Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/XiMwoM7Q7GRgZrHFvUEeqdjinSeTPYAsAwnmAkgy78q/0/34352e3136382e37362e302f32342d3234203d3e20323638303339.roa
File:                     34352e3136382e37362e302f32342d3234203d3e20323638303339.roa (raw, json)
Hash identifier:          v85DsiKwnTDMfEenselPDxPkAdllGX0Bg7XGIxFgy/c=
Subject key identifier:   9A:04:51:DD:DD:D3:6F:B5:C2:8B:76:E3:BC:39:BC:4D:3E:43:70:59
Certificate issuer:       /CN=B10F605E0A7E07E81FDFD984AEC05A4F6D3F897D
Certificate serial:       28EDEE0339107525BE433689995CD158DB850142
Authority key identifier: B1:0F:60:5E:0A:7E:07:E8:1F:DF:D9:84:AE:C0:5A:4F:6D:3F:89:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B10F605E0A7E07E81FDFD984AEC05A4F6D3F897D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XiMwoM7Q7GRgZrHFvUEeqdjinSeTPYAsAwnmAkgy78q/0/34352e3136382e37362e302f32342d3234203d3e20323638303339.roa
Signing time:             Thu 20 Aug 2026 15:14:18 +0000
ROA not before:           Thu 20 Aug 2026 15:09:18 +0000
ROA not after:            Thu 19 Aug 2027 15:14:18 +0000
asID:                     268039
IP address blocks:        45.168.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/XiMwoM7Q7GRgZrHFvUEeqdjinSeTPYAsAwnmAkgy78q/0/B10F605E0A7E07E81FDFD984AEC05A4F6D3F897D.crl
                          rsync://rpki-repo.registro.br/repo/XiMwoM7Q7GRgZrHFvUEeqdjinSeTPYAsAwnmAkgy78q/0/B10F605E0A7E07E81FDFD984AEC05A4F6D3F897D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B10F605E0A7E07E81FDFD984AEC05A4F6D3F897D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 12:45:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ed:ee:03:39:10:75:25:be:43:36:89:99:5c:d1:58:db:85:01:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B10F605E0A7E07E81FDFD984AEC05A4F6D3F897D
        Validity
            Not Before: Aug 20 15:09:18 2026 GMT
            Not After : Aug 19 15:14:18 2027 GMT
        Subject: CN=9A0451DDDDD36FB5C28B76E3BC39BC4D3E437059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:00:8f:68:3d:5e:79:96:cf:31:b7:f6:f2:c4:
                    40:da:66:dc:66:c5:81:9c:0f:b0:3d:16:5d:82:53:
                    04:75:8a:df:67:02:cc:ee:c4:97:76:33:77:0c:a6:
                    1d:8f:c4:a9:9c:c0:a4:c5:4f:f5:00:0f:e3:12:e9:
                    aa:ff:f0:2f:7c:2a:da:43:fc:1d:34:e2:8e:d7:fd:
                    67:c0:4c:f3:2e:ea:da:4b:00:21:87:aa:8d:a0:4a:
                    07:e7:fa:db:14:e0:e7:1b:72:85:11:2b:eb:76:89:
                    75:8c:f9:70:83:19:b5:1e:24:d5:77:24:66:11:d1:
                    db:a8:f4:58:82:95:de:eb:3f:09:32:ed:f1:a8:ed:
                    82:8e:30:6b:ff:38:d4:8e:1c:f3:2c:76:33:96:9e:
                    a6:d9:13:92:df:80:e6:e6:61:a4:00:43:7d:e3:e1:
                    ac:ea:2c:cd:2d:00:4c:b6:43:53:cb:c9:42:4d:c7:
                    1c:c7:f0:c8:ca:67:9d:ed:97:c8:96:ba:78:a0:1f:
                    fb:f3:17:e6:5e:92:04:59:85:10:32:98:d0:d4:66:
                    d8:37:04:f5:8c:32:e1:e0:89:63:14:ae:91:f2:bc:
                    45:ee:c8:68:13:d9:c9:2e:3a:54:7d:4b:bb:a6:01:
                    3a:96:fa:10:8e:6f:5a:ac:6a:21:d5:51:2d:b6:5f:
                    f9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:04:51:DD:DD:D3:6F:B5:C2:8B:76:E3:BC:39:BC:4D:3E:43:70:59
            X509v3 Authority Key Identifier:
                keyid:B1:0F:60:5E:0A:7E:07:E8:1F:DF:D9:84:AE:C0:5A:4F:6D:3F:89:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XiMwoM7Q7GRgZrHFvUEeqdjinSeTPYAsAwnmAkgy78q/0/B10F605E0A7E07E81FDFD984AEC05A4F6D3F897D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B10F605E0A7E07E81FDFD984AEC05A4F6D3F897D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XiMwoM7Q7GRgZrHFvUEeqdjinSeTPYAsAwnmAkgy78q/0/34352e3136382e37362e302f32342d3234203d3e20323638303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:bc:4d:20:ad:c7:81:d2:ea:03:c1:f3:bc:08:e2:b3:a2:69:
         71:d5:95:9f:2a:33:9c:f4:80:64:d6:50:25:77:e0:88:ad:51:
         22:7c:be:de:a2:03:75:17:eb:33:cb:44:bf:3e:96:61:4e:18:
         f0:13:b8:67:16:37:ed:2b:a6:5e:3c:fd:51:41:f3:d2:c0:a4:
         11:34:9c:b8:92:3d:09:a9:7e:26:70:b8:27:60:a0:15:28:b1:
         dd:10:b7:6e:a2:f1:20:0d:fa:b5:a7:ec:54:af:f4:c6:f2:f5:
         31:38:c0:a3:bb:06:87:bc:34:bc:3f:b3:6b:d9:78:b4:a0:ac:
         e2:91:d7:4a:f1:a8:5b:96:f1:50:d3:48:be:3a:24:ab:a2:38:
         29:44:66:09:73:95:a0:96:9f:26:5e:92:1f:3e:bd:d6:4f:1c:
         f1:2f:f8:d5:17:68:18:7e:86:34:d0:76:39:17:dd:5a:7d:bc:
         f2:9d:b5:09:d9:43:d1:4a:92:e6:d1:5f:a6:49:8c:ab:8a:1d:
         d6:48:45:07:60:35:26:10:e1:bc:67:ee:84:9a:c4:cf:ba:a0:
         e8:78:72:3a:04:bf:08:16:9a:0b:df:1c:c5:fb:ed:b5:cb:1b:
         4e:5f:d0:b7:60:36:fb:b2:fe:90:04:f3:0c:37:05:87:84:a6:
         29:2c:dc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:10:57 2026 by rpki-client