Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/34352e3137322e3137312e302f32342d3332203d3e20323638373836.roa
File:                     34352e3137322e3137312e302f32342d3332203d3e20323638373836.roa (raw, json)
Hash identifier:          hLZ9XZORj4INn15lTeDxgvHe4/Ngs4Mzrjf0uQcpS74=
Subject key identifier:   50:38:D3:B6:7D:BE:32:70:6D:1F:60:A1:67:A5:01:81:A5:94:FC:3F
Certificate issuer:       /CN=819DF9BCABB60928D0FA4318848ACDF259DE262E
Certificate serial:       75C21EFB46056A29733A7AF14025E62EF4A6CC27
Authority key identifier: 81:9D:F9:BC:AB:B6:09:28:D0:FA:43:18:84:8A:CD:F2:59:DE:26:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/819DF9BCABB60928D0FA4318848ACDF259DE262E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/34352e3137322e3137312e302f32342d3332203d3e20323638373836.roa
Signing time:             Thu 08 Oct 2026 18:39:19 +0000
ROA not before:           Thu 08 Oct 2026 18:34:19 +0000
ROA not after:            Thu 07 Oct 2027 18:39:19 +0000
asID:                     268786
IP address blocks:        45.172.171.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/819DF9BCABB60928D0FA4318848ACDF259DE262E.crl
                          rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/819DF9BCABB60928D0FA4318848ACDF259DE262E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/819DF9BCABB60928D0FA4318848ACDF259DE262E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 10:19:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c2:1e:fb:46:05:6a:29:73:3a:7a:f1:40:25:e6:2e:f4:a6:cc:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=819DF9BCABB60928D0FA4318848ACDF259DE262E
        Validity
            Not Before: Oct  8 18:34:19 2026 GMT
            Not After : Oct  7 18:39:19 2027 GMT
        Subject: CN=5038D3B67DBE32706D1F60A167A50181A594FC3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2e:1b:45:43:9d:35:ad:3b:b3:bc:99:d3:07:
                    16:fe:c0:82:b0:f6:c4:be:2c:3a:d7:40:e3:39:43:
                    f4:b4:f1:77:47:8d:10:d5:6e:f5:34:e1:5b:de:7b:
                    58:e6:76:7f:fb:d8:93:ee:4e:65:8f:27:63:c9:de:
                    f7:7a:81:ef:66:a1:fa:f8:f7:8e:1f:57:79:79:cb:
                    6a:f3:0b:3b:28:bf:05:5d:69:82:5f:27:e0:39:61:
                    61:70:db:65:44:32:ef:01:8f:1c:98:05:e7:3f:84:
                    0f:89:bd:70:0a:ad:d9:34:0e:f5:0e:ee:fd:6b:7e:
                    3e:93:58:8b:fe:82:d3:bc:80:0d:c0:e0:a1:5a:c5:
                    03:95:e9:fe:85:27:4f:4e:c3:20:dc:d4:1d:6e:4a:
                    a9:03:d6:1a:1a:0a:21:22:4b:a9:b5:1e:d4:b4:c1:
                    0d:26:02:e7:dd:fc:05:0d:0e:64:6b:a0:d5:67:cd:
                    0a:be:c7:97:4d:16:74:42:91:0b:d1:31:ba:26:74:
                    08:bf:92:7e:3b:36:63:ba:6b:18:3d:8e:34:3b:13:
                    35:de:d3:aa:ae:dd:6d:5b:01:fd:06:35:90:e6:4d:
                    51:a4:3e:3b:d4:63:a9:bf:dc:15:d8:d9:60:12:c5:
                    a1:6f:a1:31:34:b8:0c:8d:f4:a4:2c:5d:41:3b:0e:
                    aa:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:38:D3:B6:7D:BE:32:70:6D:1F:60:A1:67:A5:01:81:A5:94:FC:3F
            X509v3 Authority Key Identifier:
                keyid:81:9D:F9:BC:AB:B6:09:28:D0:FA:43:18:84:8A:CD:F2:59:DE:26:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/819DF9BCABB60928D0FA4318848ACDF259DE262E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/819DF9BCABB60928D0FA4318848ACDF259DE262E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/34352e3137322e3137312e302f32342d3332203d3e20323638373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:19:90:cf:44:a9:8c:c4:9f:a3:7a:4e:fc:49:5a:c6:62:6e:
         c4:1e:60:eb:40:fe:c6:82:84:3a:13:ea:d9:39:11:57:d8:b2:
         d6:1f:41:da:cc:e3:bb:8c:1a:f9:8d:56:e0:a1:79:7d:af:45:
         78:24:3e:4f:bb:04:bf:a8:d6:81:3a:b1:1b:20:07:b3:19:ad:
         85:d5:2f:2e:70:5e:ba:4e:07:60:23:84:e1:f8:1f:ab:aa:07:
         10:cb:b8:1f:55:da:20:ca:59:a9:21:fd:ad:cb:9d:c1:15:66:
         4c:e4:95:d9:fa:32:68:06:9a:3d:e5:60:eb:8f:dd:66:07:f6:
         a7:80:99:c7:7b:d3:49:30:be:bf:1a:b7:9e:80:b2:0a:02:a4:
         81:81:ec:24:e8:70:ee:9c:f3:65:39:14:50:c3:c0:56:1e:61:
         cd:ba:33:1a:41:03:dd:2f:6c:6c:c7:ed:bc:87:5b:1b:ac:9b:
         4a:a4:86:df:a8:d0:25:7d:88:55:b0:5a:7b:f1:e9:cd:81:b5:
         2f:96:29:91:50:4d:41:1d:01:04:1d:39:9b:be:d8:b1:9f:98:
         11:f5:b4:1d:bd:4a:4a:fe:1a:65:c8:83:f7:f2:d6:0f:04:6f:
         d8:14:36:93:07:54:aa:e3:78:99:d8:12:1d:5e:99:29:95:25:
         25:96:da:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 23:02:09 2026 by rpki-client