Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/34352e362e3136322e302f32342d3234203d3e20323636313936.roa
File:                     34352e362e3136322e302f32342d3234203d3e20323636313936.roa (raw, json)
Hash identifier:          O2Aw+vrxUFM1FQD32/GCjBxdGtSl70YShh22Q1EDhjc=
Subject key identifier:   09:0C:D4:BF:51:3D:EA:79:EA:5D:60:8E:7A:F1:66:26:D6:29:B5:F3
Certificate issuer:       /CN=BD219691779E4381927F5A5DC8FC2B32EA9F42EF
Certificate serial:       74257957AB8E2936422E5E7276B7C5E2233CC53F
Authority key identifier: BD:21:96:91:77:9E:43:81:92:7F:5A:5D:C8:FC:2B:32:EA:9F:42:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD219691779E4381927F5A5DC8FC2B32EA9F42EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/34352e362e3136322e302f32342d3234203d3e20323636313936.roa
Signing time:             Thu 20 Aug 2026 12:55:10 +0000
ROA not before:           Thu 20 Aug 2026 12:50:10 +0000
ROA not after:            Thu 19 Aug 2027 12:55:10 +0000
asID:                     266196
IP address blocks:        45.6.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/BD219691779E4381927F5A5DC8FC2B32EA9F42EF.crl
                          rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/BD219691779E4381927F5A5DC8FC2B32EA9F42EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD219691779E4381927F5A5DC8FC2B32EA9F42EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 17:57:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:25:79:57:ab:8e:29:36:42:2e:5e:72:76:b7:c5:e2:23:3c:c5:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD219691779E4381927F5A5DC8FC2B32EA9F42EF
        Validity
            Not Before: Aug 20 12:50:10 2026 GMT
            Not After : Aug 19 12:55:10 2027 GMT
        Subject: CN=090CD4BF513DEA79EA5D608E7AF16626D629B5F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:da:4f:4c:27:9b:51:f0:f8:c8:cb:e0:bb:2a:
                    c0:c7:1e:94:7c:3b:0f:ff:0a:b7:6a:c9:30:bb:3a:
                    fa:d8:e1:26:d7:a7:d4:0f:6b:2e:95:7c:cd:5e:e7:
                    9f:68:2e:ec:23:91:fc:b1:df:34:a4:3a:3c:43:dd:
                    a5:c5:55:68:4a:45:c2:86:27:b6:74:fd:02:62:37:
                    f0:a1:62:42:e9:fe:b5:df:54:8e:8d:94:d8:34:05:
                    40:d5:63:a0:e9:97:66:c4:4c:6e:f6:f6:97:7b:4c:
                    7d:bd:92:b8:c7:0a:e5:f7:86:4a:cc:1f:8e:df:57:
                    49:d2:5b:8f:77:9d:8e:40:78:90:9e:cd:68:cb:f6:
                    06:1d:e0:34:c3:fa:0a:7d:d5:c4:2a:0c:c5:e7:1b:
                    7c:31:76:06:3a:26:0f:71:6a:95:78:de:cf:26:88:
                    6a:73:c7:34:a3:e4:78:38:e4:36:22:6f:b2:06:1b:
                    dd:91:b4:0d:5e:6b:ef:d9:d2:44:17:21:e2:47:27:
                    b5:4e:6c:28:c1:8a:15:a4:9c:31:ed:15:42:54:fa:
                    2d:0e:2a:85:3d:93:63:2b:5c:f7:7d:0d:a1:67:b4:
                    0b:9e:c1:6d:c9:1e:8c:87:50:6e:65:7c:d7:ec:a3:
                    9e:52:f6:cd:cc:d5:3f:36:01:6d:8a:6d:a6:6b:0b:
                    74:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:0C:D4:BF:51:3D:EA:79:EA:5D:60:8E:7A:F1:66:26:D6:29:B5:F3
            X509v3 Authority Key Identifier:
                keyid:BD:21:96:91:77:9E:43:81:92:7F:5A:5D:C8:FC:2B:32:EA:9F:42:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/BD219691779E4381927F5A5DC8FC2B32EA9F42EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD219691779E4381927F5A5DC8FC2B32EA9F42EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/34352e362e3136322e302f32342d3234203d3e20323636313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:c2:5b:ea:f3:3f:db:ec:a6:3a:7f:93:55:96:2d:2b:c6:c4:
         d0:3c:f8:0a:c1:d9:1a:60:a7:fd:ec:37:83:8b:83:9f:7f:e5:
         f9:1a:9c:6a:5a:b4:d0:74:e6:42:98:13:5d:35:cb:da:75:48:
         d1:bf:61:fd:dc:3e:ad:39:af:06:88:f9:bb:0a:0e:33:46:c9:
         d0:b1:08:d4:2e:5c:f2:d8:8f:aa:18:dd:af:8b:0b:4c:62:7a:
         4e:46:bb:60:2b:31:c0:c6:f0:20:fc:32:cf:a1:5d:d7:cc:ea:
         de:5d:3e:8e:06:23:16:34:ae:5f:7c:d8:9e:95:6a:af:7a:58:
         17:70:d6:77:22:87:85:29:53:b7:22:43:0e:af:03:c8:ff:90:
         8a:b0:b4:83:e1:90:49:88:fc:65:7d:4f:d6:16:22:e2:9a:25:
         5b:17:53:58:98:ec:7b:32:0d:de:0a:42:2a:ee:5b:b3:2d:09:
         59:0e:88:4c:3a:eb:ca:8e:26:89:f9:b9:c2:ff:d3:f3:9f:bd:
         99:b5:aa:3c:b1:32:f0:63:4f:23:45:25:0d:34:28:00:a6:03:
         d5:7a:11:bb:74:15:db:2a:ce:b4:d7:28:09:ec:b8:47:5f:0f:
         0c:56:6b:98:0a:ac:e8:c2:e4:f4:1a:ec:cd:12:c8:f4:0d:8e:
         17:40:68:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 08:48:00 2026 by rpki-client