Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/34352e3136312e37322e302f32322d3234203d3e20323733353137.roa
File:                     34352e3136312e37322e302f32322d3234203d3e20323733353137.roa (raw, json)
Hash identifier:          V3kMZOg1dVLLK4ABzdSCepzALXFNfgVTvdsCc4EP2i4=
Subject key identifier:   19:81:47:EA:DB:83:DC:2B:0D:75:D2:A5:D0:2C:5C:CA:C2:28:21:F9
Certificate issuer:       /CN=436AE81939B23C1281E48CA5B5E8E041EAD34FDF
Certificate serial:       6A3DBD24A007E452B30E412F1CA91C11A1B1F652
Authority key identifier: 43:6A:E8:19:39:B2:3C:12:81:E4:8C:A5:B5:E8:E0:41:EA:D3:4F:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436AE81939B23C1281E48CA5B5E8E041EAD34FDF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/34352e3136312e37322e302f32322d3234203d3e20323733353137.roa
Signing time:             Thu 08 Oct 2026 12:04:31 +0000
ROA not before:           Thu 08 Oct 2026 11:59:31 +0000
ROA not after:            Thu 07 Oct 2027 12:04:31 +0000
asID:                     273517
IP address blocks:        45.161.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/436AE81939B23C1281E48CA5B5E8E041EAD34FDF.crl
                          rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/436AE81939B23C1281E48CA5B5E8E041EAD34FDF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436AE81939B23C1281E48CA5B5E8E041EAD34FDF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 12:30:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:3d:bd:24:a0:07:e4:52:b3:0e:41:2f:1c:a9:1c:11:a1:b1:f6:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=436AE81939B23C1281E48CA5B5E8E041EAD34FDF
        Validity
            Not Before: Oct  8 11:59:31 2026 GMT
            Not After : Oct  7 12:04:31 2027 GMT
        Subject: CN=198147EADB83DC2B0D75D2A5D02C5CCAC22821F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:26:6e:dc:bb:09:23:57:9f:b6:13:24:ae:a5:
                    83:57:3e:42:27:cc:f8:79:77:6c:1c:02:c6:13:d2:
                    a1:bc:72:01:b1:76:00:52:7f:c5:1a:0f:d5:20:1f:
                    c8:54:c3:57:ea:dc:85:1f:f1:ee:5e:af:55:5c:f2:
                    57:7a:2f:a5:89:fd:06:4b:3e:c1:a7:02:84:ad:1c:
                    53:fe:25:1b:c0:8a:63:10:1c:67:ea:48:c1:73:f3:
                    f2:c5:b6:64:e3:28:66:c3:b6:0f:e1:f6:64:bf:82:
                    03:74:2e:aa:e7:ca:10:a7:cc:b8:b8:24:e5:e8:96:
                    f3:01:b1:cb:86:88:8e:51:b6:a1:d3:e3:be:2f:ba:
                    7f:39:18:1a:ca:a8:1a:bc:42:41:94:68:ef:28:e0:
                    eb:50:58:a9:a5:49:84:07:f3:78:42:b1:92:90:5e:
                    47:ce:75:c3:21:bb:c7:f0:8b:5e:f2:19:b9:c5:5c:
                    c3:09:57:af:89:16:95:ce:b0:74:6c:6b:ca:b2:14:
                    37:24:19:47:a3:d7:60:d2:03:77:04:6c:3e:a5:49:
                    92:0f:0a:3a:f6:10:58:d6:e0:1f:ea:ec:88:f3:b2:
                    74:6a:95:87:9a:b5:a7:53:e5:7a:c9:b9:3f:e6:88:
                    5e:2b:ef:3b:02:bc:9b:c1:af:92:ad:2c:63:35:16:
                    49:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:81:47:EA:DB:83:DC:2B:0D:75:D2:A5:D0:2C:5C:CA:C2:28:21:F9
            X509v3 Authority Key Identifier:
                keyid:43:6A:E8:19:39:B2:3C:12:81:E4:8C:A5:B5:E8:E0:41:EA:D3:4F:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/436AE81939B23C1281E48CA5B5E8E041EAD34FDF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436AE81939B23C1281E48CA5B5E8E041EAD34FDF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/34352e3136312e37322e302f32322d3234203d3e20323733353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:9e:7e:18:19:df:51:24:e6:e3:7a:fb:e8:51:37:4a:2d:b2:
         a3:05:7f:92:34:87:50:b6:17:f0:c6:a0:ae:81:4e:f6:54:86:
         5f:f1:eb:51:71:16:37:fd:68:7e:f8:bf:45:61:4b:56:e0:d7:
         ac:05:25:03:2d:2e:d3:79:4e:d9:54:9b:90:31:4d:49:0c:1e:
         41:9d:73:1b:bd:df:2b:95:56:8e:86:98:ed:7d:f9:cc:aa:e7:
         33:e4:7b:d8:02:c4:c9:12:03:d4:a4:38:56:5d:e2:13:8a:82:
         4d:20:ac:19:1a:c8:b9:a4:d4:e1:af:fc:d0:02:7a:9a:4d:6d:
         0d:b2:9b:37:ce:53:76:09:6d:7d:64:a4:f8:33:0c:2f:df:e2:
         25:a8:11:d5:63:36:ba:0c:94:be:29:82:89:e1:0f:e1:b6:33:
         3b:e5:71:b5:0a:e2:7e:ea:6d:cf:51:54:5f:96:e9:5c:36:f9:
         aa:fa:0c:bf:a4:44:30:fc:cc:95:e9:64:13:4d:fc:72:35:68:
         f8:79:6b:b3:89:bb:4b:7e:ee:bd:45:7f:8d:dd:cd:14:b0:0d:
         9b:0a:4f:af:49:fc:2b:65:ca:16:9b:95:97:80:6e:cc:f3:24:
         08:d0:9e:2e:2c:d3:fb:17:f2:31:91:5e:23:ca:77:6c:26:3d:
         65:7f:a0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:39:02 2026 by rpki-client