Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/34352e3137322e3234302e302f32322d3234203d3e20323638373832.roa
File:                     34352e3137322e3234302e302f32322d3234203d3e20323638373832.roa (raw, json)
Hash identifier:          ns7G6VK1/plGO1mYAntPKP/s7ZQowNY4gJ+cZyuureA=
Subject key identifier:   ED:53:3F:95:B4:FD:AB:09:6E:CB:51:4C:4B:05:FC:CB:0A:1B:D6:29
Certificate issuer:       /CN=D1FFDF44055E16082D529730642377D751467152
Certificate serial:       41BA096921F870B375B81FDC7E119BEFE3AAD69D
Authority key identifier: D1:FF:DF:44:05:5E:16:08:2D:52:97:30:64:23:77:D7:51:46:71:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FFDF44055E16082D529730642377D751467152.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/34352e3137322e3234302e302f32322d3234203d3e20323638373832.roa
Signing time:             Sat 24 Oct 2026 17:25:16 +0000
ROA not before:           Sat 24 Oct 2026 17:20:16 +0000
ROA not after:            Sat 23 Oct 2027 17:25:16 +0000
asID:                     268782
IP address blocks:        45.172.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.crl
                          rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FFDF44055E16082D529730642377D751467152.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 11:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:ba:09:69:21:f8:70:b3:75:b8:1f:dc:7e:11:9b:ef:e3:aa:d6:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1FFDF44055E16082D529730642377D751467152
        Validity
            Not Before: Oct 24 17:20:16 2026 GMT
            Not After : Oct 23 17:25:16 2027 GMT
        Subject: CN=ED533F95B4FDAB096ECB514C4B05FCCB0A1BD629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:99:5a:3d:5f:17:4d:2a:3e:88:d5:27:9a:1b:
                    07:a8:cc:4a:56:c4:ee:57:b5:04:89:5b:d8:43:2c:
                    67:36:f0:f3:55:ec:24:b1:2a:e2:46:59:90:d8:4d:
                    98:34:5a:9b:f9:31:10:ad:ab:65:55:93:d7:5a:92:
                    34:4e:81:b4:6b:b2:2a:d8:f2:05:97:97:e2:08:35:
                    85:5d:88:53:1f:4e:b3:8a:ef:4d:31:18:b9:d2:30:
                    a6:ef:03:1a:12:41:de:5c:8a:d6:17:c5:ea:55:49:
                    67:13:79:40:2c:2a:f6:cf:8e:30:e4:2a:ad:b6:40:
                    c1:9f:e5:01:69:8d:34:42:f7:2b:ae:bf:89:21:c3:
                    9d:4a:ef:02:bd:ad:ca:4f:5a:14:f1:90:b6:e3:b4:
                    a2:dc:62:cc:a9:ab:fa:67:b4:a9:d0:fd:79:87:75:
                    51:ee:54:1a:0d:9f:47:76:5b:25:23:30:39:6e:02:
                    2b:78:56:a4:8f:5a:aa:ef:d5:7d:19:65:5f:47:ad:
                    be:87:55:a8:76:12:63:14:12:97:35:4b:b3:e3:49:
                    97:5e:69:42:07:8e:79:96:95:a8:f0:1c:82:53:7a:
                    57:fc:42:f4:d8:fb:d8:54:d6:68:96:14:cd:0a:aa:
                    73:6b:3c:69:9e:59:29:1d:dd:d6:70:4e:2d:47:94:
                    26:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:53:3F:95:B4:FD:AB:09:6E:CB:51:4C:4B:05:FC:CB:0A:1B:D6:29
            X509v3 Authority Key Identifier:
                keyid:D1:FF:DF:44:05:5E:16:08:2D:52:97:30:64:23:77:D7:51:46:71:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FFDF44055E16082D529730642377D751467152.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/34352e3137322e3234302e302f32322d3234203d3e20323638373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:7e:55:5d:92:81:a8:49:cc:44:69:23:70:88:a1:8f:c2:72:
         d1:04:30:11:ce:d8:24:90:c1:0d:86:c4:29:9e:3b:cf:3f:17:
         a6:8c:67:7f:15:3b:b0:c0:e3:29:5a:4d:e9:d4:a3:a9:5f:55:
         63:d6:4a:e1:5e:4d:ec:ca:80:da:df:7f:ec:d4:de:0f:2b:74:
         3f:6a:02:37:f3:5d:a6:2c:80:a4:17:6b:8f:ff:64:6e:cf:cb:
         44:06:1a:c5:08:b4:3e:0b:36:bf:66:3a:3f:dc:5e:26:bb:38:
         7e:63:03:33:cd:24:da:c1:a0:dc:8f:a4:4a:2c:16:64:f4:24:
         bf:e5:90:35:cb:aa:57:0d:68:44:26:36:e0:70:81:d9:0e:d2:
         c5:b9:e5:ef:d2:62:45:72:59:c7:28:5d:9b:2c:43:4e:18:0d:
         3f:fe:b4:22:27:c3:51:ca:0a:3f:ec:db:01:35:82:7e:47:23:
         34:13:d8:a8:7c:cf:d4:ae:51:68:dc:4d:ab:ee:8e:c2:1e:70:
         f0:e5:f9:1e:55:8c:88:9c:6a:9d:c0:f1:1f:4c:3e:de:81:03:
         22:61:3f:4d:b9:b8:96:83:be:50:42:ca:b5:c6:33:68:df:ae:
         c9:9e:3b:b7:c5:71:29:e8:c1:8f:ec:2f:47:f2:0f:d8:7c:21:
         f0:19:9c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 12:56:34 2026 by rpki-client