Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/34352e3136332e34382e302f32322d3234203d3e20323731363232.roa
File:                     34352e3136332e34382e302f32322d3234203d3e20323731363232.roa (raw, json)
Hash identifier:          8+JGd4jKVqHbdrLFhlY1sVMskhm2pXMVUyRs3xinkYo=
Subject key identifier:   C7:14:FA:34:E8:23:57:42:CB:C6:92:C7:8D:2B:90:8D:82:1F:D2:1F
Certificate issuer:       /CN=A0A89B7E46B5F2C12BA2BCC0254B1C026109A4F3
Certificate serial:       7C139D754BDB154BA4A5F578B08128D5F3291710
Authority key identifier: A0:A8:9B:7E:46:B5:F2:C1:2B:A2:BC:C0:25:4B:1C:02:61:09:A4:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0A89B7E46B5F2C12BA2BCC0254B1C026109A4F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/34352e3136332e34382e302f32322d3234203d3e20323731363232.roa
Signing time:             Mon 07 Sep 2026 00:03:26 +0000
ROA not before:           Sun 06 Sep 2026 23:58:26 +0000
ROA not after:            Mon 06 Sep 2027 00:03:26 +0000
asID:                     271622
IP address blocks:        45.163.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/A0A89B7E46B5F2C12BA2BCC0254B1C026109A4F3.crl
                          rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/A0A89B7E46B5F2C12BA2BCC0254B1C026109A4F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0A89B7E46B5F2C12BA2BCC0254B1C026109A4F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 17:59:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:13:9d:75:4b:db:15:4b:a4:a5:f5:78:b0:81:28:d5:f3:29:17:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0A89B7E46B5F2C12BA2BCC0254B1C026109A4F3
        Validity
            Not Before: Sep  6 23:58:26 2026 GMT
            Not After : Sep  6 00:03:26 2027 GMT
        Subject: CN=C714FA34E8235742CBC692C78D2B908D821FD21F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1d:e8:ed:ed:2f:69:8d:84:a7:80:39:89:b3:
                    37:19:8f:3a:bd:30:f8:41:da:79:8d:47:00:1d:82:
                    9a:32:15:72:7d:40:4a:a5:ad:2d:e0:41:a2:5e:ed:
                    ae:dc:03:f8:a2:82:1d:ee:fd:15:04:ad:f5:69:4e:
                    4e:2e:e2:02:2f:5d:af:77:5a:cb:26:c0:21:7d:73:
                    32:62:c1:e0:81:57:fa:7e:20:4a:a1:c8:61:20:e4:
                    77:fe:29:27:2f:43:a7:d4:b0:7d:cc:b9:e1:63:36:
                    8b:d5:d4:64:4c:e6:6c:f6:a6:fc:a4:5e:4d:46:93:
                    7f:76:bd:6c:81:11:07:53:9a:76:17:9d:d1:54:15:
                    cc:16:f0:a7:6b:a1:cd:f7:d1:70:af:f8:e7:f8:14:
                    75:78:4b:d5:e5:83:51:7e:ca:87:b3:26:cc:42:ac:
                    82:b0:f4:7d:18:74:a9:94:56:a0:31:85:7e:f2:c1:
                    f5:85:fe:53:8e:0d:a2:d3:42:31:e4:d8:ea:9d:cf:
                    dc:47:7e:31:29:ff:6e:78:3d:7f:3e:c1:30:db:5b:
                    65:cb:5a:06:c9:76:b9:12:5e:f1:ab:3f:75:13:99:
                    27:37:48:6f:6b:29:a8:71:bb:c7:9d:88:10:72:14:
                    ff:32:b6:79:19:71:81:6e:3a:1a:44:5c:38:0d:10:
                    14:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:14:FA:34:E8:23:57:42:CB:C6:92:C7:8D:2B:90:8D:82:1F:D2:1F
            X509v3 Authority Key Identifier:
                keyid:A0:A8:9B:7E:46:B5:F2:C1:2B:A2:BC:C0:25:4B:1C:02:61:09:A4:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/A0A89B7E46B5F2C12BA2BCC0254B1C026109A4F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0A89B7E46B5F2C12BA2BCC0254B1C026109A4F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/34352e3136332e34382e302f32322d3234203d3e20323731363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         f6:0d:08:c8:a4:77:80:0f:b8:6c:f1:6c:c7:61:90:1b:36:34:
         3f:f1:01:7a:ef:1a:34:8a:de:4f:ac:db:0c:a2:e3:4a:d8:4d:
         56:30:45:14:1e:af:7d:6c:60:46:40:df:c2:f8:0e:52:32:8d:
         61:37:c2:f5:84:81:1c:a1:c3:d4:bc:fb:2b:fc:e5:39:38:73:
         a3:89:ac:0e:3f:3a:cf:23:e1:bd:41:ba:30:c8:2c:14:e3:14:
         c1:3b:36:24:2c:aa:88:08:bf:aa:cf:65:0d:48:23:9d:fe:e1:
         04:f2:09:7d:14:0f:0f:f9:44:94:b0:3e:66:77:a2:df:d8:76:
         59:60:31:39:bf:a8:32:4c:7f:d3:cf:b6:1b:51:be:6a:eb:f7:
         2c:84:cf:6a:4d:9c:bb:a1:1b:ac:9a:85:0b:c2:75:8a:71:1c:
         40:30:6a:8b:dd:f3:00:e9:1b:8b:ea:2f:b2:14:52:34:a1:e7:
         58:f8:2d:6e:8b:a0:c8:5b:aa:0b:58:30:df:49:9b:47:76:be:
         9d:fb:df:23:a7:77:84:90:b9:63:43:5a:e3:db:0e:0f:80:b8:
         e4:1c:6a:ef:b8:fc:33:19:c1:44:50:d2:2f:fc:06:ae:ce:ef:
         fb:b8:ba:58:f4:46:12:7b:68:4d:9c:ed:74:a7:0a:32:eb:df:
         0a:5b:fe:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 01:56:35 2026 by rpki-client