Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/0/34352e372e36392e302f32342d3234203d3e20323636363130.roa
File:                     34352e372e36392e302f32342d3234203d3e20323636363130.roa (raw, json)
Hash identifier:          xzMHC2GfWcp/5G/gl/BM/r8mZDzIpf18uysKbyzGSuc=
Subject key identifier:   04:09:42:79:55:6A:E5:C6:6E:9E:BC:69:32:51:2E:40:DE:C9:FA:79
Certificate issuer:       /CN=818BCF4D39B7B651C3D94522FC5EEE511B4DA635
Certificate serial:       05F2AAC2A9B938CA560AD1E878A5C494A4EF07B1
Authority key identifier: 81:8B:CF:4D:39:B7:B6:51:C3:D9:45:22:FC:5E:EE:51:1B:4D:A6:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818BCF4D39B7B651C3D94522FC5EEE511B4DA635.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/0/34352e372e36392e302f32342d3234203d3e20323636363130.roa
Signing time:             Mon 10 Aug 2026 12:45:25 +0000
ROA not before:           Mon 10 Aug 2026 12:40:25 +0000
ROA not after:            Mon 09 Aug 2027 12:45:25 +0000
asID:                     266610
IP address blocks:        45.7.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/0/818BCF4D39B7B651C3D94522FC5EEE511B4DA635.crl
                          rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/0/818BCF4D39B7B651C3D94522FC5EEE511B4DA635.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818BCF4D39B7B651C3D94522FC5EEE511B4DA635.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 20:54:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f2:aa:c2:a9:b9:38:ca:56:0a:d1:e8:78:a5:c4:94:a4:ef:07:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818BCF4D39B7B651C3D94522FC5EEE511B4DA635
        Validity
            Not Before: Aug 10 12:40:25 2026 GMT
            Not After : Aug  9 12:45:25 2027 GMT
        Subject: CN=04094279556AE5C66E9EBC6932512E40DEC9FA79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:64:6a:57:5d:8e:0b:bc:cf:8d:d8:97:5c:4a:
                    0a:a0:67:46:3c:67:56:e3:e5:3b:ce:6d:5e:b3:da:
                    44:6f:7f:c5:95:a5:28:51:fa:a5:54:4f:a0:ed:7c:
                    ad:ed:7d:e5:61:cd:36:f3:f2:a5:f1:4e:e2:b9:de:
                    fa:77:2d:53:1d:fe:af:25:91:17:25:b0:31:08:4c:
                    d6:9c:a1:f7:11:73:51:c8:7e:53:ae:64:c3:d5:2b:
                    a3:9e:8b:d9:ec:29:b5:f8:6b:22:41:bf:e8:c6:21:
                    30:dc:d5:ae:cb:1f:d8:00:e3:f4:47:9b:c2:bf:ff:
                    b4:cd:08:6b:05:d3:4e:78:4b:4f:74:c4:85:df:bc:
                    be:42:d8:9a:ee:44:f7:c3:3f:06:23:93:1d:81:78:
                    3c:74:68:8d:08:c4:be:88:a2:19:f6:d8:46:4a:20:
                    96:5e:44:6a:4f:93:b2:bf:a2:7b:c8:13:d1:c6:46:
                    23:4f:2f:b1:39:91:9f:69:87:9a:a4:b6:1e:a3:22:
                    7e:a1:9f:4d:ff:31:7d:ec:54:e1:12:98:90:de:e0:
                    9c:69:4b:c0:a7:06:0a:56:20:e4:c5:03:81:1e:17:
                    39:5d:53:81:b9:4c:0c:cd:6d:af:9a:df:37:7e:12:
                    9f:51:fb:2f:73:b8:3b:31:71:fd:03:14:f9:8d:e4:
                    d6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:09:42:79:55:6A:E5:C6:6E:9E:BC:69:32:51:2E:40:DE:C9:FA:79
            X509v3 Authority Key Identifier:
                keyid:81:8B:CF:4D:39:B7:B6:51:C3:D9:45:22:FC:5E:EE:51:1B:4D:A6:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/0/818BCF4D39B7B651C3D94522FC5EEE511B4DA635.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818BCF4D39B7B651C3D94522FC5EEE511B4DA635.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/0/34352e372e36392e302f32342d3234203d3e20323636363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:6a:6e:b7:66:70:1d:0c:72:a3:9a:1d:fd:06:db:78:6b:d8:
         4b:02:58:f5:8b:ee:a7:6b:9a:90:12:29:9a:6e:00:bf:c5:51:
         e6:14:bd:28:c9:fd:74:c7:c6:40:3c:98:22:11:63:27:89:d9:
         4d:21:12:a0:a7:e5:34:24:58:4c:a4:e7:3e:32:aa:ad:34:8f:
         4b:b5:38:6f:c0:38:90:0e:1f:8c:99:f8:21:e5:d2:8c:44:c5:
         62:a9:ca:c2:ba:55:6f:66:3c:a5:af:96:9d:19:2d:d2:b9:11:
         b6:6f:ef:37:49:5d:3c:9e:02:f5:c9:dd:6e:89:3c:41:e3:59:
         67:cd:11:fd:a1:aa:53:f2:03:83:6a:64:6a:00:e6:5a:87:10:
         c8:fd:ad:b9:22:ac:f9:ea:f4:b9:69:ea:3d:81:95:b8:52:93:
         90:e4:79:17:1d:63:96:8f:a0:81:21:56:2c:97:f4:b9:54:b5:
         0c:21:fe:33:9b:de:42:3d:d8:9a:2b:22:15:81:2e:94:ea:ae:
         f7:cc:f6:33:9b:ee:c0:22:e4:6f:0d:b5:1d:4a:d2:1a:46:44:
         35:37:0f:5f:fc:40:b8:0d:99:63:03:0b:8c:16:e6:4f:02:4f:
         06:76:de:cf:4d:e4:6e:23:0b:16:31:1f:d8:8a:2d:78:49:10:
         3d:ea:20:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 03:58:47 2026 by rpki-client