Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/34352e3233372e32362e302f32342d3234203d3e20323638323632.roa
File:                     34352e3233372e32362e302f32342d3234203d3e20323638323632.roa (raw, json)
Hash identifier:          wJBiUeu3W10V2TUBbYD0QNtynR2oAUsE4q6EsYt3ieU=
Subject key identifier:   82:3B:F8:20:15:10:FB:8C:79:9F:44:65:C9:7F:B6:8C:27:B8:BA:45
Certificate issuer:       /CN=ABB1DED57674B3AD9FC7F12E2337472C2D95FBFC
Certificate serial:       38BC222DB42BAEB3768045EC2AF8FB69A181DF57
Authority key identifier: AB:B1:DE:D5:76:74:B3:AD:9F:C7:F1:2E:23:37:47:2C:2D:95:FB:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABB1DED57674B3AD9FC7F12E2337472C2D95FBFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/34352e3233372e32362e302f32342d3234203d3e20323638323632.roa
Signing time:             Fri 18 Sep 2026 12:38:37 +0000
ROA not before:           Fri 18 Sep 2026 12:33:37 +0000
ROA not after:            Fri 17 Sep 2027 12:38:37 +0000
asID:                     268262
IP address blocks:        45.237.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/ABB1DED57674B3AD9FC7F12E2337472C2D95FBFC.crl
                          rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/ABB1DED57674B3AD9FC7F12E2337472C2D95FBFC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABB1DED57674B3AD9FC7F12E2337472C2D95FBFC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 03:49:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:bc:22:2d:b4:2b:ae:b3:76:80:45:ec:2a:f8:fb:69:a1:81:df:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABB1DED57674B3AD9FC7F12E2337472C2D95FBFC
        Validity
            Not Before: Sep 18 12:33:37 2026 GMT
            Not After : Sep 17 12:38:37 2027 GMT
        Subject: CN=823BF8201510FB8C799F4465C97FB68C27B8BA45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9e:cf:4b:38:e9:23:5a:71:51:0c:ee:29:b4:
                    10:00:13:6d:2f:cb:3f:1a:1e:e6:71:17:b4:bc:ca:
                    86:a8:e2:fb:f5:35:47:53:53:a6:65:78:11:10:79:
                    4f:0a:82:25:33:73:d6:9e:44:9b:6a:6b:67:8e:21:
                    e1:6d:89:2a:a2:eb:9f:8f:32:ea:50:1e:ef:e5:be:
                    97:55:31:63:9f:c7:97:e9:67:c8:14:3e:db:b4:72:
                    61:b8:ab:88:3b:2f:36:f6:94:6e:d0:92:f5:f0:24:
                    52:93:95:03:fe:80:63:e5:3a:b1:0c:0b:93:d4:34:
                    31:65:4a:f2:c1:ee:d4:8a:f5:f2:59:36:c9:16:8a:
                    08:b9:fa:cf:cd:11:2a:36:78:1e:da:e3:86:de:aa:
                    d8:c2:fc:27:ee:bc:34:56:0e:4a:15:42:c3:84:89:
                    9e:96:c4:69:6a:4e:de:38:8f:39:5a:5b:4d:94:c8:
                    f8:20:74:75:d5:fd:52:c3:6b:0f:e1:b8:5a:9e:f5:
                    34:c0:28:37:02:45:a4:71:35:c2:ff:e4:5c:4f:6d:
                    cc:d5:6c:b0:5d:26:00:29:51:e3:b6:df:c7:01:45:
                    5b:b2:bc:6c:bc:5d:ea:2d:06:78:41:23:b4:92:c8:
                    b4:38:9b:40:25:2a:25:bd:ae:5b:c8:81:88:c4:61:
                    5f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:3B:F8:20:15:10:FB:8C:79:9F:44:65:C9:7F:B6:8C:27:B8:BA:45
            X509v3 Authority Key Identifier:
                keyid:AB:B1:DE:D5:76:74:B3:AD:9F:C7:F1:2E:23:37:47:2C:2D:95:FB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/ABB1DED57674B3AD9FC7F12E2337472C2D95FBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABB1DED57674B3AD9FC7F12E2337472C2D95FBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/34352e3233372e32362e302f32342d3234203d3e20323638323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:07:e4:be:f7:54:8c:64:dc:8c:0e:90:62:7b:40:39:68:98:
         8e:df:04:a8:8e:d6:78:95:24:12:c2:ea:f0:3a:71:f4:45:c8:
         62:a3:3c:a6:a3:f2:c2:af:ac:55:48:0b:42:52:c7:e8:02:9e:
         09:a8:05:30:d3:f2:e3:03:ea:41:7d:ae:7d:df:cd:8c:8b:87:
         6f:1b:78:37:e9:61:4c:83:50:b5:75:3f:93:6c:a5:15:94:a5:
         66:94:94:55:cd:7b:65:28:95:a1:35:6a:03:30:67:30:07:9c:
         64:75:60:af:5f:6e:86:91:18:f2:2a:df:a2:54:39:55:dc:28:
         ed:57:81:85:3c:96:8b:92:9d:28:67:12:fe:f2:b3:06:7a:ba:
         aa:9f:95:ac:f3:b2:dc:57:83:db:00:62:7c:00:e6:1b:32:25:
         bf:4f:98:44:57:e0:b0:97:40:f8:89:3f:75:3b:c7:76:8d:26:
         e1:c9:93:08:6f:62:18:e4:f3:09:3c:05:cc:9f:88:6c:b8:26:
         4c:5d:08:76:2d:f4:a4:58:31:ff:a3:69:56:d7:7f:dd:a6:08:
         51:d6:f1:69:55:42:22:04:f9:54:fe:ff:7a:58:9a:52:2d:1a:
         a1:79:be:16:93:0b:63:ed:b2:5b:8c:ba:32:97:3d:6b:6d:f8:
         dc:ff:0c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:31:45 2026 by rpki-client