Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7WPKMt1r3YnQ5R4QFpUrQj4uhC9V3ua2TRRAehXbAMbk/0/34352e3139302e34342e302f32332d3233203d3e20323639363139.roa
File:                     34352e3139302e34342e302f32332d3233203d3e20323639363139.roa (raw, json)
Hash identifier:          PB43kFAlYnWWpsUSSSjMXKg7h/D7H8KVZToyeSpOSbI=
Subject key identifier:   F7:85:95:16:16:05:3D:C0:F6:D8:CD:8A:B7:EE:A2:DA:EA:AC:02:45
Certificate issuer:       /CN=6CD89341A3EBF4F4BA4F7B1321A7182E4CDDE39C
Certificate serial:       5168BE444C15B4B5B504140DC9E557CF5ED3659E
Authority key identifier: 6C:D8:93:41:A3:EB:F4:F4:BA:4F:7B:13:21:A7:18:2E:4C:DD:E3:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD89341A3EBF4F4BA4F7B1321A7182E4CDDE39C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WPKMt1r3YnQ5R4QFpUrQj4uhC9V3ua2TRRAehXbAMbk/0/34352e3139302e34342e302f32332d3233203d3e20323639363139.roa
Signing time:             Wed 07 Oct 2026 17:49:39 +0000
ROA not before:           Wed 07 Oct 2026 17:44:39 +0000
ROA not after:            Wed 06 Oct 2027 17:49:39 +0000
asID:                     269619
IP address blocks:        45.190.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WPKMt1r3YnQ5R4QFpUrQj4uhC9V3ua2TRRAehXbAMbk/0/6CD89341A3EBF4F4BA4F7B1321A7182E4CDDE39C.crl
                          rsync://rpki-repo.registro.br/repo/7WPKMt1r3YnQ5R4QFpUrQj4uhC9V3ua2TRRAehXbAMbk/0/6CD89341A3EBF4F4BA4F7B1321A7182E4CDDE39C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD89341A3EBF4F4BA4F7B1321A7182E4CDDE39C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 19:45:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:68:be:44:4c:15:b4:b5:b5:04:14:0d:c9:e5:57:cf:5e:d3:65:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CD89341A3EBF4F4BA4F7B1321A7182E4CDDE39C
        Validity
            Not Before: Oct  7 17:44:39 2026 GMT
            Not After : Oct  6 17:49:39 2027 GMT
        Subject: CN=F785951616053DC0F6D8CD8AB7EEA2DAEAAC0245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:78:c5:7b:3d:fe:81:27:59:73:dc:c2:0e:24:
                    66:79:a1:14:7a:4b:33:7b:14:48:5e:cd:40:f8:cd:
                    bd:93:b8:79:58:6a:b6:0c:bd:fb:47:8b:57:e8:83:
                    1f:7a:d0:a6:07:16:48:3c:b5:dd:d5:fd:0c:79:b0:
                    d3:d9:de:97:28:77:d8:52:d9:c9:0f:e5:41:a4:b2:
                    45:30:22:c5:e0:7d:2e:e1:f4:42:b1:b5:28:dc:27:
                    d7:6d:19:88:09:b9:43:75:61:2c:7e:5e:d8:f0:24:
                    0b:09:56:0b:e2:b0:d2:dc:fb:b3:c1:58:21:33:ba:
                    31:23:71:54:dc:1b:38:6b:bf:ad:00:88:9c:5d:7a:
                    e4:16:58:b9:f3:01:4f:fe:c1:a1:1f:d5:9b:a2:d4:
                    76:5f:4a:fe:8d:26:bd:66:3a:b3:67:1a:7a:cc:89:
                    36:8e:db:54:2b:cf:a6:93:90:37:0b:8c:25:6e:51:
                    7a:4a:12:05:cb:f4:1f:8d:42:ba:b5:f0:69:7d:6e:
                    af:fa:29:c4:f0:19:a5:d2:45:10:3f:86:44:18:07:
                    d2:c8:90:a8:22:cb:99:20:7a:15:b4:11:4a:ce:47:
                    ee:b6:f4:70:d3:5b:33:c6:58:40:23:cb:37:ce:e3:
                    02:88:5c:24:3c:a2:8e:07:63:5f:8e:de:b8:c0:22:
                    8c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:85:95:16:16:05:3D:C0:F6:D8:CD:8A:B7:EE:A2:DA:EA:AC:02:45
            X509v3 Authority Key Identifier:
                keyid:6C:D8:93:41:A3:EB:F4:F4:BA:4F:7B:13:21:A7:18:2E:4C:DD:E3:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WPKMt1r3YnQ5R4QFpUrQj4uhC9V3ua2TRRAehXbAMbk/0/6CD89341A3EBF4F4BA4F7B1321A7182E4CDDE39C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD89341A3EBF4F4BA4F7B1321A7182E4CDDE39C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WPKMt1r3YnQ5R4QFpUrQj4uhC9V3ua2TRRAehXbAMbk/0/34352e3139302e34342e302f32332d3233203d3e20323639363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:d6:cc:09:60:d9:40:8a:ed:bf:08:ee:2b:a5:c9:b5:3e:50:
         56:73:4f:51:e7:3e:98:c4:0d:5a:46:d0:3c:64:76:61:40:a4:
         72:b4:b6:3b:67:50:06:a9:68:7f:5e:8d:42:82:b9:e4:74:fa:
         0f:16:c7:38:26:73:e8:3c:4a:e1:95:2a:00:cc:cf:7a:10:1a:
         64:d5:ce:b0:bc:8d:22:3c:3a:a0:26:6b:17:c5:45:b1:ba:04:
         8d:14:13:d7:21:53:ef:ed:d5:9b:dd:f2:35:25:7f:c3:d6:6c:
         1a:e2:b7:84:3e:09:9e:b1:bb:37:89:76:4f:12:9a:46:fc:b9:
         ce:80:67:c4:e0:db:52:98:7f:35:43:59:95:ca:a2:99:49:21:
         61:2f:07:df:f7:d7:9d:ce:a8:16:1b:71:1a:89:62:18:4f:b9:
         78:c3:fa:78:f2:05:89:31:c1:19:6f:81:49:e2:c6:aa:1f:14:
         10:f1:17:d6:bc:d9:8f:5d:48:92:cd:10:f0:17:8c:01:e3:84:
         1e:c5:87:62:9c:b7:3e:cc:1a:07:92:19:73:5f:a1:de:ba:98:
         45:a9:fd:dc:fd:88:58:81:54:e0:61:84:08:eb:7e:4d:ac:78:
         3c:22:8b:98:da:90:fd:1b:e5:ef:5c:54:32:33:38:f2:fc:51:
         57:fd:57:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:44:13 2026 by rpki-client