Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/34352e3137382e32322e302f32332d3233203d3e20323639303135.roa
File:                     34352e3137382e32322e302f32332d3233203d3e20323639303135.roa (raw, json)
Hash identifier:          pYV8Aad2n+WHlqvMTeRuf+9bGXVpEs+77zMmUJiOKVw=
Subject key identifier:   5A:EC:54:63:F7:84:B3:47:53:36:A0:B0:00:EF:5E:C2:D2:50:8F:F3
Certificate issuer:       /CN=13DCDD1FDB5AE567970EF8DEDB378C1FDCE84185
Certificate serial:       259E5925C28E893AF5E2B1084E159BA1A83355DF
Authority key identifier: 13:DC:DD:1F:DB:5A:E5:67:97:0E:F8:DE:DB:37:8C:1F:DC:E8:41:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13DCDD1FDB5AE567970EF8DEDB378C1FDCE84185.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/34352e3137382e32322e302f32332d3233203d3e20323639303135.roa
Signing time:             Thu 01 Oct 2026 14:48:44 +0000
ROA not before:           Thu 01 Oct 2026 14:43:44 +0000
ROA not after:            Thu 30 Sep 2027 14:48:44 +0000
asID:                     269015
IP address blocks:        45.178.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/13DCDD1FDB5AE567970EF8DEDB378C1FDCE84185.crl
                          rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/13DCDD1FDB5AE567970EF8DEDB378C1FDCE84185.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13DCDD1FDB5AE567970EF8DEDB378C1FDCE84185.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 14:52:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:9e:59:25:c2:8e:89:3a:f5:e2:b1:08:4e:15:9b:a1:a8:33:55:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13DCDD1FDB5AE567970EF8DEDB378C1FDCE84185
        Validity
            Not Before: Oct  1 14:43:44 2026 GMT
            Not After : Sep 30 14:48:44 2027 GMT
        Subject: CN=5AEC5463F784B3475336A0B000EF5EC2D2508FF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b3:b5:e4:96:5b:2e:a9:66:57:db:6e:09:e9:
                    24:bf:47:81:5a:66:ac:82:59:7a:d7:27:c9:35:87:
                    3c:e4:c8:70:6b:d4:dc:2c:b5:55:e7:34:c1:3c:46:
                    53:08:ed:41:8d:3a:11:43:88:ad:fa:a8:f2:ec:f6:
                    5b:0f:12:10:a1:3f:b2:8b:df:2c:76:84:d9:a0:c4:
                    f3:a0:30:82:48:50:69:02:6c:48:de:f4:ed:9f:9e:
                    b3:12:f6:d4:bc:a4:f9:0d:fd:c9:14:70:0a:bd:74:
                    a3:77:94:2b:da:3d:e7:35:47:a1:92:54:7b:50:d3:
                    70:26:9b:11:eb:59:94:6d:6a:7d:1c:fc:ae:2b:da:
                    ee:e2:5e:ea:20:89:d2:a5:23:bf:68:4f:99:33:6f:
                    2d:71:32:85:65:8b:87:2f:9e:84:7f:7f:01:6c:31:
                    eb:31:44:f5:52:cf:bd:5d:c5:c0:c2:f1:f1:9a:22:
                    6d:68:a8:6a:b7:36:f6:2f:ff:ce:2d:4d:5d:c2:f7:
                    30:62:43:92:c7:9b:39:b4:cf:c0:ef:53:5f:89:af:
                    82:fa:78:dc:63:7a:da:63:09:73:1d:fe:a3:7e:45:
                    23:5a:70:5f:24:9e:83:db:14:8b:13:db:be:af:4f:
                    f7:2b:58:72:fd:18:db:6c:0e:fd:f7:72:be:b5:25:
                    a0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:EC:54:63:F7:84:B3:47:53:36:A0:B0:00:EF:5E:C2:D2:50:8F:F3
            X509v3 Authority Key Identifier:
                keyid:13:DC:DD:1F:DB:5A:E5:67:97:0E:F8:DE:DB:37:8C:1F:DC:E8:41:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/13DCDD1FDB5AE567970EF8DEDB378C1FDCE84185.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13DCDD1FDB5AE567970EF8DEDB378C1FDCE84185.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/34352e3137382e32322e302f32332d3233203d3e20323639303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:e7:39:a0:e8:08:21:79:13:85:72:45:55:7a:7f:8e:d8:3e:
         57:62:3b:fa:e2:1d:f3:a0:6d:59:db:5f:5d:d8:ae:a2:8f:af:
         ff:43:7d:2c:57:13:40:3d:25:52:aa:72:ac:a4:4b:5c:df:a2:
         da:4b:c8:b9:13:be:23:f0:0a:ba:01:d3:5d:75:22:92:a7:f0:
         3a:d8:3f:5c:e5:6b:c7:ad:ab:3d:df:42:6b:43:1e:43:a4:68:
         e1:0b:54:36:14:72:c4:1d:0e:7a:a2:ce:dc:45:b2:d1:40:d8:
         66:b5:a3:44:9b:8b:d7:1a:8c:36:9c:0e:c0:42:e0:a4:ca:1a:
         78:76:45:03:cc:e4:3c:df:96:27:17:87:57:b9:a0:15:74:50:
         65:48:fe:fb:66:01:22:87:e2:ef:ac:9d:5c:60:2c:9c:23:37:
         12:f3:35:e2:3c:ea:09:91:4f:fa:48:88:43:a9:eb:f9:08:54:
         f4:54:57:a5:bb:87:dc:2b:2c:d9:46:5e:e3:b1:67:89:02:93:
         ee:8e:d9:e5:27:c7:6f:88:5e:f1:67:b8:ae:c2:b6:25:f9:a8:
         31:89:83:db:4a:1b:3f:26:0b:98:4e:57:be:4d:9d:eb:07:a1:
         49:c0:c5:89:a0:54:2f:be:6b:c9:95:6c:88:7b:79:bd:3f:04:
         cc:cb:39:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:07:20 2026 by rpki-client