Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/34352e3137382e3230342e302f32322d3234203d3e20323639303536.roa
File:                     34352e3137382e3230342e302f32322d3234203d3e20323639303536.roa (raw, json)
Hash identifier:          H4dHK63Gs0gch9yaxruL7rF1RaUyb7bzq/4ji1z4z4A=
Subject key identifier:   B4:E2:81:12:CE:F1:F4:A9:5B:F9:EB:1C:9E:C2:2B:ED:25:FC:19:A3
Certificate issuer:       /CN=4AE7973F0FE2F2A9FFF6DF3F24D387F3B7E14EFB
Certificate serial:       65986F98956F4562A576D9F19D906D27B1C184DE
Authority key identifier: 4A:E7:97:3F:0F:E2:F2:A9:FF:F6:DF:3F:24:D3:87:F3:B7:E1:4E:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AE7973F0FE2F2A9FFF6DF3F24D387F3B7E14EFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/34352e3137382e3230342e302f32322d3234203d3e20323639303536.roa
Signing time:             Thu 10 Sep 2026 20:17:42 +0000
ROA not before:           Thu 10 Sep 2026 20:12:42 +0000
ROA not after:            Thu 09 Sep 2027 20:17:42 +0000
asID:                     269056
IP address blocks:        45.178.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/4AE7973F0FE2F2A9FFF6DF3F24D387F3B7E14EFB.crl
                          rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/4AE7973F0FE2F2A9FFF6DF3F24D387F3B7E14EFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AE7973F0FE2F2A9FFF6DF3F24D387F3B7E14EFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 18:05:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:98:6f:98:95:6f:45:62:a5:76:d9:f1:9d:90:6d:27:b1:c1:84:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AE7973F0FE2F2A9FFF6DF3F24D387F3B7E14EFB
        Validity
            Not Before: Sep 10 20:12:42 2026 GMT
            Not After : Sep  9 20:17:42 2027 GMT
        Subject: CN=B4E28112CEF1F4A95BF9EB1C9EC22BED25FC19A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:16:07:59:98:ab:3f:ec:34:7e:b2:42:f1:6f:
                    12:d5:8f:b8:4f:7f:ab:58:e0:90:b9:3b:c2:a9:49:
                    26:cd:ee:4b:a9:3d:29:6b:6a:f6:5d:ec:d9:2c:cc:
                    cf:0c:7f:b4:ca:8a:b4:40:a2:fd:a4:be:88:46:b6:
                    6b:52:51:12:7f:cb:47:9e:43:6e:d3:fc:76:6c:05:
                    d7:98:73:b1:59:c1:55:7f:f7:0c:86:ab:b2:75:40:
                    d8:3e:b8:ca:da:96:e2:a6:d8:73:9d:29:aa:56:c7:
                    42:33:2f:32:4f:23:1a:fe:8e:6a:a6:2b:f7:30:f6:
                    4f:fa:f2:08:5a:a6:b3:17:6b:42:d4:7f:2c:0e:30:
                    13:82:b2:dd:e9:e6:41:48:59:e8:95:e7:48:81:42:
                    dc:83:9d:05:f3:0b:7a:07:23:0f:0d:b9:4c:f3:0e:
                    9b:e6:8a:f3:d2:e6:94:b1:64:09:e2:fa:1e:d3:50:
                    2b:cf:cc:53:e1:b7:fd:9f:40:2b:d8:d6:e9:f8:27:
                    da:08:82:d6:8c:f3:bd:d3:7b:ce:93:e8:e7:45:67:
                    4c:ac:9c:21:26:26:b4:b3:df:7c:46:e0:5d:55:c5:
                    1b:77:f5:d7:b0:85:ac:64:11:2b:24:cb:7a:5f:27:
                    4b:fa:f3:42:63:96:1f:5f:e6:a2:2e:64:65:e7:3e:
                    96:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E2:81:12:CE:F1:F4:A9:5B:F9:EB:1C:9E:C2:2B:ED:25:FC:19:A3
            X509v3 Authority Key Identifier:
                keyid:4A:E7:97:3F:0F:E2:F2:A9:FF:F6:DF:3F:24:D3:87:F3:B7:E1:4E:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/4AE7973F0FE2F2A9FFF6DF3F24D387F3B7E14EFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AE7973F0FE2F2A9FFF6DF3F24D387F3B7E14EFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/34352e3137382e3230342e302f32322d3234203d3e20323639303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:6d:0e:ef:cb:d0:76:e5:e7:3c:0e:81:7b:8b:85:bf:63:52:
         7a:ca:37:2a:1e:40:7b:bb:11:ca:da:2b:f9:c5:7f:a8:a0:9e:
         47:83:85:87:b8:20:c5:47:1d:76:2b:24:1f:62:94:e8:9c:b1:
         38:97:c9:d9:7f:3e:57:9c:6b:54:47:98:34:7c:73:8c:ee:ce:
         84:06:7d:3d:95:1c:d4:3e:7a:ed:60:2d:aa:5d:92:8d:9c:f6:
         7a:9a:9a:c2:c3:03:8b:86:55:1b:ed:af:20:7b:a0:0d:dc:7d:
         45:87:49:e5:eb:34:a9:e6:3b:fe:6b:16:80:27:be:4a:f2:7c:
         33:f4:41:49:1f:bb:c1:97:94:f8:ac:ef:1a:5c:f2:2b:72:32:
         d2:ac:8f:f5:69:c7:cb:b7:33:68:24:ae:2e:3c:b4:4c:ad:5d:
         49:f2:d7:2e:95:5d:5b:f8:73:db:00:3e:90:d9:64:5f:3e:31:
         4d:99:b9:0e:36:f3:74:de:47:7f:bd:22:8d:0e:9c:6e:9b:df:
         50:07:1c:80:1c:f1:4c:11:b1:c5:00:24:20:56:a7:55:95:5d:
         58:65:32:c1:c8:43:b1:c4:7c:95:be:17:34:f1:57:f7:72:eb:
         3a:a6:c9:b4:a7:5d:2a:17:ae:21:f2:7b:79:c6:53:42:46:c7:
         70:8c:68:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:55:06 2026 by rpki-client