Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/34352e3137322e3136392e302f32342d3332203d3e20323638373836.roa
File:                     34352e3137322e3136392e302f32342d3332203d3e20323638373836.roa (raw, json)
Hash identifier:          0s7Z2u7rMqM2rrGMP+aiyZrB1HoSO4K4x1rsiASFttY=
Subject key identifier:   A4:76:86:31:9B:50:0C:1B:8D:FC:05:F3:0E:8C:4F:F7:EA:1B:82:EC
Certificate issuer:       /CN=819DF9BCABB60928D0FA4318848ACDF259DE262E
Certificate serial:       02EFFDDE2EF24A2105E2E276A46EDF3B2BF867EA
Authority key identifier: 81:9D:F9:BC:AB:B6:09:28:D0:FA:43:18:84:8A:CD:F2:59:DE:26:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/819DF9BCABB60928D0FA4318848ACDF259DE262E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/34352e3137322e3136392e302f32342d3332203d3e20323638373836.roa
Signing time:             Thu 08 Oct 2026 18:39:04 +0000
ROA not before:           Thu 08 Oct 2026 18:34:04 +0000
ROA not after:            Thu 07 Oct 2027 18:39:04 +0000
asID:                     268786
IP address blocks:        45.172.169.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/819DF9BCABB60928D0FA4318848ACDF259DE262E.crl
                          rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/819DF9BCABB60928D0FA4318848ACDF259DE262E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/819DF9BCABB60928D0FA4318848ACDF259DE262E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 13:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ef:fd:de:2e:f2:4a:21:05:e2:e2:76:a4:6e:df:3b:2b:f8:67:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=819DF9BCABB60928D0FA4318848ACDF259DE262E
        Validity
            Not Before: Oct  8 18:34:04 2026 GMT
            Not After : Oct  7 18:39:04 2027 GMT
        Subject: CN=A47686319B500C1B8DFC05F30E8C4FF7EA1B82EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:81:25:60:f0:49:63:5c:15:db:46:78:da:3b:
                    0f:f0:22:eb:17:d6:82:64:a6:4e:69:71:40:b3:fa:
                    97:66:6a:aa:79:d3:8a:a9:8f:1d:9d:96:5f:27:39:
                    31:f7:c5:ad:65:75:bc:33:33:c8:5a:f4:f7:1e:9f:
                    5b:f1:fa:9a:c1:bd:a7:c6:b0:e2:63:8a:59:fc:7c:
                    95:71:77:7c:89:05:f6:62:b6:5e:d5:96:df:a2:c9:
                    9a:aa:71:e4:c0:f2:3e:52:ac:2e:5b:80:e5:02:a1:
                    e2:84:dd:cc:11:7e:18:c2:96:ef:1f:5e:60:e9:8d:
                    a6:9a:2e:5a:8e:c0:4d:91:79:e2:8a:48:af:c0:2f:
                    e9:52:8a:2d:a9:1f:c7:11:75:3a:38:96:66:8f:07:
                    66:69:47:82:e0:c7:7c:ba:37:66:bb:7d:9d:d2:a8:
                    09:d7:c1:30:06:85:91:e4:30:b9:d4:7d:6c:e9:4a:
                    5f:c3:57:79:88:32:3d:5e:59:a1:08:c8:1b:e5:f5:
                    fb:dd:b4:a6:37:78:f1:c6:a1:90:9c:38:95:0c:0e:
                    1e:b0:fc:e5:d9:b3:4f:4a:c2:5f:99:8e:ad:1b:75:
                    72:37:15:60:61:e5:6e:9b:61:8a:bc:5e:88:f9:68:
                    9c:89:34:e6:05:83:4b:4c:44:1b:f9:c1:02:06:5c:
                    3d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:76:86:31:9B:50:0C:1B:8D:FC:05:F3:0E:8C:4F:F7:EA:1B:82:EC
            X509v3 Authority Key Identifier:
