Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/34352e3136312e3132302e302f32322d3332203d3e20323638343634.roa
File:                     34352e3136312e3132302e302f32322d3332203d3e20323638343634.roa (raw, json)
Hash identifier:          ehTL3l6riFSXB5vXSMNDnibQbQiO8aGFbRxrohfYbgA=
Subject key identifier:   E9:84:86:66:FE:E7:5C:AA:73:3D:EC:8C:6C:8D:8D:4F:57:18:6A:86
Certificate issuer:       /CN=1014927E28103822EBD27A9BBFCE358A2ADB16B3
Certificate serial:       0221FC0EEC801ABF7DA076A3159C2F7DD09A0E11
Authority key identifier: 10:14:92:7E:28:10:38:22:EB:D2:7A:9B:BF:CE:35:8A:2A:DB:16:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1014927E28103822EBD27A9BBFCE358A2ADB16B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/34352e3136312e3132302e302f32322d3332203d3e20323638343634.roa
Signing time:             Fri 28 Aug 2026 23:21:45 +0000
ROA not before:           Fri 28 Aug 2026 23:16:45 +0000
ROA not after:            Fri 27 Aug 2027 23:21:45 +0000
asID:                     268464
IP address blocks:        45.161.120.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/1014927E28103822EBD27A9BBFCE358A2ADB16B3.crl
                          rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/1014927E28103822EBD27A9BBFCE358A2ADB16B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1014927E28103822EBD27A9BBFCE358A2ADB16B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 12:40:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:21:fc:0e:ec:80:1a:bf:7d:a0:76:a3:15:9c:2f:7d:d0:9a:0e:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1014927E28103822EBD27A9BBFCE358A2ADB16B3
        Validity
            Not Before: Aug 28 23:16:45 2026 GMT
            Not After : Aug 27 23:21:45 2027 GMT
        Subject: CN=E9848666FEE75CAA733DEC8C6C8D8D4F57186A86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3f:97:07:4d:4c:9b:60:bf:1c:dc:88:9c:81:
                    8f:e2:3f:04:0b:ea:cc:e8:26:a8:a4:de:2c:71:f7:
                    83:f1:27:fc:5e:24:1f:72:7b:35:75:09:d5:f3:8c:
                    d6:a7:84:58:8d:f4:7d:35:95:1e:a4:44:8d:12:96:
                    22:1e:59:a9:e7:5c:7b:bc:db:66:26:29:f0:f8:c1:
                    f3:dc:9c:76:3d:c9:47:83:d2:cb:fb:89:88:23:e9:
                    46:86:bc:0f:c2:46:d5:83:b4:2c:f7:bc:2b:4a:8f:
                    0c:57:a8:c7:de:9e:03:37:c6:10:34:b0:45:b6:0e:
                    46:fe:9e:23:b6:ce:f8:4d:0d:94:af:ce:4c:6d:06:
                    7b:46:a3:e2:df:0a:d9:f7:f3:54:79:42:5c:0a:35:
                    e2:b0:75:fb:87:9b:7c:c9:32:32:52:d9:04:b1:a6:
                    f7:81:9e:e8:5e:8a:21:6e:24:40:96:49:9e:7a:ba:
                    a2:5a:74:51:6a:0d:2e:2b:af:f8:b2:df:85:e2:33:
                    9b:e9:5a:16:d0:d0:cf:5c:3d:b1:68:64:e3:58:0f:
                    59:17:a3:f9:f2:83:d8:2f:fe:71:47:9f:d5:66:34:
                    7e:e4:a1:65:75:a9:a0:4a:f4:0c:35:e0:ed:ed:c8:
                    3c:e6:e1:77:24:97:90:0d:ec:b1:d0:bc:1e:6d:de:
                    4c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:84:86:66:FE:E7:5C:AA:73:3D:EC:8C:6C:8D:8D:4F:57:18:6A:86
            X509v3 Authority Key Identifier:
                keyid:10:14:92:7E:28:10:38:22:EB:D2:7A:9B:BF:CE:35:8A:2A:DB:16:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/1014927E28103822EBD27A9BBFCE358A2ADB16B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1014927E28103822EBD27A9BBFCE358A2ADB16B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/34352e3136312e3132302e302f32322d3332203d3e20323638343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:92:f1:d4:d4:dc:f3:c0:32:16:55:0c:eb:4b:89:73:04:da:
         5d:8b:5e:a6:91:96:b2:a0:a1:fd:68:eb:9d:95:f3:ef:fb:e6:
         5a:3d:2a:2a:1b:ce:8e:c6:e8:f3:21:c9:3f:6e:64:51:57:55:
         f8:14:2f:61:7f:97:41:8d:7e:58:9c:57:db:1d:fe:58:d4:20:
         d2:df:74:c8:db:32:de:0c:4d:8f:24:74:e2:16:c5:eb:a2:e3:
         b5:c6:05:90:cb:7f:ec:2e:0c:d7:ed:5e:37:b8:cb:0f:3b:9e:
         a8:c6:d2:93:22:5d:f8:46:52:19:2b:29:80:10:b5:d1:63:9b:
         74:c3:ac:71:01:01:fd:4a:6e:ed:c7:bd:f6:e3:fc:02:fa:44:
         e1:22:8f:81:2c:09:35:eb:ce:85:f5:13:15:e9:17:d6:8f:02:
         0d:8f:7b:5c:1a:38:50:8c:29:1f:1e:1a:82:b1:40:a0:6c:ac:
         cc:39:df:90:fe:3e:6b:22:d6:2f:de:fa:10:81:09:57:a6:e3:
         e2:30:32:83:39:b0:78:38:b0:cb:fe:e3:fb:75:98:c5:6a:73:
         70:36:62:e2:ad:d9:c8:93:23:dc:46:60:26:d1:b8:45:76:0e:
         38:d4:3a:a0:e8:f5:04:bf:22:74:92:97:c2:51:ec:89:3f:2f:
         75:83:03:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:19:51 2026 by rpki-client