Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/0/34352e36352e3233362e302f32322d3234203d3e20323636353236.roa
File:                     34352e36352e3233362e302f32322d3234203d3e20323636353236.roa (raw, json)
Hash identifier:          T/zA1p+nClD7fRx/9CmIe9dJkzP8F5EIeK2gdeuOTtE=
Subject key identifier:   BC:F2:AC:46:EA:C2:74:F1:31:23:9B:D8:14:CD:DC:CD:4C:79:8C:CE
Certificate issuer:       /CN=DC566526072898BA252A37ABF91AC32DFFCDCB28
Certificate serial:       06B82A8331E19425430C9BA4537AD184D9665665
Authority key identifier: DC:56:65:26:07:28:98:BA:25:2A:37:AB:F9:1A:C3:2D:FF:CD:CB:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC566526072898BA252A37ABF91AC32DFFCDCB28.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/0/34352e36352e3233362e302f32322d3234203d3e20323636353236.roa
Signing time:             Mon 26 Oct 2026 21:33:26 +0000
ROA not before:           Mon 26 Oct 2026 21:28:26 +0000
ROA not after:            Mon 25 Oct 2027 21:33:26 +0000
asID:                     266526
IP address blocks:        45.65.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/0/DC566526072898BA252A37ABF91AC32DFFCDCB28.crl
                          rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/0/DC566526072898BA252A37ABF91AC32DFFCDCB28.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC566526072898BA252A37ABF91AC32DFFCDCB28.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 01:23:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:b8:2a:83:31:e1:94:25:43:0c:9b:a4:53:7a:d1:84:d9:66:56:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC566526072898BA252A37ABF91AC32DFFCDCB28
        Validity
            Not Before: Oct 26 21:28:26 2026 GMT
            Not After : Oct 25 21:33:26 2027 GMT
        Subject: CN=BCF2AC46EAC274F131239BD814CDDCCD4C798CCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:60:84:48:f8:71:af:a1:93:af:18:30:3c:5f:
                    e8:5f:b6:7f:73:48:d6:fd:64:bd:7d:60:a1:83:49:
                    1f:42:8e:83:b3:ff:b5:74:04:42:da:a4:7d:d9:d0:
                    e8:55:17:d4:ac:28:f2:d3:04:60:bb:87:97:23:c2:
                    4a:c2:da:3f:db:74:de:aa:f4:93:cf:21:15:9d:a5:
                    76:5d:c7:ab:f1:02:c8:39:74:7f:b8:3d:f1:91:bc:
                    74:a7:c6:ee:ca:b2:a6:a7:24:45:b2:9d:7d:38:d8:
                    04:17:5a:ee:13:0a:2c:f3:34:8e:a3:01:75:d2:7c:
                    5d:68:66:e9:49:b7:63:b3:ea:f7:a1:7b:ee:34:ec:
                    72:66:42:38:b2:54:13:34:a5:21:b7:1c:65:0b:95:
                    9f:cf:4b:dd:65:62:eb:65:fa:00:d9:f4:3e:fe:1e:
                    99:d0:06:ac:b1:c5:a6:6a:e4:be:5e:94:d7:29:ed:
                    a3:85:5c:11:13:83:d6:31:4d:2c:07:91:c9:93:17:
                    30:ef:ae:dd:5a:e9:33:a6:6b:71:ae:8a:fe:a9:d0:
                    87:1f:48:53:58:a8:41:a1:c6:61:ff:09:fa:60:18:
                    fd:7c:47:9c:f1:d7:f1:f8:a1:ac:5e:81:04:10:44:
                    58:ec:87:77:87:d2:79:6d:08:58:8d:d3:ea:80:a0:
                    8f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F2:AC:46:EA:C2:74:F1:31:23:9B:D8:14:CD:DC:CD:4C:79:8C:CE
            X509v3 Authority Key Identifier:
                keyid:DC:56:65:26:07:28:98:BA:25:2A:37:AB:F9:1A:C3:2D:FF:CD:CB:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/0/DC566526072898BA252A37ABF91AC32DFFCDCB28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC566526072898BA252A37ABF91AC32DFFCDCB28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/0/34352e36352e3233362e302f32322d3234203d3e20323636353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         db:20:ea:95:4a:3d:46:d2:53:0c:fd:11:2d:94:d7:ef:e0:0b:
         58:04:7c:7d:46:3d:88:67:17:66:9d:c9:89:c8:5a:e5:99:66:
         f6:b0:1f:35:eb:90:10:b3:4f:26:94:50:60:db:68:2c:35:7a:
         c5:16:d1:06:df:3e:74:e1:97:60:f0:36:54:ab:cb:c3:0c:f1:
         85:64:d9:83:99:00:12:89:c4:3a:88:a1:01:bb:f6:0a:a5:fb:
         af:09:de:ac:31:77:12:b9:6f:08:fe:c2:5f:76:a0:9a:33:ec:
         64:9f:ac:da:6a:73:1e:5a:1b:a5:ed:18:61:ff:6d:f0:31:59:
         29:3e:ca:24:40:95:7a:48:f5:1a:c7:27:f2:dd:ec:3a:d3:3b:
         05:d7:3f:f4:2f:eb:4a:a2:4d:fe:46:62:ec:b0:22:12:7c:2e:
         ea:66:5c:98:80:50:a1:48:2e:e1:a9:43:17:a9:de:06:a1:7d:
         b3:c0:4a:d7:55:f3:87:b9:13:6f:b7:51:1c:91:b8:5e:d0:0d:
         0c:21:23:13:f7:25:f2:d8:77:ae:51:df:9e:c4:e1:ca:cb:ed:
         b5:5e:2a:d9:78:1d:86:f5:b7:e8:a8:09:e2:82:bb:01:2f:64:
         50:b0:43:83:b0:42:6a:96:15:63:ac:84:53:83:6e:14:c3:5d:
         3f:a8:66:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 07:14:39 2026 by rpki-client