Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/34352e3233322e382e302f32322d3234203d3e20323637323831.roa
File:                     34352e3233322e382e302f32322d3234203d3e20323637323831.roa (raw, json)
Hash identifier:          oLybo33H6deIoQLGJ9bEH5/sFcpy03wLiW1e+PYIJ1w=
Subject key identifier:   51:F6:11:30:95:FD:76:5D:60:88:77:1A:F4:5D:9C:2A:BE:E3:BB:2E
Certificate issuer:       /CN=0FF30EC686201018DE081110542623BAED2ADF49
Certificate serial:       0537167747ACA948E76F7C23C6F03C3D4C4B2D3D
Authority key identifier: 0F:F3:0E:C6:86:20:10:18:DE:08:11:10:54:26:23:BA:ED:2A:DF:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FF30EC686201018DE081110542623BAED2ADF49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/34352e3233322e382e302f32322d3234203d3e20323637323831.roa
Signing time:             Tue 15 Sep 2026 19:26:00 +0000
ROA not before:           Tue 15 Sep 2026 19:21:00 +0000
ROA not after:            Tue 14 Sep 2027 19:26:00 +0000
asID:                     267281
IP address blocks:        45.232.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/0FF30EC686201018DE081110542623BAED2ADF49.crl
                          rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/0FF30EC686201018DE081110542623BAED2ADF49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FF30EC686201018DE081110542623BAED2ADF49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 07:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:37:16:77:47:ac:a9:48:e7:6f:7c:23:c6:f0:3c:3d:4c:4b:2d:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FF30EC686201018DE081110542623BAED2ADF49
        Validity
            Not Before: Sep 15 19:21:00 2026 GMT
            Not After : Sep 14 19:26:00 2027 GMT
        Subject: CN=51F6113095FD765D6088771AF45D9C2ABEE3BB2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4b:7b:f1:20:44:e7:aa:e7:b7:1a:ba:ea:7a:
                    ab:54:80:90:58:9b:5f:ed:c0:79:bb:ce:00:3e:36:
                    b2:01:f8:09:2c:0e:15:57:fa:73:1f:a9:d0:50:1c:
                    12:2a:4e:13:2f:2e:9c:60:39:b4:1b:67:d7:83:70:
                    af:ff:df:d2:d9:6b:14:ec:40:51:2e:e6:96:e8:26:
                    2f:fb:93:8a:bd:93:0c:fe:0a:1c:3b:ba:2f:00:e8:
                    ba:da:7c:b5:4a:df:33:ff:1d:42:2b:d9:f7:b3:2c:
                    ac:8c:b0:11:58:fb:eb:63:aa:0c:d7:a1:e7:f8:32:
                    22:0b:65:bf:d8:4e:0e:3e:6d:35:5a:7d:3a:d7:e0:
                    c7:90:a7:80:38:87:e2:76:b2:6e:1b:e3:ed:f2:62:
                    5e:fc:c1:94:40:3b:74:d4:62:29:5d:b3:d9:7f:2b:
                    39:03:d7:e5:cf:1d:c6:d1:08:10:32:e5:56:c4:92:
                    d2:75:ab:a8:ca:51:c9:e6:43:47:86:da:03:c8:b9:
                    3b:0f:ed:33:83:96:1a:de:f4:58:d9:6b:56:d3:91:
                    14:fe:a4:24:2e:46:82:53:f7:fe:f8:60:66:b0:aa:
                    87:56:77:2c:4d:20:b5:6c:71:7e:fa:d6:06:ed:8b:
                    81:ea:f5:2b:6e:86:30:a3:3d:4a:65:62:0f:b3:8e:
                    6d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F6:11:30:95:FD:76:5D:60:88:77:1A:F4:5D:9C:2A:BE:E3:BB:2E
            X509v3 Authority Key Identifier:
                keyid:0F:F3:0E:C6:86:20:10:18:DE:08:11:10:54:26:23:BA:ED:2A:DF:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/0FF30EC686201018DE081110542623BAED2ADF49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FF30EC686201018DE081110542623BAED2ADF49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/34352e3233322e382e302f32322d3234203d3e20323637323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:ad:82:ce:50:15:17:9d:fe:b3:a6:50:12:dc:49:7e:29:f6:
         e9:48:a6:ac:51:a9:42:91:f7:fa:f5:d0:15:41:a2:90:38:ed:
         5a:7e:41:16:69:a9:0f:07:6c:b5:03:0f:c7:47:86:e5:34:10:
         a7:14:bb:57:fa:ac:65:46:1d:fd:e7:8c:cb:d5:c2:fb:9b:49:
         c4:6b:7c:90:c2:f5:62:07:a9:c8:26:58:30:ed:2a:9e:51:45:
         5a:a6:2b:26:bc:c5:87:ab:37:d5:eb:fc:2e:02:ed:60:ae:a9:
         52:c6:b0:15:f7:d6:90:56:b3:b1:01:84:cb:3f:45:51:19:b6:
         85:ec:01:6b:24:a4:5d:e2:5f:6d:1e:e0:0e:9e:43:36:d3:06:
         3e:c8:0f:b4:96:7f:de:82:0b:36:2d:bd:0d:f8:2a:5f:b2:de:
         91:59:aa:97:c1:4c:b4:10:ae:12:a2:9e:27:09:70:f8:cf:e7:
         a2:04:46:b3:ba:77:6b:c0:3d:16:f7:46:bd:26:fc:b2:5f:98:
         d3:3e:28:43:3e:6e:aa:07:1f:19:87:15:10:12:b2:d1:88:27:
         55:2a:90:22:d2:49:37:ba:7d:a6:0b:bd:80:10:36:cb:36:0b:
         b7:50:41:2b:48:9b:a9:53:32:4e:35:3e:1d:fe:5c:79:02:80:
         cb:20:a3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 16:50:30 2026 by rpki-client