Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/3137302e3233332e3130342e302f32332d3234203d3e20323635303933.roa
File:                     3137302e3233332e3130342e302f32332d3234203d3e20323635303933.roa (raw, json)
Hash identifier:          YnY95p0YfO7vkqK9ZLnyOj0eYJ6AB3AMP7b8cYYo9K0=
Subject key identifier:   8E:80:DA:DF:14:E5:72:50:12:24:E1:7A:4F:CF:07:66:B3:DB:33:2B
Certificate issuer:       /CN=355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2
Certificate serial:       3A78D0F56116F2DFEA37B07EAE2F6984FF03815D
Authority key identifier: 35:5F:C2:C6:7F:E7:38:EC:AC:BF:EF:94:B8:DB:5D:5D:52:28:C7:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/3137302e3233332e3130342e302f32332d3234203d3e20323635303933.roa
Signing time:             Tue 20 Oct 2026 13:08:18 +0000
ROA not before:           Tue 20 Oct 2026 13:03:18 +0000
ROA not after:            Tue 19 Oct 2027 13:08:18 +0000
asID:                     265093
IP address blocks:        170.233.104.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.crl
                          rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 08:29:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:78:d0:f5:61:16:f2:df:ea:37:b0:7e:ae:2f:69:84:ff:03:81:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2
        Validity
            Not Before: Oct 20 13:03:18 2026 GMT
            Not After : Oct 19 13:08:18 2027 GMT
        Subject: CN=8E80DADF14E572501224E17A4FCF0766B3DB332B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3e:16:74:56:77:ca:c5:b3:e2:24:75:14:53:
                    e9:fd:40:82:f8:70:25:70:ff:be:16:8c:c7:fd:8e:
                    9a:eb:e0:3a:e9:1e:45:60:b2:4b:a7:17:73:f6:b8:
                    4f:55:80:5c:7d:ec:c0:3b:84:df:37:db:ed:2a:b4:
                    5a:84:3a:4a:e9:2f:b4:6e:9e:1c:d9:99:3e:db:8c:
                    ac:7b:57:ce:28:1a:9c:3b:f4:c9:7b:ab:95:5a:80:
                    b6:66:28:89:2d:a3:3f:0a:ea:08:74:ef:bd:13:88:
                    8b:2a:82:13:9b:9f:b5:78:32:03:30:87:48:ea:1f:
                    e7:61:2d:ba:f0:3c:5e:49:42:ba:3f:f9:f2:6d:60:
                    4f:23:f7:9d:88:47:77:f8:eb:ca:8c:39:01:bb:fb:
                    a3:a7:51:e6:23:d5:58:aa:21:24:cd:23:88:cc:cd:
                    bc:a6:35:62:8d:cc:4f:be:a4:62:e3:0a:24:3a:80:
                    4a:1f:48:79:d9:8a:f1:64:ce:b9:31:50:f5:c5:94:
                    ef:f1:80:9c:0a:3c:86:8c:0a:6b:0a:4a:47:a1:83:
                    1f:57:ea:21:ed:9c:0d:4e:82:29:38:0d:f7:7a:25:
                    ab:2f:77:6b:f7:35:13:ef:96:f2:fa:68:c7:7b:40:
                    36:a3:0f:77:68:04:2e:87:e4:de:4b:29:34:c4:41:
                    eb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:80:DA:DF:14:E5:72:50:12:24:E1:7A:4F:CF:07:66:B3:DB:33:2B
            X509v3 Authority Key Identifier:
                keyid:35:5F:C2:C6:7F:E7:38:EC:AC:BF:EF:94:B8:DB:5D:5D:52:28:C7:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/3137302e3233332e3130342e302f32332d3234203d3e20323635303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:3b:07:78:10:bb:6a:89:85:ad:a1:1c:60:ec:f0:e7:46:b3:
         3b:90:be:c2:21:cd:db:a8:13:fa:88:6b:be:b2:a8:73:7f:04:
         a7:48:e9:a2:0e:3a:a0:75:dc:73:f6:e3:f8:f0:82:9c:03:f5:
         74:0a:c1:00:c0:d0:40:af:a8:b3:bf:e3:fe:69:10:67:ff:7e:
         63:c6:3a:b3:dd:78:77:6e:85:5d:00:ea:12:7a:5b:31:1b:01:
         98:ad:a1:36:7c:b7:96:08:4b:35:1a:0f:ff:0b:3c:99:24:83:
         8c:f8:be:79:f6:b7:2a:0a:7a:37:2f:2e:dc:1b:02:e2:86:42:
         43:88:f7:cb:51:23:3a:c8:1f:9a:f9:88:36:e9:cc:03:61:b7:
         91:dc:da:b6:2f:8e:73:ad:4a:cb:b2:01:2a:96:48:21:79:61:
         26:61:be:d1:9d:fe:96:d1:15:9a:9a:21:f0:a3:1d:e7:47:41:
         de:5f:98:dd:9f:f5:a8:2f:15:c0:92:4a:da:ee:4f:19:c5:93:
         5a:d6:86:86:91:71:f6:6e:40:49:22:08:d9:66:4f:f6:61:af:
         32:41:c3:16:1b:ce:5b:4a:ad:c6:83:24:6d:7d:3e:9c:1e:a3:
         65:91:9a:5b:cf:61:7c:b7:a1:b4:9e:bf:fe:3f:e6:c0:e7:4e:
         6d:ee:7b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 01:43:11 2026 by rpki-client