Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/34352e3136372e3231392e302f32342d3234203d3e20323638303039.roa
File:                     34352e3136372e3231392e302f32342d3234203d3e20323638303039.roa (raw, json)
Hash identifier:          N/zjWmy6AIretUjoCHVc3G6qNGt1tHDXxJbtuPwNeDU=
Subject key identifier:   82:F1:48:6A:D7:F6:43:FA:7D:38:9B:00:64:B4:C2:0C:AD:33:9F:C2
Certificate issuer:       /CN=7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568
Certificate serial:       3709D010A15B8DBE4834EE4CCE876BC3F2B4F67A
Authority key identifier: 7B:D2:00:59:58:A0:D7:D9:FD:2F:6D:D3:AF:AD:D2:71:D6:2C:D5:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/34352e3136372e3231392e302f32342d3234203d3e20323638303039.roa
Signing time:             Mon 07 Sep 2026 15:59:25 +0000
ROA not before:           Mon 07 Sep 2026 15:54:25 +0000
ROA not after:            Mon 06 Sep 2027 15:59:25 +0000
asID:                     268009
IP address blocks:        45.167.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.crl
                          rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 10:53:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:09:d0:10:a1:5b:8d:be:48:34:ee:4c:ce:87:6b:c3:f2:b4:f6:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568
        Validity
            Not Before: Sep  7 15:54:25 2026 GMT
            Not After : Sep  6 15:59:25 2027 GMT
        Subject: CN=82F1486AD7F643FA7D389B0064B4C20CAD339FC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:05:9c:64:cb:17:97:7f:1c:d1:49:00:c6:58:
                    60:e4:6e:63:f8:ff:56:9e:5f:6c:9e:d0:c3:2d:74:
                    89:b5:85:20:e5:36:a8:86:33:39:14:a9:33:6b:7b:
                    9c:37:a0:6d:7c:e9:b8:2d:e0:ff:2f:e9:42:66:a8:
                    be:bd:fa:7e:c5:f5:5a:84:17:71:8f:2c:94:de:af:
                    71:52:00:5e:2d:02:3e:ec:40:d0:61:c8:9f:a3:d1:
                    ed:f1:ee:48:3a:5a:91:98:ed:62:f8:65:54:41:6e:
                    d5:a0:e9:de:36:25:69:1b:67:6e:46:36:c8:f6:cf:
                    3d:f5:5f:ca:de:0e:3c:13:5f:44:88:26:d1:28:aa:
                    56:64:70:d4:77:e7:07:27:f8:0c:ae:c3:46:96:b5:
                    e9:4b:ab:91:ea:e6:f4:2e:63:6c:67:e4:34:9e:91:
                    ef:1e:92:6f:38:2b:13:76:d6:f2:47:d6:c2:98:34:
                    2a:11:45:a5:8a:a9:d3:27:21:61:12:bf:6b:96:59:
                    4c:35:c8:7e:e4:72:dd:28:45:a6:cb:d2:12:a7:59:
                    f5:3e:f7:48:bb:fd:69:29:72:57:0d:76:c2:17:2e:
                    d4:ff:12:b2:5b:9b:93:28:27:7b:f0:60:27:53:5f:
                    05:09:48:7e:24:6e:52:f0:e2:6b:65:be:f2:a5:e5:
                    ad:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F1:48:6A:D7:F6:43:FA:7D:38:9B:00:64:B4:C2:0C:AD:33:9F:C2
            X509v3 Authority Key Identifier:
                keyid:7B:D2:00:59:58:A0:D7:D9:FD:2F:6D:D3:AF:AD:D2:71:D6:2C:D5:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/34352e3136372e3231392e302f32342d3234203d3e20323638303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:cd:8f:df:c9:a1:9a:c8:07:85:81:04:91:ec:88:5a:26:da:
         da:fa:6b:3e:b3:33:1a:0c:e4:b1:14:4e:be:5d:6a:0d:29:12:
         e8:b5:20:00:7c:e3:ac:2d:56:50:08:62:d8:fc:6a:15:9e:76:
         25:f6:38:4c:fe:5c:45:64:1a:7e:c5:d0:08:40:f4:e2:a0:87:
         2f:16:59:18:f3:23:c9:31:1e:bd:5c:37:9e:11:85:0e:21:15:
         ef:18:41:da:79:bf:76:4a:ea:19:b7:44:46:e3:b9:62:34:61:
         71:06:b1:e9:03:9b:f0:d7:76:51:40:69:04:31:a7:ca:4c:e4:
         25:94:40:8a:b3:5c:bf:da:c5:1d:5d:a4:a5:9c:b2:cc:12:d6:
         8a:fb:ba:d4:75:02:b6:1f:02:dd:ac:63:fa:55:b8:59:01:8a:
         fc:56:18:50:ad:70:f7:da:64:99:30:e8:ea:f2:46:14:9d:6b:
         ea:cf:a1:8c:90:ef:04:0c:2c:ba:1b:14:fd:d8:47:f2:43:d8:
         13:f5:14:1e:d3:e3:ff:0a:99:b5:3d:cb:ed:d8:53:aa:3f:0e:
         e4:99:e5:c4:1a:f2:d1:ed:b8:61:9a:28:4c:2e:49:d2:ba:0e:
         9d:6a:9f:d7:51:d5:12:96:a0:ac:7b:f8:5e:1c:00:43:5f:c8:
         ee:c1:c4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:19:04 2026 by rpki-client