Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/34352e3233362e37342e302f32342d3332203d3e20323731343738.roa
File:                     34352e3233362e37342e302f32342d3332203d3e20323731343738.roa (raw, json)
Hash identifier:          50cU4FajQuu1gK5PHosZq65/3Rm8OkHxqP4df2Kcw34=
Subject key identifier:   2D:D4:0F:D1:29:E3:64:1D:22:55:A9:34:13:47:9C:17:89:4C:36:25
Certificate issuer:       /CN=0DE82E3D80720CE4A510B2CC0245E3FC0F7835C1
Certificate serial:       20EC9DAC3D0E84ECC4A5411ABA123D03FD5D0241
Authority key identifier: 0D:E8:2E:3D:80:72:0C:E4:A5:10:B2:CC:02:45:E3:FC:0F:78:35:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DE82E3D80720CE4A510B2CC0245E3FC0F7835C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/34352e3233362e37342e302f32342d3332203d3e20323731343738.roa
Signing time:             Wed 23 Sep 2026 21:47:54 +0000
ROA not before:           Wed 23 Sep 2026 21:42:54 +0000
ROA not after:            Wed 22 Sep 2027 21:47:54 +0000
asID:                     271478
IP address blocks:        45.236.74.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/0DE82E3D80720CE4A510B2CC0245E3FC0F7835C1.crl
                          rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/0DE82E3D80720CE4A510B2CC0245E3FC0F7835C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DE82E3D80720CE4A510B2CC0245E3FC0F7835C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 06:05:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ec:9d:ac:3d:0e:84:ec:c4:a5:41:1a:ba:12:3d:03:fd:5d:02:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DE82E3D80720CE4A510B2CC0245E3FC0F7835C1
        Validity
            Not Before: Sep 23 21:42:54 2026 GMT
            Not After : Sep 22 21:47:54 2027 GMT
        Subject: CN=2DD40FD129E3641D2255A93413479C17894C3625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a0:2a:e2:f7:80:e6:23:a2:2f:8b:f2:cb:12:
                    b2:51:da:5d:15:13:59:d9:d0:c2:89:c0:1c:da:74:
                    07:af:d3:46:5c:f1:46:6f:7a:29:74:22:17:28:ac:
                    5c:99:b5:83:7c:c6:d6:6f:64:98:c6:b5:0e:13:3a:
                    a0:0a:ff:34:10:1f:52:0a:4a:d3:54:1c:01:4d:43:
                    7a:6f:cd:e0:c1:4f:47:03:8c:ec:1e:a7:77:d0:5b:
                    08:61:f1:5f:47:53:55:a9:fd:35:c8:71:47:5a:10:
                    c9:70:81:b1:47:7a:ea:4b:53:98:11:32:f8:5f:38:
                    62:96:70:f5:a0:ef:4e:67:46:7e:d0:85:fc:80:91:
                    f8:37:a1:f5:15:69:0a:04:56:f1:ee:ba:d5:62:e1:
                    6a:da:f9:da:29:95:0b:9e:11:29:bb:96:97:71:89:
                    39:7d:28:48:64:6e:ad:d7:79:65:4e:d6:bf:ba:ad:
                    d7:1e:7e:5f:c3:c3:1e:0f:7e:b1:4f:79:bf:69:ed:
                    86:e5:26:60:3b:0a:6f:dd:3a:07:71:e6:56:1d:19:
                    ac:a1:81:21:2d:28:be:7e:76:4c:08:22:a0:3c:2d:
                    3c:49:2f:0c:5a:c2:00:37:ca:23:88:fb:6a:37:2e:
                    38:f4:c5:43:29:1c:14:dd:36:3f:30:e0:b7:a3:e0:
                    8a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D4:0F:D1:29:E3:64:1D:22:55:A9:34:13:47:9C:17:89:4C:36:25
            X509v3 Authority Key Identifier:
                keyid:0D:E8:2E:3D:80:72:0C:E4:A5:10:B2:CC:02:45:E3:FC:0F:78:35:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/0DE82E3D80720CE4A510B2CC0245E3FC0F7835C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DE82E3D80720CE4A510B2CC0245E3FC0F7835C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/34352e3233362e37342e302f32342d3332203d3e20323731343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:8f:ba:01:dc:a9:75:f8:dd:d9:62:8a:fb:5d:b7:27:11:55:
         31:88:2f:00:1e:56:d2:b2:3f:3e:2a:bf:fa:a9:cc:35:09:88:
         bc:c0:da:67:04:53:0f:ea:47:f4:57:78:21:ff:c7:74:46:02:
         b9:38:52:80:40:08:0a:14:3f:c3:83:ca:f2:6d:dc:dd:0b:e9:
         ba:5b:7f:60:a7:71:26:f4:85:ec:53:59:60:a1:9f:4e:ce:9b:
         77:cb:ca:56:c7:ba:fc:85:0d:4b:44:c1:d3:e0:98:7f:60:b5:
         52:63:0a:d4:48:52:82:8e:54:77:86:66:07:e3:fe:86:58:ce:
         87:1c:b5:32:94:e1:60:58:1b:94:f0:07:66:60:7a:8c:c0:b8:
         9d:74:90:ad:73:8e:3f:80:91:c3:35:67:73:fb:31:d0:92:6f:
         a9:4f:d8:f7:51:a0:34:40:25:3e:de:01:6a:94:a6:3a:38:15:
         b6:3c:5f:42:d7:04:5e:78:0c:71:fe:15:a9:19:3e:e9:d5:fc:
         dd:5c:55:59:0b:7f:fa:82:73:44:97:f4:08:29:b8:a5:54:e7:
         4f:4b:05:1f:fd:cc:1a:50:5d:92:ee:db:2a:f3:21:8c:cb:4e:
         9a:db:79:36:69:9e:d3:86:98:81:9d:94:a8:cb:72:02:ad:70:
         06:8c:b1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:32:56 2026 by rpki-client