Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/0/34352e372e36382e302f32332d3233203d3e20323636363130.roa
File:                     34352e372e36382e302f32332d3233203d3e20323636363130.roa (raw, json)
Hash identifier:          VESLw74AYq+DXfbdv9nThPVwQwCD4GHDNE3VhZY8Mp4=
Subject key identifier:   74:EE:FA:8F:C4:DE:73:08:0F:A5:CD:8B:4E:54:AC:8A:34:EF:F4:C2
Certificate issuer:       /CN=818BCF4D39B7B651C3D94522FC5EEE511B4DA635
Certificate serial:       76EBAB870DB4F7C1704A35989D6A98BF9325FA5B
Authority key identifier: 81:8B:CF:4D:39:B7:B6:51:C3:D9:45:22:FC:5E:EE:51:1B:4D:A6:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818BCF4D39B7B651C3D94522FC5EEE511B4DA635.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/0/34352e372e36382e302f32332d3233203d3e20323636363130.roa
Signing time:             Mon 10 Aug 2026 12:45:21 +0000
ROA not before:           Mon 10 Aug 2026 12:40:21 +0000
ROA not after:            Mon 09 Aug 2027 12:45:21 +0000
asID:                     266610
IP address blocks:        45.7.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/0/818BCF4D39B7B651C3D94522FC5EEE511B4DA635.crl
                          rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/0/818BCF4D39B7B651C3D94522FC5EEE511B4DA635.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818BCF4D39B7B651C3D94522FC5EEE511B4DA635.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 01:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:eb:ab:87:0d:b4:f7:c1:70:4a:35:98:9d:6a:98:bf:93:25:fa:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818BCF4D39B7B651C3D94522FC5EEE511B4DA635
        Validity
            Not Before: Aug 10 12:40:21 2026 GMT
            Not After : Aug  9 12:45:21 2027 GMT
        Subject: CN=74EEFA8FC4DE73080FA5CD8B4E54AC8A34EFF4C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d7:e5:b1:4d:4d:95:24:88:86:9a:dc:eb:88:
                    93:65:31:c7:cf:43:4a:86:39:ea:5c:b1:63:18:21:
                    5b:cb:60:61:33:56:20:e9:63:18:e6:96:02:51:29:
                    40:f7:c4:0b:4f:f1:73:24:76:1d:de:0c:b8:e7:f3:
                    61:0c:03:e4:00:6f:df:46:94:42:70:27:7c:c9:f5:
                    99:89:16:a4:d9:32:48:29:a1:74:1a:4e:2a:b7:5f:
                    e6:16:b0:b8:d3:14:b4:96:fd:0b:ae:65:93:61:44:
                    d1:cd:47:95:eb:cc:34:a0:d1:4b:54:88:89:78:47:
                    81:f3:b9:71:43:cb:17:cd:ca:86:d4:dd:dc:13:92:
                    15:16:08:72:d2:06:d7:b2:b5:d6:54:ec:46:0a:72:
                    7c:ab:6b:3f:46:c1:59:c7:e3:72:31:6f:45:e5:cc:
                    e3:b4:35:35:05:b4:52:cf:1d:36:06:cf:c5:ee:50:
                    c6:84:8c:2a:9f:bb:1b:17:0d:21:81:ed:26:8a:8b:
                    f0:a8:7c:e6:c8:cf:98:61:82:17:4b:04:bc:71:ab:
                    95:c7:aa:4e:b2:c3:06:3a:a7:98:2d:68:19:a1:c5:
                    48:3a:90:df:5b:13:18:f4:c0:64:14:7a:db:16:83:
                    ae:25:1b:0b:92:20:2e:d0:eb:49:a6:a4:63:02:0a:
                    57:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:EE:FA:8F:C4:DE:73:08:0F:A5:CD:8B:4E:54:AC:8A:34:EF:F4:C2
            X509v3 Authority Key Identifier:
                keyid:81:8B:CF:4D:39:B7:B6:51:C3:D9:45:22:FC:5E:EE:51:1B:4D:A6:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/0/818BCF4D39B7B651C3D94522FC5EEE511B4DA635.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818BCF4D39B7B651C3D94522FC5EEE511B4DA635.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/0/34352e372e36382e302f32332d3233203d3e20323636363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:78:4c:5c:68:34:52:22:0c:2a:70:2f:a9:d5:90:a4:82:87:
         e6:3e:52:6f:21:20:bc:9f:dd:f7:c9:9a:dc:3c:de:fa:74:b3:
         fa:26:52:3e:11:83:8a:ce:62:35:33:63:dc:d9:a5:a5:4f:5b:
         10:46:64:1d:ae:4d:f6:e6:d0:e2:03:49:3c:96:cf:ce:fe:7e:
         0f:8c:69:ab:eb:49:8c:0f:2e:8d:e6:a5:cc:41:66:74:46:32:
         33:0a:64:6f:4c:14:01:2a:aa:44:0d:14:54:54:ae:69:db:e6:
         b5:9b:88:ac:d1:0a:fe:52:a4:cf:ec:9d:f3:5d:d5:0e:6e:40:
         8e:3b:9c:9e:96:87:6a:d7:24:2e:ec:bc:dc:75:b0:1d:b5:ba:
         df:47:80:b8:7c:31:32:02:78:57:a3:a2:d6:0f:c3:ed:71:a4:
         95:73:c2:92:2a:c7:11:70:6f:75:27:3f:d0:b5:ea:20:b7:b6:
         26:d4:2f:61:60:9b:03:d7:15:e9:8d:12:5f:d6:23:ac:43:de:
         02:12:92:67:26:b4:e0:86:c0:10:36:5b:58:1d:4d:ae:cb:e7:
         bd:2e:ac:55:31:55:53:d0:b4:52:90:9a:1a:08:89:26:c0:1f:
         ed:fd:59:cf:84:36:55:e1:fd:0f:1a:65:ef:e2:40:96:d7:e8:
         57:03:ce:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:11:38 2026 by rpki-client