Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BmLnoMe1bzjjKzzeTSUxDoQ6LyewYFffe33ryUXXv3SL/0/34352e3136342e39302e302f32342d3234203d3e20323638363130.roa
File:                     34352e3136342e39302e302f32342d3234203d3e20323638363130.roa (raw, json)
Hash identifier:          8TEErLsmqQDIwfpgwhKKGMQwtZFnLpZipT4yFHJsjmo=
Subject key identifier:   9F:AA:73:5C:1C:46:65:29:AF:6B:6A:39:71:9B:76:AA:60:9F:01:B6
Certificate issuer:       /CN=0D1A4974C46426C2F298D2049A60840923ED886E
Certificate serial:       0A6F0558F3B607E932C612FF53C0E9695594A897
Authority key identifier: 0D:1A:49:74:C4:64:26:C2:F2:98:D2:04:9A:60:84:09:23:ED:88:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D1A4974C46426C2F298D2049A60840923ED886E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BmLnoMe1bzjjKzzeTSUxDoQ6LyewYFffe33ryUXXv3SL/0/34352e3136342e39302e302f32342d3234203d3e20323638363130.roa
Signing time:             Tue 11 Aug 2026 12:45:51 +0000
ROA not before:           Tue 11 Aug 2026 12:40:51 +0000
ROA not after:            Tue 10 Aug 2027 12:45:51 +0000
asID:                     268610
IP address blocks:        45.164.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BmLnoMe1bzjjKzzeTSUxDoQ6LyewYFffe33ryUXXv3SL/0/0D1A4974C46426C2F298D2049A60840923ED886E.crl
                          rsync://rpki-repo.registro.br/repo/BmLnoMe1bzjjKzzeTSUxDoQ6LyewYFffe33ryUXXv3SL/0/0D1A4974C46426C2F298D2049A60840923ED886E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D1A4974C46426C2F298D2049A60840923ED886E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Aug 2026 03:08:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:6f:05:58:f3:b6:07:e9:32:c6:12:ff:53:c0:e9:69:55:94:a8:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1A4974C46426C2F298D2049A60840923ED886E
        Validity
            Not Before: Aug 11 12:40:51 2026 GMT
            Not After : Aug 10 12:45:51 2027 GMT
        Subject: CN=9FAA735C1C466529AF6B6A39719B76AA609F01B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a2:51:0d:4c:53:64:a1:07:39:57:ab:78:fa:
                    b0:84:86:50:e7:e5:6b:20:90:c4:4b:84:55:fc:1c:
                    b1:51:3c:f3:a5:43:c5:5b:23:fa:68:18:c1:c4:67:
                    d2:49:c2:d6:ae:b4:0d:24:d6:e8:fd:1e:d5:e2:47:
                    1e:d9:d4:59:4e:17:90:c0:63:6d:c9:ef:e6:a4:43:
                    8c:6c:2e:23:7a:a3:9d:f6:10:ff:cd:09:e9:ff:88:
                    cf:36:91:90:ab:e4:97:26:e1:81:a9:53:19:ea:cd:
                    99:17:7d:62:1d:86:b2:3d:67:1a:96:5c:ce:e3:02:
                    cc:75:74:0c:01:4d:98:22:a9:8f:b6:db:a2:2c:64:
                    14:35:02:30:e6:5d:a0:a2:bf:b6:f4:ee:c9:4d:90:
                    e9:fc:e3:7f:91:c3:8b:40:37:74:2e:94:80:31:33:
                    a2:7b:87:b9:e7:1a:b9:60:7b:f4:2a:94:9d:f9:e3:
                    5e:28:63:25:5b:bc:84:a4:6e:bf:a2:49:04:7a:c0:
                    25:7a:12:9f:ba:e4:5d:3b:52:99:4f:6b:c9:30:87:
                    bf:6b:c2:be:f7:23:e6:1e:78:dd:7f:bc:db:f7:9f:
                    29:2c:05:66:e3:e3:b7:92:64:4b:bf:44:4f:d7:51:
                    ea:9a:f8:c3:f1:93:98:06:f3:e6:86:7b:9f:a0:dc:
                    1e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:AA:73:5C:1C:46:65:29:AF:6B:6A:39:71:9B:76:AA:60:9F:01:B6
            X509v3 Authority Key Identifier:
                keyid:0D:1A:49:74:C4:64:26:C2:F2:98:D2:04:9A:60:84:09:23:ED:88:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BmLnoMe1bzjjKzzeTSUxDoQ6LyewYFffe33ryUXXv3SL/0/0D1A4974C46426C2F298D2049A60840923ED886E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D1A4974C46426C2F298D2049A60840923ED886E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BmLnoMe1bzjjKzzeTSUxDoQ6LyewYFffe33ryUXXv3SL/0/34352e3136342e39302e302f32342d3234203d3e20323638363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:d1:33:18:bc:d6:b8:0c:b3:33:60:d1:67:aa:a0:b8:1a:a2:
         9a:63:d0:ab:81:ff:87:27:3a:c6:58:12:6e:35:16:97:c4:f2:
         be:1d:15:8b:34:33:67:95:08:c6:5f:73:c6:f8:ec:a9:b9:95:
         3a:ca:23:be:2a:76:1b:28:17:1e:b3:69:f3:0f:bf:5a:1f:fc:
         be:64:c0:11:b5:c1:49:be:47:4e:49:5e:d1:25:a8:a7:e6:5c:
         bb:16:0c:dd:9d:6e:f2:e2:bf:b1:38:49:4a:a0:79:68:7a:f3:
         bc:1f:98:f1:9e:9b:03:3c:47:53:42:87:92:71:26:f2:90:e4:
         56:f9:43:15:74:b0:50:ef:38:b9:98:23:73:74:bd:a9:a9:75:
         30:48:f2:a1:ce:23:90:2b:6a:46:e5:8a:77:ba:a4:d3:7f:3e:
         a3:46:0f:78:90:25:87:84:ac:00:2f:a6:e4:ad:0c:9c:c0:21:
         75:bc:94:32:94:e2:22:08:50:83:22:2e:81:13:16:c7:66:93:
         94:40:cf:e4:81:91:36:91:37:f0:d7:1f:77:7a:38:b3:3b:91:
         46:97:1c:db:8f:cd:98:52:84:c8:62:cc:b3:bd:73:9c:e2:b5:
         0a:bc:5c:a1:16:98:a1:5e:b5:b1:23:10:48:cb:9e:10:8b:a9:
         7e:19:8d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:48:14 2026 by rpki-client