Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/AS268424.roa
File:                     AS268424.roa (raw, json)
Hash identifier:          n8RFEnoUmcQ97Ze6wCHVHFaHX1QwI1zVmWthwVlxl1o=
Subject key identifier:   B3:CC:87:21:A4:37:8A:98:A1:AF:F3:EC:21:4B:E9:0D:CD:9C:3E:37
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       5FAF5B6E223D1E004109ED28D49D986855CB2E84
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/AS268424.roa
Signing time:             Thu 25 Sep 2025 18:16:28 +0000
ROA not before:           Thu 25 Sep 2025 18:11:28 +0000
ROA not after:            Thu 24 Sep 2026 18:16:28 +0000
asID:                     268424
IP address blocks:        45.161.4.0/22 maxlen: 22
                          45.161.4.0/22 maxlen: 24
                          2804:5100::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
                          rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:af:5b:6e:22:3d:1e:00:41:09:ed:28:d4:9d:98:68:55:cb:2e:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Sep 25 18:11:28 2025 GMT
            Not After : Sep 24 18:16:28 2026 GMT
        Subject: CN=B3CC8721A4378A98A1AFF3EC214BE90DCD9C3E37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f5:42:75:c1:ea:99:c8:b2:d2:9f:46:9e:d4:
                    cd:7f:bc:dd:dc:1c:ff:78:15:07:ed:3e:62:ec:b6:
                    b5:57:4e:02:17:a9:62:88:e6:f0:68:26:9b:bd:64:
                    c0:48:3a:b7:87:09:3a:4b:14:4c:8c:ba:ae:e7:30:
                    1e:3b:ba:84:b7:8d:77:84:08:30:5e:fc:6f:52:2b:
                    c7:8e:79:bf:8b:ad:88:09:d9:b2:4f:b1:46:1c:ba:
                    b9:00:3d:af:a5:4c:9c:d8:80:8f:6c:45:40:d2:6e:
                    84:3b:82:fd:02:09:a9:e1:fc:8a:e7:91:28:4e:9a:
                    ee:c6:20:9f:9b:56:d2:60:45:e0:12:a5:eb:78:2c:
                    fa:db:b9:54:2a:92:bb:81:98:60:db:69:50:de:20:
                    79:b6:0b:ea:37:8b:d4:a0:d1:db:19:59:29:ef:f6:
                    e3:ce:19:0d:81:0b:a8:6c:aa:30:16:68:46:e9:c4:
                    15:d6:e5:0f:31:10:6c:f9:1f:59:c8:40:29:8c:99:
                    73:45:28:5b:e3:8e:c9:5d:3d:91:c4:5d:e3:72:b3:
                    72:b5:9b:b2:a4:f2:06:24:10:63:31:36:91:b1:fc:
                    4c:25:bb:f9:c9:5d:82:50:cc:da:21:a9:5c:41:e2:
                    da:77:e5:8e:90:cd:32:a6:80:e3:a6:93:52:41:a6:
                    1b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:CC:87:21:A4:37:8A:98:A1:AF:F3:EC:21:4B:E9:0D:CD:9C:3E:37
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/AS268424.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.4.0/22
                IPv6:
                  2804:5100::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:9b:d0:6e:1c:c4:45:d7:0d:5d:64:34:50:bb:b5:ec:cb:9b:
         f9:d1:49:a5:ad:db:7a:b7:25:cb:97:44:44:85:ff:e8:29:49:
         b8:20:1d:7c:05:b9:80:7f:63:88:19:84:62:5b:20:bf:ce:56:
         e8:26:5b:d7:64:69:9f:2e:3a:44:90:94:87:01:ec:ad:31:ae:
         c5:fe:11:7d:87:c7:fd:5c:13:82:af:55:79:b9:ba:9b:89:ee:
         91:34:b2:ba:b2:04:a8:9b:8e:7a:14:6f:fe:8d:36:ac:96:46:
         80:60:3c:73:23:02:7e:e7:72:f9:1e:81:d8:c3:45:70:fd:ea:
         4e:57:88:2a:47:2a:55:af:fb:61:7d:c4:bc:b1:35:bc:03:82:
         66:3f:c1:90:ce:ee:b2:36:c6:85:a6:82:ad:eb:1e:b6:1f:b2:
         10:b1:45:31:8a:1d:dc:8f:bf:62:63:42:06:b4:e0:5c:ac:6e:
         d3:24:e6:66:ce:86:f5:44:98:83:89:bf:26:3e:b6:ca:68:2c:
         b0:e2:db:7d:cb:b8:e7:3c:2a:02:6c:1b:e5:e4:6a:51:fe:0e:
         54:2c:69:55:90:81:f6:09:9d:ab:e2:f0:4a:73:3b:da:20:fc:
         71:5e:2e:ba:c7:5e:15:d7:ec:80:cf:e6:32:54:4b:d5:f8:84:
         21:26:16:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:51:18 2025 by rpki-client