Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/34352e3233312e3137352e302f32342d3234203d3e203631363138.roa
File:                     34352e3233312e3137352e302f32342d3234203d3e203631363138.roa (raw, json)
Hash identifier:          xgzhZNjyAU2AYRaQeZhHN4rt6buy8SVJw3Lk6X/Hd/k=
Subject key identifier:   F1:51:2A:0A:93:6D:33:94:55:67:FE:A6:E7:4B:EE:46:EE:AF:C8:59
Certificate issuer:       /CN=749E21CDD000362F14CB5C6E5B975EFE08776886
Certificate serial:       08225B60A14B605EB611A19416A44C0A517FA717
Authority key identifier: 74:9E:21:CD:D0:00:36:2F:14:CB:5C:6E:5B:97:5E:FE:08:77:68:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/749E21CDD000362F14CB5C6E5B975EFE08776886.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/34352e3233312e3137352e302f32342d3234203d3e203631363138.roa
Signing time:             Fri 30 Oct 2026 17:20:25 +0000
ROA not before:           Fri 30 Oct 2026 17:15:25 +0000
ROA not after:            Fri 29 Oct 2027 17:20:25 +0000
asID:                     61618
IP address blocks:        45.231.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/749E21CDD000362F14CB5C6E5B975EFE08776886.crl
                          rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/749E21CDD000362F14CB5C6E5B975EFE08776886.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/749E21CDD000362F14CB5C6E5B975EFE08776886.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 22:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:22:5b:60:a1:4b:60:5e:b6:11:a1:94:16:a4:4c:0a:51:7f:a7:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749E21CDD000362F14CB5C6E5B975EFE08776886
        Validity
            Not Before: Oct 30 17:15:25 2026 GMT
            Not After : Oct 29 17:20:25 2027 GMT
        Subject: CN=F1512A0A936D33945567FEA6E74BEE46EEAFC859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:4d:b7:73:4c:4b:02:8a:e6:ee:2a:2b:0a:dd:
                    af:8a:cb:8f:f7:5f:87:7e:8e:ac:c8:30:8d:17:1c:
                    38:48:61:d7:de:70:db:3e:52:1a:58:34:45:03:12:
                    8a:3b:6a:fb:9b:2e:20:44:c8:ab:cb:dc:b5:b9:ee:
                    6c:96:2a:d7:58:ef:6b:7d:9d:c3:87:d4:4e:da:98:
                    4a:07:97:ae:5a:49:ee:85:af:60:8e:eb:ee:1f:11:
                    5a:e9:b1:72:b5:e9:39:82:5c:bb:db:d5:32:8b:8a:
                    99:db:a2:d0:60:93:56:ea:d7:bb:f6:77:78:fd:ef:
                    f8:5e:63:b5:e9:8a:b4:74:6d:9d:7a:78:46:3b:25:
                    e3:92:6f:ac:b9:e2:f0:ed:e0:c0:25:9a:af:a8:cf:
                    b8:e4:21:e4:58:32:7f:f3:03:27:b2:7f:96:37:8a:
                    74:68:ed:ed:65:ea:ee:de:0f:d9:5b:aa:dd:90:da:
                    94:25:c3:68:af:20:24:95:f3:cf:a1:a9:4a:ae:9a:
                    9b:7a:5a:9e:41:7e:0c:3c:19:94:2a:d8:ed:b2:37:
                    42:47:62:ed:3a:63:27:39:2e:83:82:a2:d1:2c:d9:
                    9b:cc:1e:18:12:d6:16:3b:7f:ab:5e:f5:ef:3c:02:
                    f9:9a:c4:ec:d1:93:b1:82:db:a2:41:ac:b1:1b:cd:
                    87:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:51:2A:0A:93:6D:33:94:55:67:FE:A6:E7:4B:EE:46:EE:AF:C8:59
            X509v3 Authority Key Identifier:
                keyid:74:9E:21:CD:D0:00:36:2F:14:CB:5C:6E:5B:97:5E:FE:08:77:68:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/749E21CDD000362F14CB5C6E5B975EFE08776886.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/749E21CDD000362F14CB5C6E5B975EFE08776886.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/34352e3233312e3137352e302f32342d3234203d3e203631363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:9c:d4:a1:9e:5b:cc:61:8c:5b:f5:7d:ec:c9:cf:1e:16:66:
         28:7e:52:ea:ab:ad:50:b9:9f:83:da:7c:8d:f8:04:f2:28:6b:
         e9:e3:b1:dd:c4:87:a7:9d:64:de:d4:b3:b6:65:16:de:fb:ef:
         30:68:77:20:7d:76:a0:b2:51:ea:2f:b8:9d:8d:0e:28:b5:ea:
         bd:1d:3b:a3:e0:24:a8:09:19:04:d0:46:e1:55:c2:b9:32:29:
         0c:7f:65:0d:eb:d8:bb:e8:e7:ab:6a:6a:80:c4:2d:df:4d:ae:
         e9:f7:6a:47:3f:f5:87:94:f8:d5:bf:cd:ec:af:01:2f:48:2f:
         11:9b:a4:20:c6:9e:4b:72:14:1f:cd:b2:75:4d:a0:61:74:9f:
         f7:45:b8:4b:26:9b:5a:fa:84:df:fe:fc:2e:26:c4:25:dd:fc:
         12:72:02:b0:f8:a1:d6:68:57:99:e3:f0:48:81:00:3c:7c:a6:
         19:b1:d6:7a:bf:37:93:a1:fb:92:fe:88:c5:d8:17:37:38:90:
         8e:a6:70:82:f9:ec:61:40:23:cf:92:c6:1b:ea:39:02:3d:14:
         11:36:a4:3f:20:25:ea:6d:1a:9c:6c:bc:7e:d6:39:da:b1:c4:
         fa:b6:7d:bd:c4:04:2f:ff:9b:b1:93:b1:c6:88:48:0f:32:7f:
         9e:d2:4c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 12:53:14 2026 by rpki-client