                keyid:81:9D:F9:BC:AB:B6:09:28:D0:FA:43:18:84:8A:CD:F2:59:DE:26:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/819DF9BCABB60928D0FA4318848ACDF259DE262E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/819DF9BCABB60928D0FA4318848ACDF259DE262E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/34352e3137322e3136392e302f32342d3332203d3e20323638373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:2c:82:a0:7b:c4:ca:5a:d8:c8:56:c9:a2:41:df:69:0d:97:
         ee:d9:a0:0e:75:b7:61:f2:1d:13:a9:d5:ef:39:25:94:92:27:
         ea:37:78:a6:19:6e:55:75:04:db:34:54:87:3b:3a:be:90:95:
         34:e2:8c:c8:ce:7e:b2:e7:15:1c:68:07:46:0f:ae:54:0d:9c:
         ea:ae:01:bd:59:60:b4:3e:68:fc:69:34:ca:33:7a:2d:77:c2:
         16:d5:b8:8b:f0:6c:5d:16:aa:32:fc:ca:63:b6:22:2b:f6:a7:
         50:7e:e8:04:bb:ef:d9:61:b1:7d:79:3f:96:df:20:7c:f6:fe:
         0a:97:7f:d4:bd:f5:e6:b4:95:8a:73:36:70:1b:15:62:4c:d1:
         cb:0c:1b:d2:55:9c:0e:9d:60:88:8f:4c:96:44:fa:d4:bf:e7:
         00:6d:4b:a6:0c:64:a1:3a:5a:1f:ad:9a:6c:f8:ef:51:56:1e:
         53:72:ab:47:47:85:18:93:e4:47:e9:56:92:dc:be:d0:5b:37:
         88:f2:a3:08:2e:ab:8a:76:4e:3f:4a:4c:34:c8:6e:af:73:fa:
         b1:4b:03:cf:eb:3a:d0:11:da:00:65:62:0d:05:98:c9:db:0b:
         af:ed:ce:4b:d9:a4:97:9f:4c:f6:cc:8f:94:1f:87:75:14:6d:
         ae:10:6d:e2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAu/93i7ySiEF4uJ2pG7fOyv4Z+owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE5REY5QkNBQkI2MDkyOEQwRkE0MzE4ODQ4QUNERjI1
OURFMjYyRTAeFw0yNjEwMDgxODM0MDRaFw0yNzEwMDcxODM5MDRaMDMxMTAvBgNV
BAMTKEE0NzY4NjMxOUI1MDBDMUI4REZDMDVGMzBFOEM0RkY3RUExQjgyRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPgSVg8EljXBXbRnjaOw/wIusX
1oJkpk5pcUCz+pdmaqp504qpjx2dll8nOTH3xa1ldbwzM8ha9Pcen1vx+prBvafG
sOJjiln8fJVxd3yJBfZitl7Vlt+iyZqqceTA8j5SrC5bgOUCoeKE3cwRfhjClu8f
XmDpjaaaLlqOwE2ReeKKSK/AL+lSii2pH8cRdTo4lmaPB2ZpR4Lgx3y6N2a7fZ3S
qAnXwTAGhZHkMLnUfWzpSl/DV3mIMj1eWaEIyBvl9fvdtKY3ePHGoZCcOJUMDh6w
/OXZs09Kwl+Zjq0bdXI3FWBh5W6bYYq8Xoj5aJyJNOYFg0tMRBv5wQIGXD1bAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUpHaGMZtQDBuN/AXzDoxP9+obguwwHwYDVR0j
BBgwFoAUgZ35vKu2CSjQ+kMYhIrN8lneJi4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHgzcXh3N0NoUnJlcERFN1hFVEtTd1cxa1FSZFlmTXZVckp4VmZ4U1Z3
aDEvMC84MTlERjlCQ0FCQjYwOTI4RDBGQTQzMTg4NDhBQ0RGMjU5REUyNjJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgxOURGOUJDQUJCNjA5MjhE
MEZBNDMxODg0OEFDREYyNTlERTI2MkUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh4M3F4dzdDaFJyZXBERTdYRVRLU3dXMWtRUmRZZk12VXJKeFZmeFNWd2gxLzAv
MzQzNTJlMzEzNzMyMmUzMTM2MzkyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMjM2
MzgzNzM4MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtrKkwDQYJKoZIhvcNAQELBQADggEBAKcsgqB7
xMpa2MhWyaJB32kNl+7ZoA51t2HyHROp1e85JZSSJ+o3eKYZblV1BNs0VIc7Or6Q
lTTijMjOfrLnFRxoB0YPrlQNnOquAb1ZYLQ+aPxpNMozei13whbVuIvwbF0WqjL8
ymO2Iiv2p1B+6AS779lhsX15P5bfIHz2/gqXf9S99ea0lYpzNnAbFWJM0csMG9JV
nA6dYIiPTJZE+tS/5wBtS6YMZKE6Wh+tmmz471FWHlNyq0dHhRiT5EfpVpLcvtBb
N4jyowguq4p2Tj9KTDTIbq9z+rFLA8/rOtAR2gBlYg0FmMnbC6/tzkvZpJefTPbM
j5Qfh3UUba4QbeI=
-----END CERTIFICATE-----
Generated at Wed Nov 4 04:07:29 2026 by rpki-client