Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/34352e3136342e3130342e302f32322d3232203d3e20323633333238.roa
File:                     34352e3136342e3130342e302f32322d3232203d3e20323633333238.roa (raw, json)
Hash identifier:          /TgEnPGJKA7vS8/s5Qfox3bmzS0KkzPmnRhsmck3g8I=
Subject key identifier:   9F:30:7E:E5:40:D8:DB:6E:6C:1E:AD:EF:C2:B7:18:D1:F0:C8:26:4D
Certificate issuer:       /CN=2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC
Certificate serial:       0A9B7D7D8A14AA72F1A3DC8EF6D6F08CA025543B
Authority key identifier: 2E:B5:29:B0:ED:AE:44:7E:3F:0B:C4:18:52:21:ED:03:94:CF:C7:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/34352e3136342e3130342e302f32322d3232203d3e20323633333238.roa
Signing time:             Sat 05 Sep 2026 13:53:28 +0000
ROA not before:           Sat 05 Sep 2026 13:48:28 +0000
ROA not after:            Sat 04 Sep 2027 13:53:28 +0000
asID:                     263328
IP address blocks:        45.164.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.crl
                          rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 09:17:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:9b:7d:7d:8a:14:aa:72:f1:a3:dc:8e:f6:d6:f0:8c:a0:25:54:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC
        Validity
            Not Before: Sep  5 13:48:28 2026 GMT
            Not After : Sep  4 13:53:28 2027 GMT
        Subject: CN=9F307EE540D8DB6E6C1EADEFC2B718D1F0C8264D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:77:7d:00:26:0d:2a:55:3d:51:cc:74:61:0e:
                    fe:e3:be:ba:f7:1d:db:23:59:84:74:45:ad:a0:6d:
                    41:13:d6:66:ab:4b:8a:96:f4:34:58:c3:6d:d2:28:
                    aa:1f:cc:06:54:72:38:18:86:12:cd:cf:b5:d6:4b:
                    a8:cd:e6:a4:b3:6b:6f:d5:17:aa:5b:c9:f1:36:8c:
                    35:b1:81:49:67:c0:8f:43:f7:a6:88:8b:48:df:44:
                    fb:c0:a3:5b:7f:75:11:ac:87:5f:24:e3:3d:0d:db:
                    cd:ef:6e:9a:8a:af:02:09:fe:b8:62:46:a1:a1:5f:
                    68:72:ce:0c:0c:1a:34:ab:1b:d6:24:4a:de:72:16:
                    d9:4b:34:77:98:5f:d9:da:46:b5:c7:03:6b:94:cd:
                    e6:c2:89:ac:38:d6:9d:a2:78:a4:2c:6c:c9:72:9b:
                    8a:34:ba:82:22:4e:68:98:28:66:87:29:72:c4:bd:
                    66:9c:f8:91:d6:f5:70:db:8f:64:99:e4:7d:12:af:
                    00:cb:48:2c:1a:d2:7a:e4:c0:92:3b:62:c1:51:b0:
                    73:98:e9:21:ef:5f:f3:37:a2:5a:14:5a:39:a9:65:
                    0e:07:1f:24:63:0b:9c:d8:87:68:41:5b:56:39:56:
                    6d:ab:91:45:79:50:c9:d5:62:34:d1:7c:a0:fd:8c:
                    de:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:30:7E:E5:40:D8:DB:6E:6C:1E:AD:EF:C2:B7:18:D1:F0:C8:26:4D
            X509v3 Authority Key Identifier:
                keyid:2E:B5:29:B0:ED:AE:44:7E:3F:0B:C4:18:52:21:ED:03:94:CF:C7:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/34352e3136342e3130342e302f32322d3232203d3e20323633333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d5:9d:1c:71:00:64:35:4b:e7:36:18:bf:c1:80:82:3c:cd:68:
         75:2c:de:22:d0:62:8b:13:bf:62:dd:20:c8:02:96:78:b9:39:
         51:d9:be:db:80:ea:e3:26:15:08:ee:8c:39:c5:53:fb:33:13:
         bd:58:d0:6f:12:a6:5e:e6:18:70:86:81:b0:e9:34:20:a7:34:
         1c:43:f0:a2:b2:59:76:1b:32:14:e5:c1:9e:3c:88:59:5a:09:
         54:17:9c:03:b6:e6:86:0e:ce:fc:2a:f4:33:d9:77:ff:14:c4:
         42:d7:cd:06:28:d4:27:78:b5:68:6b:c4:dc:6d:dd:08:02:58:
         b1:31:0e:4f:66:bf:05:8a:69:b5:43:c5:ea:38:e2:4c:f9:f4:
         52:ed:40:84:b7:1d:37:49:31:27:cb:1a:31:d2:48:b0:8b:35:
         4f:08:61:7b:39:68:59:6e:43:95:b5:6b:9f:c4:c4:0f:f7:3a:
         98:8e:7f:4b:2b:5a:f0:35:da:57:46:b7:e7:6c:cd:50:a2:c7:
         bd:1a:33:4b:dd:56:11:15:66:d9:f0:f4:2e:93:22:9f:b0:0e:
         f0:5a:8c:15:b4:5c:9a:23:39:cf:55:99:4a:19:84:2a:fb:e3:
         04:79:8c:73:07:04:58:71:5e:1e:d9:fd:f6:66:c6:84:3d:e2:
         ef:b7:97:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 17:00:26 2026 by rpki-client