Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/A9GJXjkQbK8brLcXGXxfAocQAeyfzsYYAFSN4bYohNUB/1/34352e3137382e3138382e302f32332d3233203d3e20323639303931.roa
File:                     34352e3137382e3138382e302f32332d3233203d3e20323639303931.roa (raw, json)
Hash identifier:          TkAYXv1c8eUiRtuSJJAUt3xI/bG5+Bp4XZb1cGiy+Ts=
Subject key identifier:   42:C9:FE:4C:A9:A1:0E:A3:30:F8:B6:53:40:C5:EA:34:8C:6E:2D:04
Certificate issuer:       /CN=D2D1DF48E03DEC677ADBC33C8CBEF830F63C4927
Certificate serial:       2F92CEA5A1EB640EAF48AC3C6EB22F9B6AD7A368
Authority key identifier: D2:D1:DF:48:E0:3D:EC:67:7A:DB:C3:3C:8C:BE:F8:30:F6:3C:49:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2D1DF48E03DEC677ADBC33C8CBEF830F63C4927.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9GJXjkQbK8brLcXGXxfAocQAeyfzsYYAFSN4bYohNUB/1/34352e3137382e3138382e302f32332d3233203d3e20323639303931.roa
Signing time:             Sun 02 Aug 2026 11:49:44 +0000
ROA not before:           Sun 02 Aug 2026 11:44:44 +0000
ROA not after:            Sun 01 Aug 2027 11:49:44 +0000
asID:                     269091
IP address blocks:        45.178.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9GJXjkQbK8brLcXGXxfAocQAeyfzsYYAFSN4bYohNUB/1/D2D1DF48E03DEC677ADBC33C8CBEF830F63C4927.crl
                          rsync://rpki-repo.registro.br/repo/A9GJXjkQbK8brLcXGXxfAocQAeyfzsYYAFSN4bYohNUB/1/D2D1DF48E03DEC677ADBC33C8CBEF830F63C4927.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2D1DF48E03DEC677ADBC33C8CBEF830F63C4927.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 09:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:92:ce:a5:a1:eb:64:0e:af:48:ac:3c:6e:b2:2f:9b:6a:d7:a3:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2D1DF48E03DEC677ADBC33C8CBEF830F63C4927
        Validity
            Not Before: Aug  2 11:44:44 2026 GMT
            Not After : Aug  1 11:49:44 2027 GMT
        Subject: CN=42C9FE4CA9A10EA330F8B65340C5EA348C6E2D04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:25:98:2a:cb:d8:ad:56:e6:89:86:0c:0a:4f:
                    10:e3:af:85:b1:12:7c:49:75:d7:d2:0f:15:b2:0a:
                    99:f9:08:b3:bd:af:54:02:c3:b8:67:c3:7b:9a:66:
                    2f:38:8a:96:6e:c9:f9:03:b5:85:15:10:44:9b:94:
                    b1:97:38:a2:d3:34:98:6f:bc:9c:89:01:fb:69:3f:
                    92:f0:6d:98:0e:ea:1f:9e:ea:15:31:97:47:8e:47:
                    a5:60:8a:e5:70:5d:18:c2:9d:b7:65:e7:0a:5b:1c:
                    d0:63:84:02:d1:0c:05:81:0c:ec:18:47:c4:8a:56:
                    99:0e:bc:67:43:fb:10:30:7f:df:93:46:08:da:6e:
                    ae:3f:a2:f1:a6:52:1e:5d:6e:d0:7c:ba:f5:47:98:
                    97:86:a8:a6:2b:92:db:2d:ac:e7:a0:14:e8:58:6f:
                    6c:c9:d6:6b:96:7c:d0:37:2a:3c:e7:59:4f:8b:a1:
                    5b:b8:8e:cd:e9:61:26:66:98:fd:e8:e8:e9:b4:b4:
                    42:e6:0b:d0:89:c2:aa:47:e2:81:11:29:48:c8:37:
                    1f:30:45:57:cd:90:a1:20:a7:21:04:c4:e2:51:aa:
                    e2:7b:67:8e:82:eb:a6:46:70:77:99:97:6e:65:1d:
                    6a:56:35:43:45:29:01:bf:88:86:05:1d:1b:41:0b:
                    6f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C9:FE:4C:A9:A1:0E:A3:30:F8:B6:53:40:C5:EA:34:8C:6E:2D:04
            X509v3 Authority Key Identifier:
                keyid:D2:D1:DF:48:E0:3D:EC:67:7A:DB:C3:3C:8C:BE:F8:30:F6:3C:49:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9GJXjkQbK8brLcXGXxfAocQAeyfzsYYAFSN4bYohNUB/1/D2D1DF48E03DEC677ADBC33C8CBEF830F63C4927.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2D1DF48E03DEC677ADBC33C8CBEF830F63C4927.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9GJXjkQbK8brLcXGXxfAocQAeyfzsYYAFSN4bYohNUB/1/34352e3137382e3138382e302f32332d3233203d3e20323639303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:46:4d:c9:e7:d9:a5:b9:8d:93:54:6c:ce:c8:9d:93:4a:a9:
         80:e9:a7:92:43:3c:66:ea:4f:b9:43:c5:88:f5:9e:5c:ff:44:
         90:b2:5d:79:89:9f:ab:c7:16:7e:12:e4:5b:a8:ef:88:17:20:
         40:e1:53:7a:7a:15:a2:ad:ae:25:c5:44:65:41:5f:9c:e6:22:
         35:28:f2:21:c3:7c:e9:1e:2d:89:21:f5:6b:b9:3b:e6:6a:40:
         46:0a:4e:a3:ed:5d:d8:34:10:6a:d2:fd:96:4f:4c:dd:b0:61:
         02:16:30:57:fc:fa:c7:1d:f3:23:87:a7:4f:45:06:24:53:eb:
         c9:da:ae:ac:bb:3a:4f:7b:d9:da:65:fb:fd:14:fc:f6:42:62:
         ab:be:3d:94:0e:0b:5b:f8:a8:ab:6d:e4:ff:69:86:6a:78:5c:
         13:0f:17:b6:82:58:26:9c:1d:7f:12:a4:98:85:25:2f:6e:96:
         1a:d6:14:b3:70:87:2c:96:ee:58:2f:1c:b7:f4:4f:c8:41:66:
         35:ff:df:40:19:19:41:5d:45:c6:1a:85:d6:0a:0b:61:48:6a:
         24:b0:01:80:0b:ea:36:bd:f2:cf:c6:fc:46:b1:a1:ef:27:19:
         a3:86:ae:40:c9:5f:17:cc:72:b3:33:0f:6b:e4:e9:da:9b:ca:
         ac:26:9b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----