Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7Ng55FZEKD4GhRQyMt6bMbbWSLjZtyVn7TqNtssLERCU/0/34352e3137362e3130342e302f32342d3234203d3e20323638393937.roa
File:                     34352e3137362e3130342e302f32342d3234203d3e20323638393937.roa (raw, json)
Hash identifier:          tEqrnMDKNwIRl+76PHy28XQymCRDz0HS7v8IXFKh86A=
Subject key identifier:   CB:0E:55:2C:5E:71:84:2A:B9:B1:18:9A:0A:7B:35:BA:4A:A6:D6:8F
Certificate issuer:       /CN=CF034C59A12C0749E90E7B6E3ACEBF432822B60D
Certificate serial:       67ECCC04E7DB5FA6DC739621FCA88F3BC4422DC9
Authority key identifier: CF:03:4C:59:A1:2C:07:49:E9:0E:7B:6E:3A:CE:BF:43:28:22:B6:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF034C59A12C0749E90E7B6E3ACEBF432822B60D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Ng55FZEKD4GhRQyMt6bMbbWSLjZtyVn7TqNtssLERCU/0/34352e3137362e3130342e302f32342d3234203d3e20323638393937.roa
Signing time:             Wed 23 Sep 2026 23:10:56 +0000
ROA not before:           Wed 23 Sep 2026 23:05:56 +0000
ROA not after:            Wed 22 Sep 2027 23:10:56 +0000
asID:                     268997
IP address blocks:        45.176.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Ng55FZEKD4GhRQyMt6bMbbWSLjZtyVn7TqNtssLERCU/0/CF034C59A12C0749E90E7B6E3ACEBF432822B60D.crl
                          rsync://rpki-repo.registro.br/repo/7Ng55FZEKD4GhRQyMt6bMbbWSLjZtyVn7TqNtssLERCU/0/CF034C59A12C0749E90E7B6E3ACEBF432822B60D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF034C59A12C0749E90E7B6E3ACEBF432822B60D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 10:54:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ec:cc:04:e7:db:5f:a6:dc:73:96:21:fc:a8:8f:3b:c4:42:2d:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF034C59A12C0749E90E7B6E3ACEBF432822B60D
        Validity
            Not Before: Sep 23 23:05:56 2026 GMT
            Not After : Sep 22 23:10:56 2027 GMT
        Subject: CN=CB0E552C5E71842AB9B1189A0A7B35BA4AA6D68F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0c:7c:b2:b4:f7:b5:bc:9e:69:b1:9f:b0:b5:
                    65:7a:1d:10:e9:59:4f:0d:ea:63:85:bf:77:72:a7:
                    dd:95:12:23:d2:fa:9b:32:22:af:b1:86:22:87:48:
                    90:87:16:aa:f4:d3:bd:d2:55:c2:6c:55:44:3a:55:
                    76:2a:ff:00:2a:d9:33:32:49:7a:9b:84:03:47:96:
                    db:59:a9:ce:d4:43:86:4b:70:9a:1d:00:12:df:36:
                    fc:61:d0:d0:7e:a2:ac:74:2f:ce:3f:62:dd:b1:ba:
                    eb:0f:84:0b:8d:0d:50:b8:10:1f:4d:18:a4:f1:fc:
                    5d:ef:b9:86:c4:0d:dc:24:52:f6:ca:e3:12:81:05:
                    b0:4f:7c:83:72:3a:55:73:61:8b:d1:5f:93:16:91:
                    19:26:45:e3:28:55:b6:10:1e:16:4d:4a:c9:58:15:
                    73:af:8c:74:2b:1f:4e:fd:bc:ec:bf:79:42:17:2f:
                    26:3f:c5:46:54:51:0a:2e:ec:fb:f5:44:b2:69:e5:
                    71:e8:a3:78:6a:59:f6:db:9d:5b:cf:86:ca:92:bb:
                    50:06:a6:c9:29:06:0e:c3:1f:93:4b:75:cc:93:22:
                    bd:22:fb:69:d0:d4:29:e5:8a:1c:29:89:af:0f:f8:
                    51:75:dc:b6:7b:c5:9d:68:5f:ba:03:ca:e8:41:e0:
                    dd:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:0E:55:2C:5E:71:84:2A:B9:B1:18:9A:0A:7B:35:BA:4A:A6:D6:8F
            X509v3 Authority Key Identifier:
                keyid:CF:03:4C:59:A1:2C:07:49:E9:0E:7B:6E:3A:CE:BF:43:28:22:B6:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Ng55FZEKD4GhRQyMt6bMbbWSLjZtyVn7TqNtssLERCU/0/CF034C59A12C0749E90E7B6E3ACEBF432822B60D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF034C59A12C0749E90E7B6E3ACEBF432822B60D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Ng55FZEKD4GhRQyMt6bMbbWSLjZtyVn7TqNtssLERCU/0/34352e3137362e3130342e302f32342d3234203d3e20323638393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:4d:89:05:42:94:56:df:a7:21:ca:f9:68:19:98:38:bc:2f:
         35:2f:d7:9c:a1:8f:ca:8b:f0:00:bf:79:5f:d8:61:d2:b9:a4:
         8a:28:11:47:62:e8:88:13:62:52:98:77:88:ad:c9:5f:5f:86:
         08:6e:ce:88:95:dd:f8:54:fa:c2:5c:c4:12:0c:10:e7:5a:d2:
         6e:7d:2c:3b:de:10:02:99:96:44:53:f0:4d:5b:70:9f:c3:77:
         8d:ad:de:aa:ad:26:47:c3:20:f3:ac:95:7c:9c:f2:9c:f9:de:
         d3:b9:8c:84:bf:54:a1:b6:c2:a3:e7:b7:db:4a:13:a8:57:55:
         29:12:3c:3d:5d:90:fc:44:fb:36:a4:54:a6:3c:c4:be:1d:88:
         a5:2a:13:2e:51:ce:67:db:54:7f:64:d4:86:29:ca:2b:2c:f1:
         25:69:40:37:ba:cb:8a:ea:95:01:e4:b3:77:fd:ea:fa:4e:bf:
         d3:40:ee:1e:9d:94:e2:e0:14:de:32:a1:a8:58:e3:3c:48:6c:
         13:86:87:70:2a:14:65:66:60:c5:2a:db:20:c4:9c:50:c0:af:
         d3:2b:48:21:1f:a6:3a:8e:90:45:c8:e2:b8:08:9a:e3:4c:42:
         d1:34:a5:9e:3d:2e:11:c8:00:49:6d:5e:de:c4:61:cc:66:1b:
         94:1a:e2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:07:22 2026 by rpki-client