Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35312e302f32342d3234203d3e20323637323536.roa
File:                     34352e3233322e35312e302f32342d3234203d3e20323637323536.roa (raw, json)
Hash identifier:          Wt8wZRFPIlsrpWvcmCZI9HxwbuBHPTq8AUFhKs8nY70=
Subject key identifier:   34:05:FE:59:87:69:D5:43:E6:8C:22:77:DA:66:CF:D5:E7:E5:EC:74
Certificate issuer:       /CN=98C32DA35A01A858C3208E640EEE64F9F85DBC4C
Certificate serial:       7CD2095404F2ADDCE94EDE0D3D298C8D6AF51523
Authority key identifier: 98:C3:2D:A3:5A:01:A8:58:C3:20:8E:64:0E:EE:64:F9:F8:5D:BC:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98C32DA35A01A858C3208E640EEE64F9F85DBC4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35312e302f32342d3234203d3e20323637323536.roa
Signing time:             Sat 29 Aug 2026 22:10:20 +0000
ROA not before:           Sat 29 Aug 2026 22:05:20 +0000
ROA not after:            Sat 28 Aug 2027 22:10:20 +0000
asID:                     267256
IP address blocks:        45.232.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/98C32DA35A01A858C3208E640EEE64F9F85DBC4C.crl
                          rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/98C32DA35A01A858C3208E640EEE64F9F85DBC4C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98C32DA35A01A858C3208E640EEE64F9F85DBC4C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 07:55:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d2:09:54:04:f2:ad:dc:e9:4e:de:0d:3d:29:8c:8d:6a:f5:15:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98C32DA35A01A858C3208E640EEE64F9F85DBC4C
        Validity
            Not Before: Aug 29 22:05:20 2026 GMT
            Not After : Aug 28 22:10:20 2027 GMT
        Subject: CN=3405FE598769D543E68C2277DA66CFD5E7E5EC74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:29:3a:b6:df:4a:69:08:09:94:2a:e9:38:34:
                    22:aa:84:e6:8c:44:28:23:12:7b:72:41:f9:89:db:
                    42:4c:49:35:4e:ef:23:f0:5c:81:b9:15:2d:bd:5f:
                    f1:3a:a7:99:fc:b1:5e:f1:d0:16:df:0a:a5:bc:64:
                    ed:12:6c:4a:ae:14:3c:86:ce:69:a9:0e:5f:d3:5c:
                    16:ed:4d:d9:60:4d:65:ad:72:53:96:f1:ac:06:dc:
                    a5:cc:f8:55:8d:5b:99:c0:94:1b:64:c2:82:94:c2:
                    87:c4:96:10:46:4a:87:69:48:ae:b6:d2:a4:b0:29:
                    3f:6c:06:7d:d4:2e:bc:5b:a8:48:be:0c:34:00:e3:
                    7e:32:66:2d:42:ef:ef:22:de:b1:fc:5f:03:49:c7:
                    40:11:9b:22:32:31:59:ff:0b:9a:21:4e:57:b5:93:
                    2c:08:3f:61:dc:5f:8a:25:b2:0b:85:c6:6a:c8:fc:
                    76:db:37:53:ea:6e:a4:50:52:1c:4c:dd:1a:77:ef:
                    17:64:89:c6:67:08:e7:62:29:d8:16:d5:19:ae:2d:
                    7b:d2:8a:df:59:77:e2:ee:77:ea:f6:54:3a:3a:2a:
                    0f:14:96:51:f0:da:75:1f:be:69:f3:7f:7f:31:e1:
                    dc:aa:df:76:65:28:66:7d:8f:34:31:03:97:f2:b4:
                    5a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:05:FE:59:87:69:D5:43:E6:8C:22:77:DA:66:CF:D5:E7:E5:EC:74
            X509v3 Authority Key Identifier:
                keyid:98:C3:2D:A3:5A:01:A8:58:C3:20:8E:64:0E:EE:64:F9:F8:5D:BC:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/98C32DA35A01A858C3208E640EEE64F9F85DBC4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98C32DA35A01A858C3208E640EEE64F9F85DBC4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35312e302f32342d3234203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:6c:0e:2a:e7:6b:a0:47:ef:ac:a6:f0:e0:13:de:9c:29:f6:
         e7:ec:47:a8:27:04:ae:f5:66:48:77:d9:da:9e:1c:2c:ac:83:
         98:27:ac:65:db:20:f4:e5:b8:8e:3d:20:6c:21:19:50:68:27:
         1d:67:7e:31:ea:27:65:07:0d:ae:e4:ad:cc:40:8e:0f:dd:17:
         5b:e5:a9:36:e1:65:5c:0b:d2:c4:ee:df:86:ca:7a:15:30:db:
         61:ec:35:a3:a1:b3:bc:e4:8b:1e:4e:dd:d4:62:a6:ae:61:70:
         56:28:9e:19:0f:30:47:a2:b9:67:10:b3:70:2a:13:56:cd:89:
         d6:83:50:3f:20:a2:7a:70:95:dc:9e:6b:eb:53:d0:3a:e5:8d:
         44:62:1a:73:c4:ac:36:2c:d1:85:24:2b:94:59:60:1b:cd:16:
         4d:69:b0:5b:af:7c:00:78:30:3e:4e:86:ab:db:de:4a:f3:c2:
         0d:a0:33:00:26:a8:12:ba:c1:e9:2b:c3:e1:db:3f:c7:bd:3b:
         84:c8:90:a2:1b:4f:58:53:75:1f:c5:94:ab:8b:fd:81:2e:74:
         02:f1:a1:28:f9:25:6d:b7:6c:7f:79:76:f2:14:4d:8e:81:ca:
         e1:a2:fa:c8:25:e8:3e:df:02:d2:9f:1f:98:d3:98:fd:b6:f7:
         86:e3:73:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 22:36:11 2026 by rpki-client