Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7WPKMt1r3YnQ5R4QFpUrQj4uhC9V3ua2TRRAehXbAMbk/0/34352e3139302e34362e302f32342d3234203d3e20323639363139.roa
File:                     34352e3139302e34362e302f32342d3234203d3e20323639363139.roa (raw, json)
Hash identifier:          kAN0VLQ1bacr92oFuf07kTsXOIeMUvu8hXfGMreiHdU=
Subject key identifier:   93:FA:B5:BC:2E:63:D1:1F:4B:27:10:49:E5:BF:94:F4:80:9D:10:50
Certificate issuer:       /CN=6CD89341A3EBF4F4BA4F7B1321A7182E4CDDE39C
Certificate serial:       22A33CE54BE51E64A791211A20FA4F3999D16A30
Authority key identifier: 6C:D8:93:41:A3:EB:F4:F4:BA:4F:7B:13:21:A7:18:2E:4C:DD:E3:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD89341A3EBF4F4BA4F7B1321A7182E4CDDE39C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WPKMt1r3YnQ5R4QFpUrQj4uhC9V3ua2TRRAehXbAMbk/0/34352e3139302e34362e302f32342d3234203d3e20323639363139.roa
Signing time:             Wed 07 Oct 2026 17:49:42 +0000
ROA not before:           Wed 07 Oct 2026 17:44:42 +0000
ROA not after:            Wed 06 Oct 2027 17:49:42 +0000
asID:                     269619
IP address blocks:        45.190.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WPKMt1r3YnQ5R4QFpUrQj4uhC9V3ua2TRRAehXbAMbk/0/6CD89341A3EBF4F4BA4F7B1321A7182E4CDDE39C.crl
                          rsync://rpki-repo.registro.br/repo/7WPKMt1r3YnQ5R4QFpUrQj4uhC9V3ua2TRRAehXbAMbk/0/6CD89341A3EBF4F4BA4F7B1321A7182E4CDDE39C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD89341A3EBF4F4BA4F7B1321A7182E4CDDE39C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 09:47:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a3:3c:e5:4b:e5:1e:64:a7:91:21:1a:20:fa:4f:39:99:d1:6a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CD89341A3EBF4F4BA4F7B1321A7182E4CDDE39C
        Validity
            Not Before: Oct  7 17:44:42 2026 GMT
            Not After : Oct  6 17:49:42 2027 GMT
        Subject: CN=93FAB5BC2E63D11F4B271049E5BF94F4809D1050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ba:b1:56:8b:c0:f1:34:59:1a:d0:2b:3b:a1:
                    b5:21:d3:72:cc:53:9a:56:69:80:66:59:d4:f3:ac:
                    b2:c0:ac:3c:82:78:54:d7:0a:17:d0:96:f7:97:be:
                    c0:a7:a8:aa:40:7c:a0:b7:ad:45:d1:3d:06:7f:e3:
                    3a:11:8f:03:ff:88:da:52:ec:32:54:55:4e:88:57:
                    c1:b4:bf:a5:bb:3e:7b:5b:f9:f5:30:c8:9f:15:61:
                    d1:f6:13:f0:40:e3:1c:23:3b:85:13:42:d8:6c:3f:
                    3b:c9:0f:c9:36:03:03:d9:a7:bc:70:0b:14:72:ad:
                    95:75:19:15:84:65:95:9f:5e:dc:82:71:f1:f9:22:
                    bf:9c:a9:c2:c9:eb:c6:47:31:55:a0:d2:c2:15:71:
                    4c:07:31:25:a3:ea:b2:e6:cc:11:4f:d5:60:54:a2:
                    ba:00:74:9f:23:78:96:2e:8e:e7:48:5a:6d:cc:4e:
                    fa:64:e3:30:ed:99:89:8f:f9:6c:e3:5d:2a:25:83:
                    b1:d2:31:4e:7b:57:d1:4a:53:41:c0:97:57:df:3f:
                    41:b2:47:c4:58:07:b7:97:dc:12:1f:9b:98:26:b6:
                    a1:3e:bd:a5:7c:46:94:42:2b:a3:b5:e5:6b:c8:27:
                    85:bc:44:ab:8b:c9:22:fe:56:b5:a6:d2:78:74:54:
                    ee:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:FA:B5:BC:2E:63:D1:1F:4B:27:10:49:E5:BF:94:F4:80:9D:10:50
            X509v3 Authority Key Identifier:
                keyid:6C:D8:93:41:A3:EB:F4:F4:BA:4F:7B:13:21:A7:18:2E:4C:DD:E3:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WPKMt1r3YnQ5R4QFpUrQj4uhC9V3ua2TRRAehXbAMbk/0/6CD89341A3EBF4F4BA4F7B1321A7182E4CDDE39C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD89341A3EBF4F4BA4F7B1321A7182E4CDDE39C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WPKMt1r3YnQ5R4QFpUrQj4uhC9V3ua2TRRAehXbAMbk/0/34352e3139302e34362e302f32342d3234203d3e20323639363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:01:43:9b:2c:5d:75:95:9a:62:87:e3:8d:14:86:d0:75:2b:
         0c:27:a3:a2:ee:05:63:01:49:36:83:b5:b4:81:28:a9:e7:89:
         55:ac:f9:0f:97:57:4c:17:ab:80:53:a0:71:9d:69:07:e4:d5:
         c9:26:d7:9b:9c:fc:5c:52:2d:48:fd:ee:2c:f0:cc:ba:03:bb:
         bb:d3:13:56:38:71:f9:27:b9:ce:83:29:1c:99:0d:1e:f0:3e:
         7b:89:67:19:94:e2:df:56:69:67:60:cd:31:fe:16:a0:b1:04:
         81:88:78:5f:47:08:dd:e9:63:e9:6f:5a:cf:29:78:b3:a7:d7:
         ad:90:4b:ab:85:78:7e:0d:61:62:fd:de:28:1b:c2:61:e3:22:
         1c:a6:66:62:d7:5e:a6:65:60:2a:c2:9f:72:2b:43:c8:4f:d7:
         a9:70:b0:6a:4f:e4:a7:a2:d3:ae:96:cf:49:20:be:65:a4:76:
         c6:52:60:cd:b8:15:ce:00:ae:16:f0:87:38:91:ec:e5:15:f5:
         0d:3c:d2:9a:0d:04:c2:db:93:33:d1:08:0e:59:51:47:89:9f:
         85:32:36:60:ba:9a:11:98:01:8e:6d:52:ad:97:14:ed:2e:92:
         f0:7c:30:a5:12:ba:e3:ae:d9:8f:93:27:72:04:37:3e:39:f6:
         b2:18:0d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:49:47 2026 by rpki-client