Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EHWT29GHderZcjLH2BgXDDbqcBLtM2j8D1CcE3AbkKoP/0/34352e3233332e3230342e302f32322d3232203d3e20323637333937.roa
File:                     34352e3233332e3230342e302f32322d3232203d3e20323637333937.roa (raw, json)
Hash identifier:          OFpeN5Ato1Nt0wSJaQL2RPzf+mQ2YMCrvt9fNPVRyqw=
Subject key identifier:   86:A3:CF:7A:40:D5:2F:9F:12:31:8E:50:86:38:C2:9F:51:A4:5F:B4
Certificate issuer:       /CN=0F91D797126CC38CA101187EE0D0F96A3EE7D0AB
Certificate serial:       07A07F2D18902B6D9C354CDC88D4F0B03FA6529A
Authority key identifier: 0F:91:D7:97:12:6C:C3:8C:A1:01:18:7E:E0:D0:F9:6A:3E:E7:D0:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F91D797126CC38CA101187EE0D0F96A3EE7D0AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EHWT29GHderZcjLH2BgXDDbqcBLtM2j8D1CcE3AbkKoP/0/34352e3233332e3230342e302f32322d3232203d3e20323637333937.roa
Signing time:             Wed 23 Sep 2026 00:40:11 +0000
ROA not before:           Wed 23 Sep 2026 00:35:11 +0000
ROA not after:            Wed 22 Sep 2027 00:40:11 +0000
asID:                     267397
IP address blocks:        45.233.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EHWT29GHderZcjLH2BgXDDbqcBLtM2j8D1CcE3AbkKoP/0/0F91D797126CC38CA101187EE0D0F96A3EE7D0AB.crl
                          rsync://rpki-repo.registro.br/repo/EHWT29GHderZcjLH2BgXDDbqcBLtM2j8D1CcE3AbkKoP/0/0F91D797126CC38CA101187EE0D0F96A3EE7D0AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F91D797126CC38CA101187EE0D0F96A3EE7D0AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 02:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:a0:7f:2d:18:90:2b:6d:9c:35:4c:dc:88:d4:f0:b0:3f:a6:52:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F91D797126CC38CA101187EE0D0F96A3EE7D0AB
        Validity
            Not Before: Sep 23 00:35:11 2026 GMT
            Not After : Sep 22 00:40:11 2027 GMT
        Subject: CN=86A3CF7A40D52F9F12318E508638C29F51A45FB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:93:f4:b8:ed:a0:46:0a:26:df:57:23:58:52:
                    6f:4c:70:95:f5:8b:9f:06:ba:7e:3d:95:ea:22:c7:
                    bf:f8:dc:7b:75:75:33:d8:98:90:aa:fc:c2:b5:d1:
                    09:10:8d:9b:6f:01:a9:25:60:b7:e4:27:2f:60:c1:
                    d9:d0:06:79:27:ed:18:8a:5d:21:8e:a3:3d:76:d0:
                    48:7e:d8:23:13:44:cd:6b:a2:51:a3:ec:ac:68:fb:
                    c2:41:6a:cc:d9:85:3d:19:fd:9d:ce:cf:9c:9a:8c:
                    37:61:93:fc:11:d9:f0:3c:80:9d:9a:a1:24:00:22:
                    80:4e:b7:1e:46:54:dc:b3:47:ee:9b:4a:64:87:54:
                    f7:c4:8f:ae:1b:7a:04:f4:83:89:41:a1:b6:40:31:
                    8c:b6:b2:0e:75:77:95:65:3f:3c:c2:76:a9:5c:ec:
                    9f:c6:cb:ba:86:28:54:67:79:d8:c8:c4:f9:3e:84:
                    a3:11:f8:0b:bb:28:0c:27:08:ae:78:6f:50:1a:1b:
                    1a:07:65:88:55:f8:f2:2e:d5:eb:56:ee:f0:fa:25:
                    fe:b9:27:eb:c5:42:c5:5c:8c:02:18:4f:d6:e4:98:
                    24:37:0f:fa:03:2a:c8:f3:18:bb:ad:c4:bd:ba:f9:
                    8e:94:03:d6:e0:84:ac:8d:71:a4:6f:40:ce:b4:66:
                    1a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A3:CF:7A:40:D5:2F:9F:12:31:8E:50:86:38:C2:9F:51:A4:5F:B4
            X509v3 Authority Key Identifier:
                keyid:0F:91:D7:97:12:6C:C3:8C:A1:01:18:7E:E0:D0:F9:6A:3E:E7:D0:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EHWT29GHderZcjLH2BgXDDbqcBLtM2j8D1CcE3AbkKoP/0/0F91D797126CC38CA101187EE0D0F96A3EE7D0AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F91D797126CC38CA101187EE0D0F96A3EE7D0AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EHWT29GHderZcjLH2BgXDDbqcBLtM2j8D1CcE3AbkKoP/0/34352e3233332e3230342e302f32322d3232203d3e20323637333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:ec:c9:39:33:a1:0d:2c:69:36:e4:99:85:3e:78:fa:cc:aa:
         ac:2d:28:27:a8:74:48:43:a8:dd:4c:04:ce:b5:23:7d:5e:a2:
         37:ed:a9:f6:39:ae:d9:4d:f1:ef:2f:a2:cb:9a:eb:cd:40:8a:
         46:1e:2f:bc:47:54:e1:fb:81:92:10:c5:56:6f:3a:99:78:ef:
         3e:f1:8c:ac:77:10:a5:f1:c5:be:2a:fd:51:80:a8:f9:82:e3:
         e0:12:72:bd:63:26:eb:a2:8c:63:1b:83:46:f1:63:ae:05:a0:
         4b:0f:87:bb:df:09:c7:73:22:52:b7:3c:d4:cd:f2:74:9f:70:
         79:15:02:b6:68:1a:a1:37:68:d1:9c:02:e1:15:9c:49:fd:f5:
         e9:a9:c5:07:bd:f2:17:60:9f:db:9b:bd:6f:d5:a7:4a:34:c0:
         93:5c:16:82:05:e3:f3:ef:66:6c:b5:5b:28:13:0a:c7:e9:a5:
         41:bd:77:65:19:0a:2d:71:fd:6f:fc:39:8d:a3:2c:3f:b2:9b:
         a4:98:75:cc:5a:c3:6b:9e:f7:d6:c4:fa:a8:97:18:df:06:c8:
         51:24:af:b5:9e:f3:bb:c1:5d:0e:52:56:56:c3:30:39:aa:d9:
         9f:78:07:02:17:47:f7:10:bf:e0:7c:ee:5d:ea:0f:0d:6d:2d:
         5b:98:64:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:34:28 2026 by rpki-client