Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/34352e3139312e33342e302f32342d3234203d3e20323639363635.roa
File:                     34352e3139312e33342e302f32342d3234203d3e20323639363635.roa (raw, json)
Hash identifier:          0HFv6hyibK+ayP8sNegJaHZvTxz7GqxpShm0Wu60jDc=
Subject key identifier:   7E:EE:9F:A1:02:ED:BB:F6:90:47:6F:AA:75:CA:25:63:91:D4:58:A3
Certificate issuer:       /CN=054909F1A4E8496D227A81ECF4A9154F1D934057
Certificate serial:       57FE4E2D09056ECEC84F314F5D59A49C507BE603
Authority key identifier: 05:49:09:F1:A4:E8:49:6D:22:7A:81:EC:F4:A9:15:4F:1D:93:40:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/054909F1A4E8496D227A81ECF4A9154F1D934057.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/34352e3139312e33342e302f32342d3234203d3e20323639363635.roa
Signing time:             Thu 17 Sep 2026 18:37:32 +0000
ROA not before:           Thu 17 Sep 2026 18:32:32 +0000
ROA not after:            Thu 16 Sep 2027 18:37:32 +0000
asID:                     269665
IP address blocks:        45.191.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/054909F1A4E8496D227A81ECF4A9154F1D934057.crl
                          rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/054909F1A4E8496D227A81ECF4A9154F1D934057.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/054909F1A4E8496D227A81ECF4A9154F1D934057.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 06:53:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:fe:4e:2d:09:05:6e:ce:c8:4f:31:4f:5d:59:a4:9c:50:7b:e6:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=054909F1A4E8496D227A81ECF4A9154F1D934057
        Validity
            Not Before: Sep 17 18:32:32 2026 GMT
            Not After : Sep 16 18:37:32 2027 GMT
        Subject: CN=7EEE9FA102EDBBF690476FAA75CA256391D458A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1c:05:53:1c:fb:5d:20:60:ce:97:5f:c1:d0:
                    61:86:55:09:07:4a:21:68:72:0e:f3:6d:83:ca:7f:
                    9c:09:69:76:1f:49:12:b3:e8:96:89:18:c3:56:48:
                    55:45:45:7b:fc:4c:b7:e2:6e:99:6a:51:cf:84:c9:
                    bc:18:01:2c:7d:52:06:1e:10:17:a1:fc:78:84:ca:
                    98:a6:1e:85:c8:4f:77:c8:e4:7d:a7:af:7a:26:31:
                    21:32:8c:d6:57:cd:e6:13:52:0c:88:ff:34:9b:6d:
                    53:d1:ac:96:09:f7:fa:62:9a:c0:95:ee:52:af:0a:
                    83:6b:db:95:7f:1b:6d:13:b7:25:e8:d4:ed:c3:5c:
                    88:31:f2:bf:f2:da:5f:e8:f5:b6:d3:fc:f0:74:e8:
                    6d:43:f9:a6:e6:2b:57:b6:69:e0:06:90:09:5e:1c:
                    65:ac:85:a8:0e:6f:dc:64:19:50:2d:e9:20:40:32:
                    48:1e:e6:0a:69:ce:92:48:db:cf:18:22:b0:aa:04:
                    d1:e9:7b:5e:77:82:1b:32:1b:0e:65:dc:dc:7c:af:
                    73:70:3d:97:b8:e5:e4:a5:dc:40:09:3c:12:19:ee:
                    a3:6c:ab:74:72:fa:34:e4:53:5d:20:d4:45:2a:53:
                    6e:5a:68:98:08:e5:28:1e:0d:f1:60:c7:b7:90:8a:
                    bc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:EE:9F:A1:02:ED:BB:F6:90:47:6F:AA:75:CA:25:63:91:D4:58:A3
            X509v3 Authority Key Identifier:
                keyid:05:49:09:F1:A4:E8:49:6D:22:7A:81:EC:F4:A9:15:4F:1D:93:40:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/054909F1A4E8496D227A81ECF4A9154F1D934057.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/054909F1A4E8496D227A81ECF4A9154F1D934057.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/34352e3139312e33342e302f32342d3234203d3e20323639363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:e4:55:98:5a:21:46:70:98:f8:5a:11:61:ec:12:52:cc:21:
         2a:31:46:91:f6:a7:83:21:7f:84:d5:3c:85:ed:c8:bb:33:d6:
         30:23:8d:ed:25:4a:1d:ec:44:58:a1:1c:a2:07:a7:76:9e:01:
         63:a3:93:3f:a2:33:17:34:0d:42:c0:5c:3e:4c:98:a9:40:c0:
         b7:a4:0a:a3:6c:2d:52:26:57:38:04:11:4e:39:d8:45:77:29:
         58:ad:14:16:8b:67:63:d3:5d:65:db:f7:c6:5b:55:79:5d:82:
         12:53:05:23:f1:28:8d:65:69:c5:c2:9c:d0:24:48:67:84:21:
         5e:f3:a2:89:b8:85:69:e0:da:42:df:8a:44:c5:4d:92:b8:8c:
         ae:ff:fe:24:00:56:55:14:8d:27:c7:ea:f7:4c:f1:49:b4:b3:
         53:b1:fc:ee:27:bc:0e:8b:82:30:34:a5:fd:99:90:93:2c:40:
         a6:72:8d:96:69:3d:a0:f1:48:21:15:ad:89:4b:97:78:3f:e5:
         7f:a8:e0:e1:50:33:c8:84:2f:43:6d:e7:0c:d0:11:48:7d:45:
         cd:e4:cc:0f:b4:2e:5f:ac:d2:f2:c9:36:2c:98:47:d5:ee:13:
         fb:a2:90:ca:13:da:79:81:7e:df:da:59:2e:e6:0f:ff:1e:ed:
         30:8c:6a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 11:14:18 2026 by rpki-client