Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/34352e3137342e3132302e302f32322d3332203d3e203631373132.roa
File:                     34352e3137342e3132302e302f32322d3332203d3e203631373132.roa (raw, json)
Hash identifier:          XnAbJDmNEOUL1awd10sF6PBy5YrhNDacYnuxLrbdXxg=
Subject key identifier:   91:60:CA:28:70:C5:4E:5F:AD:A5:8F:13:38:11:97:67:65:65:E7:8C
Certificate issuer:       /CN=1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4
Certificate serial:       239E6E38CF0F36F2FA5121C78F6111295D9FAA4F
Authority key identifier: 1B:4F:7D:2D:BF:96:AE:DC:02:CE:1B:01:93:F9:64:E6:26:C1:8D:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/34352e3137342e3132302e302f32322d3332203d3e203631373132.roa
Signing time:             Mon 31 Aug 2026 13:30:49 +0000
ROA not before:           Mon 31 Aug 2026 13:25:49 +0000
ROA not after:            Mon 30 Aug 2027 13:30:49 +0000
asID:                     61712
IP address blocks:        45.174.120.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.crl
                          rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 14:31:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:9e:6e:38:cf:0f:36:f2:fa:51:21:c7:8f:61:11:29:5d:9f:aa:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4
        Validity
            Not Before: Aug 31 13:25:49 2026 GMT
            Not After : Aug 30 13:30:49 2027 GMT
        Subject: CN=9160CA2870C54E5FADA58F13381197676565E78C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0f:e3:1a:9c:b0:20:ea:f3:e7:70:f4:0c:2d:
                    67:a1:15:e1:75:93:e6:89:62:a8:a4:be:77:a5:0d:
                    8b:71:b4:ed:07:65:d3:1d:e4:86:86:9d:83:e2:9c:
                    9d:04:62:30:5f:98:c4:10:27:cf:09:30:6b:dd:26:
                    dd:e5:6b:a4:ca:cc:79:28:86:8f:3a:3e:30:6d:d9:
                    ff:d3:e4:72:cf:d9:0a:03:cd:5a:82:67:0a:ef:1d:
                    47:b2:f1:b1:12:82:7f:5c:bd:f6:ff:78:d1:da:95:
                    7c:c1:19:95:77:a8:be:51:a3:a7:bd:a7:92:bc:8e:
                    cd:1f:16:13:cc:76:51:c6:06:d4:53:58:0d:d0:b4:
                    b2:6a:d5:a8:af:70:f0:f6:10:35:53:2d:d7:4a:a1:
                    94:b0:cc:52:d6:2c:66:34:69:4c:fa:e0:ed:e9:11:
                    28:84:d1:e8:1f:83:f1:ab:dd:bc:c5:e6:ea:e5:a9:
                    2e:03:1c:10:71:29:3f:99:4c:d3:f1:ee:ad:66:be:
                    1f:54:8d:25:77:96:9d:20:78:d6:d1:20:f1:dc:30:
                    fb:ef:cd:05:c0:7f:c8:42:25:6d:dd:53:a3:00:79:
                    73:83:76:84:17:a0:5f:a4:e2:3f:8e:2f:ef:f2:14:
                    30:6c:89:1d:9d:94:28:46:3c:41:2a:3c:ce:2f:97:
                    40:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:60:CA:28:70:C5:4E:5F:AD:A5:8F:13:38:11:97:67:65:65:E7:8C
            X509v3 Authority Key Identifier:
                keyid:1B:4F:7D:2D:BF:96:AE:DC:02:CE:1B:01:93:F9:64:E6:26:C1:8D:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/34352e3137342e3132302e302f32322d3332203d3e203631373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:fe:89:9a:6c:b4:5f:61:bb:ea:84:1c:56:98:f1:0b:00:bf:
         b7:5f:7b:a8:9a:93:32:ed:42:29:d5:4c:fb:e9:9d:1c:c0:75:
         58:03:ae:ad:05:83:a8:09:27:28:a4:2e:97:2a:cd:16:73:b6:
         e0:b2:98:1b:3d:b5:74:2c:8b:0d:bc:df:04:fd:36:07:c5:0b:
         17:e1:fa:c1:aa:73:22:0e:2f:86:25:41:4d:d3:50:c2:22:f9:
         69:3f:4c:ac:82:99:56:a2:84:f7:df:c6:b5:ec:15:ef:7b:63:
         20:35:20:08:28:88:1c:dd:fc:ff:b7:c4:43:2b:d5:2f:7d:f3:
         94:f3:aa:52:ee:7b:32:ec:70:ca:6f:71:bd:87:3a:60:b3:06:
         3a:68:49:13:a4:aa:36:91:42:ab:2d:33:9c:fc:3a:08:f0:45:
         63:6f:99:c6:e0:5d:e8:34:4e:9e:a8:57:16:73:aa:80:5b:08:
         b8:9a:f7:96:bb:3a:f7:64:14:2c:44:7f:06:53:97:88:b5:94:
         10:a4:c0:54:9c:a8:6f:be:42:49:2f:8e:94:16:f0:17:57:31:
         97:b3:09:49:a5:90:bd:73:3c:30:90:04:3e:24:98:72:c3:3c:
         7a:2d:f9:62:f8:13:56:1c:c7:9d:7a:2e:48:d7:db:73:7a:0f:
         b0:66:1a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 02:03:51 2026 by rpki-client