Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CchdKrLWQc5gxjWDs2tKb7yGWjLfTTjXw8eqW1dCYfo/0/34352e362e33302e302f32342d3234203d3e20323636313231.roa
File:                     34352e362e33302e302f32342d3234203d3e20323636313231.roa (raw, json)
Hash identifier:          scUwY78+Vm6UZ/aI3jaewZHJ3AuA2PU2Us//WjUeHbw=
Subject key identifier:   9A:8A:1B:8F:05:75:A5:C4:98:05:22:B2:59:31:66:86:A2:EE:B0:6D
Certificate issuer:       /CN=4483FC94AC3AF616894064AA3508F70A4814E8F0
Certificate serial:       679CDFD1FCBABC8DD36F6C6B36EDCA3452C0B0B6
Authority key identifier: 44:83:FC:94:AC:3A:F6:16:89:40:64:AA:35:08:F7:0A:48:14:E8:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4483FC94AC3AF616894064AA3508F70A4814E8F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CchdKrLWQc5gxjWDs2tKb7yGWjLfTTjXw8eqW1dCYfo/0/34352e362e33302e302f32342d3234203d3e20323636313231.roa
Signing time:             Fri 18 Sep 2026 13:56:26 +0000
ROA not before:           Fri 18 Sep 2026 13:51:26 +0000
ROA not after:            Fri 17 Sep 2027 13:56:26 +0000
asID:                     266121
IP address blocks:        45.6.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CchdKrLWQc5gxjWDs2tKb7yGWjLfTTjXw8eqW1dCYfo/0/4483FC94AC3AF616894064AA3508F70A4814E8F0.crl
                          rsync://rpki-repo.registro.br/repo/CchdKrLWQc5gxjWDs2tKb7yGWjLfTTjXw8eqW1dCYfo/0/4483FC94AC3AF616894064AA3508F70A4814E8F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4483FC94AC3AF616894064AA3508F70A4814E8F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 11:39:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:9c:df:d1:fc:ba:bc:8d:d3:6f:6c:6b:36:ed:ca:34:52:c0:b0:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4483FC94AC3AF616894064AA3508F70A4814E8F0
        Validity
            Not Before: Sep 18 13:51:26 2026 GMT
            Not After : Sep 17 13:56:26 2027 GMT
        Subject: CN=9A8A1B8F0575A5C4980522B259316686A2EEB06D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8a:a5:78:16:68:a0:28:7c:cc:13:57:d2:47:
                    86:78:a6:6e:bb:3e:89:ee:da:b3:1d:ba:3d:e6:a4:
                    82:ab:c5:5c:44:c7:3c:ba:a1:57:80:6f:49:26:ed:
                    e6:c8:5a:9a:39:f8:f5:0e:de:19:a7:a3:1a:33:90:
                    a7:b5:60:e1:7d:5d:12:26:53:49:0a:af:21:b8:a3:
                    8d:c5:bb:ea:a4:06:bd:99:f5:d2:48:48:35:0d:8e:
                    dd:ec:9f:59:de:10:d2:5b:55:e0:01:f2:f7:9c:09:
                    5b:2a:19:b4:80:8a:39:d4:cb:6b:ab:3f:6b:be:c9:
                    6b:de:75:e5:34:3e:7a:0b:ea:4d:6c:44:d8:a3:4b:
                    9d:cf:a8:d0:45:ff:1e:28:49:d6:97:d8:91:30:e6:
                    ac:81:0d:e3:7c:5a:1d:8e:c0:ef:15:b9:47:14:d6:
                    b2:b8:6e:64:37:9a:50:dc:30:03:f3:eb:5e:92:db:
                    bf:9c:de:b0:32:ff:8f:33:14:48:fc:95:cc:24:e5:
                    92:ec:e4:49:e8:77:1d:35:8c:6f:b0:a6:7a:5a:88:
                    59:af:7c:9f:61:7e:a0:c9:ed:54:86:61:28:d6:b3:
                    cf:c5:55:b3:60:0e:5a:ac:0a:ae:4f:c3:77:d8:1a:
                    9a:46:58:49:e3:2d:cb:ea:c0:9e:c0:26:e6:bc:8d:
                    13:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:8A:1B:8F:05:75:A5:C4:98:05:22:B2:59:31:66:86:A2:EE:B0:6D
            X509v3 Authority Key Identifier:
                keyid:44:83:FC:94:AC:3A:F6:16:89:40:64:AA:35:08:F7:0A:48:14:E8:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CchdKrLWQc5gxjWDs2tKb7yGWjLfTTjXw8eqW1dCYfo/0/4483FC94AC3AF616894064AA3508F70A4814E8F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4483FC94AC3AF616894064AA3508F70A4814E8F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CchdKrLWQc5gxjWDs2tKb7yGWjLfTTjXw8eqW1dCYfo/0/34352e362e33302e302f32342d3234203d3e20323636313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:6d:0b:6b:31:d4:47:9d:4b:af:8f:20:cc:76:fc:26:e2:25:
         b1:c6:c7:f1:4f:fe:e6:71:41:75:73:dc:51:fd:2c:d7:4e:6b:
         e3:0e:b9:ba:13:51:a9:3d:79:37:e8:69:cb:a3:b2:dd:5a:a4:
         2a:ce:b5:b4:6d:ed:d1:6a:b7:11:88:22:1d:e0:c6:45:2b:67:
         bc:49:7d:87:fb:dd:d5:f6:44:ae:74:a4:b9:b8:5e:59:88:eb:
         b3:ba:40:4c:64:9c:4a:0c:77:a3:3a:36:59:3e:91:63:4e:c0:
         45:f3:ed:1f:12:f9:8b:80:f3:d3:93:75:5a:24:70:38:a9:d3:
         60:2d:97:d2:41:e7:10:f7:36:87:b4:fa:f2:44:76:1c:34:ed:
         73:11:59:35:00:3c:9c:6d:b7:bf:80:3c:17:fe:2d:e3:58:97:
         e1:07:30:ac:48:72:30:a0:fa:9f:3f:1b:eb:8d:55:04:1f:ea:
         90:41:f6:0d:af:5a:65:7c:16:be:d1:78:ad:af:53:9c:dc:04:
         4c:31:80:e2:50:1e:90:fe:e2:af:f2:03:df:c3:f1:3a:8b:9b:
         ec:53:45:7e:de:94:ea:aa:ac:05:c1:f7:c7:c4:b5:d3:40:8f:
         b9:3d:41:65:47:ea:ec:29:b1:ce:93:c4:57:43:34:b3:eb:54:
         f4:5c:d4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:43:24 2026 by rpki-client