f7:e6:37:10:70:e0:6a:73:1a:87:fa:6c:44:07:10:88:77:e1:
         ae:cc:58:76:2a:64:df:b1:2b:54:b6:45:ea:c9:58:9d:86:10:
         bb:3d:3c:89:4e:2b:39:9e:cb:d7:9b:83:fd:88:88:3b:36:b7:
         67:b9:01:4a:15:81:14:ae:bf:f4:c5:d2:90:db:3a:ae:ad:56:
         e2:6c:31:a0:d1:c7:09:45:1e:99:d3:21:a0:9e:ee:54:f8:cb:
         31:d0:1a:be:9b:71:97:93:81:1d:ce:61:07:02:8e:a8:b2:3f:
         1e:aa:5b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 04:23:25 2026 by rpki-client