Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/34352e3137302e37332e302f32342d3234203d3e20323638313533.roa
File:                     34352e3137302e37332e302f32342d3234203d3e20323638313533.roa (raw, json)
Hash identifier:          6b5zf0Q3VtIeSmaGM4hINCy11beDRCOlik5QVMWx6bc=
Subject key identifier:   1D:4C:AC:F9:55:E2:82:35:EF:26:D7:F6:31:B9:D7:AD:D4:80:0D:2E
Certificate issuer:       /CN=C9252AB23441CBFEC245C4915A2B1DEBF93EAD55
Certificate serial:       778CAE580C2A657A5CA53E438601ED4F55A8A686
Authority key identifier: C9:25:2A:B2:34:41:CB:FE:C2:45:C4:91:5A:2B:1D:EB:F9:3E:AD:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9252AB23441CBFEC245C4915A2B1DEBF93EAD55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/34352e3137302e37332e302f32342d3234203d3e20323638313533.roa
Signing time:             Thu 29 Oct 2026 13:17:10 +0000
ROA not before:           Thu 29 Oct 2026 13:12:10 +0000
ROA not after:            Thu 28 Oct 2027 13:17:10 +0000
asID:                     268153
IP address blocks:        45.170.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/C9252AB23441CBFEC245C4915A2B1DEBF93EAD55.crl
                          rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/C9252AB23441CBFEC245C4915A2B1DEBF93EAD55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9252AB23441CBFEC245C4915A2B1DEBF93EAD55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 16:25:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:8c:ae:58:0c:2a:65:7a:5c:a5:3e:43:86:01:ed:4f:55:a8:a6:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9252AB23441CBFEC245C4915A2B1DEBF93EAD55
        Validity
            Not Before: Oct 29 13:12:10 2026 GMT
            Not After : Oct 28 13:17:10 2027 GMT
        Subject: CN=1D4CACF955E28235EF26D7F631B9D7ADD4800D2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ab:b7:07:83:a4:35:db:6e:28:24:c0:49:96:
                    ec:9e:eb:38:95:1b:15:6d:98:ab:0c:3f:13:82:ce:
                    82:5c:7f:f4:bf:8f:a4:02:c4:38:fe:67:6f:b0:6c:
                    a4:71:f7:e8:ba:ce:fe:bb:57:99:26:b5:d5:04:7b:
                    31:f1:b9:25:62:2a:e3:c2:d7:e1:aa:4e:3a:bd:79:
                    da:d5:f6:1f:6b:91:7a:ea:03:d9:8e:2a:4d:d7:36:
                    dc:21:fe:81:07:3d:74:a2:32:1d:45:dc:85:4d:cd:
                    a2:24:4b:51:53:f7:08:c5:56:ac:18:4d:4c:da:b3:
                    a4:b6:3b:f0:bf:ba:e0:f7:65:e5:dd:ad:8e:89:58:
                    04:97:fd:b8:66:f1:fc:c5:33:2f:6b:dd:06:84:b0:
                    bd:e9:c9:6c:49:c6:b6:1c:2e:17:16:64:06:72:ce:
                    84:e7:d5:e6:0f:6d:7f:cf:42:26:e7:1c:c0:ca:97:
                    5f:b3:65:40:23:98:6b:84:14:80:c1:fe:17:17:2f:
                    11:dd:2e:bc:69:74:67:10:76:cc:06:b2:1a:0a:93:
                    19:9f:cf:be:76:be:16:ee:ee:e1:9e:94:1d:ae:7e:
                    48:5b:63:e8:2f:97:f7:00:92:34:fa:04:42:e1:7d:
                    81:58:0b:7f:46:24:3f:d8:f5:e9:d1:3b:a2:5a:3f:
                    df:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:4C:AC:F9:55:E2:82:35:EF:26:D7:F6:31:B9:D7:AD:D4:80:0D:2E
            X509v3 Authority Key Identifier:
                keyid:C9:25:2A:B2:34:41:CB:FE:C2:45:C4:91:5A:2B:1D:EB:F9:3E:AD:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/C9252AB23441CBFEC245C4915A2B1DEBF93EAD55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9252AB23441CBFEC245C4915A2B1DEBF93EAD55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/34352e3137302e37332e302f32342d3234203d3e20323638313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:69:3f:fa:48:a7:79:b8:f9:c8:6a:e7:40:4d:82:b6:1a:c9:
         ad:9d:3b:ee:d3:8b:c2:9f:35:ed:2f:b2:95:06:6f:5c:03:53:
         99:93:8c:21:e0:5e:14:53:97:15:c3:9c:f8:c3:75:5f:68:c9:
         f4:94:63:c2:25:dc:62:4b:d1:36:5a:73:af:f0:cd:50:dd:17:
         e4:08:a2:f3:9e:0a:bb:64:7c:3b:b1:a6:21:42:64:19:71:59:
         72:60:37:5d:05:a7:21:07:91:5c:71:f8:30:91:30:4e:0a:9f:
         ff:88:2b:20:24:13:13:23:c2:a7:9a:74:f9:6f:d2:72:07:84:
         8e:c9:f9:03:15:cb:ca:a0:23:fb:48:c4:ac:95:c2:42:b7:0d:
         57:ef:fd:cc:25:53:aa:49:48:1c:91:32:ee:21:9d:84:01:50:
         05:94:2f:ca:42:a5:91:0f:06:d9:1f:9d:8c:6e:2c:91:e5:b2:
         a9:74:21:77:e5:11:9d:9b:05:ee:c8:9c:82:73:66:35:f0:c9:
         40:68:c2:f5:01:e0:41:e3:b9:5e:94:97:83:00:12:d1:59:ae:
         fc:58:ae:05:f2:f0:ff:ad:88:c1:a1:de:03:34:b6:19:47:8b:
         51:ca:51:52:91:02:e5:81:a2:f8:60:eb:74:a5:dd:77:9e:d8:
         87:68:86:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 23:35:54 2026 by rpki-client