Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DRD4Xfa5Upoxjfu97t7BvhtnQfAekWaC5mGn1kG4tbJt/0/34352e3138372e38342e302f32322d3232203d3e20323639353839.roa
File:                     34352e3138372e38342e302f32322d3232203d3e20323639353839.roa (raw, json)
Hash identifier:          VTTXEPyh8MsLDyiND0exFS4/JcylokLVPtOScYEyV5I=
Subject key identifier:   26:D6:B9:C3:8D:AF:FF:CA:E1:CD:A8:A4:14:37:32:53:0A:C5:FC:5D
Certificate issuer:       /CN=26E9DBB375A429F2518B7433EA4000CA577E9AC3
Certificate serial:       6BE719485DCF65888ED0F2769323481783133719
Authority key identifier: 26:E9:DB:B3:75:A4:29:F2:51:8B:74:33:EA:40:00:CA:57:7E:9A:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26E9DBB375A429F2518B7433EA4000CA577E9AC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRD4Xfa5Upoxjfu97t7BvhtnQfAekWaC5mGn1kG4tbJt/0/34352e3138372e38342e302f32322d3232203d3e20323639353839.roa
Signing time:             Fri 10 Jul 2026 13:16:29 +0000
ROA not before:           Fri 10 Jul 2026 13:11:29 +0000
ROA not after:            Fri 09 Jul 2027 13:16:29 +0000
asID:                     269589
IP address blocks:        45.187.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DRD4Xfa5Upoxjfu97t7BvhtnQfAekWaC5mGn1kG4tbJt/0/26E9DBB375A429F2518B7433EA4000CA577E9AC3.crl
                          rsync://rpki-repo.registro.br/repo/DRD4Xfa5Upoxjfu97t7BvhtnQfAekWaC5mGn1kG4tbJt/0/26E9DBB375A429F2518B7433EA4000CA577E9AC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26E9DBB375A429F2518B7433EA4000CA577E9AC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 15:27:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:e7:19:48:5d:cf:65:88:8e:d0:f2:76:93:23:48:17:83:13:37:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26E9DBB375A429F2518B7433EA4000CA577E9AC3
        Validity
            Not Before: Jul 10 13:11:29 2026 GMT
            Not After : Jul  9 13:16:29 2027 GMT
        Subject: CN=26D6B9C38DAFFFCAE1CDA8A4143732530AC5FC5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5e:9f:65:3e:f4:1c:87:25:7d:4c:30:ba:e5:
                    40:92:a2:a8:24:9d:96:e9:bb:e6:d1:e8:f4:0a:41:
                    f4:9d:92:36:b4:46:18:e3:bd:39:80:53:06:d3:0e:
                    a9:69:ef:8d:8e:c9:07:04:ab:0d:ea:37:16:06:22:
                    dc:d7:f2:08:44:0f:95:f0:e4:f8:4b:a3:03:4b:b6:
                    de:15:cb:d4:36:df:54:3d:8e:1f:83:f0:30:f3:6b:
                    23:80:0f:f9:49:9f:ed:10:fc:4a:fe:78:af:20:5e:
                    46:64:86:41:a0:92:04:b0:b0:47:f7:bd:1c:6d:b5:
                    50:b8:e3:5a:04:41:ca:76:16:ac:5f:3c:26:57:0c:
                    e0:82:a1:90:cb:96:17:ed:d2:f7:64:ac:00:3c:97:
                    07:4f:9b:e8:2a:a3:10:33:e9:f6:53:f1:2e:b4:d1:
                    0d:7a:a8:7c:7a:88:62:48:5c:b5:7c:68:9f:76:01:
                    d5:54:89:56:6e:22:3a:77:0d:89:8b:27:c7:bf:26:
                    11:6f:22:a0:75:58:86:4c:47:18:54:e7:3c:94:3a:
                    b4:75:16:2d:63:68:3a:59:be:0e:af:44:7a:1f:18:
                    5e:59:da:b1:65:a3:be:8e:a4:a4:34:14:62:29:05:
                    44:9c:15:d1:9d:a3:6a:e3:f9:70:ab:69:b0:60:05:
                    26:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D6:B9:C3:8D:AF:FF:CA:E1:CD:A8:A4:14:37:32:53:0A:C5:FC:5D
            X509v3 Authority Key Identifier:
                keyid:26:E9:DB:B3:75:A4:29:F2:51:8B:74:33:EA:40:00:CA:57:7E:9A:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRD4Xfa5Upoxjfu97t7BvhtnQfAekWaC5mGn1kG4tbJt/0/26E9DBB375A429F2518B7433EA4000CA577E9AC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26E9DBB375A429F2518B7433EA4000CA577E9AC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRD4Xfa5Upoxjfu97t7BvhtnQfAekWaC5mGn1kG4tbJt/0/34352e3138372e38342e302f32322d3232203d3e20323639353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:d3:2f:4d:a7:d2:ed:e2:8b:27:74:6c:20:42:d2:93:ad:8e:
         26:b5:ac:2b:fa:3b:74:34:01:e9:f2:73:f9:68:0f:0d:60:17:
         3d:6a:97:67:b0:53:09:27:c9:6c:a8:4f:e1:ac:eb:bf:1f:66:
         05:ff:00:b7:2a:69:01:be:50:28:f9:64:8c:5b:cc:47:d1:39:
         bc:d3:f9:da:78:ce:4c:9b:91:b8:fc:72:48:50:ad:07:c4:09:
         96:35:47:4c:84:21:c2:3e:61:89:d8:3f:41:1b:c3:de:10:84:
         0a:9a:b0:8b:b6:ac:8d:3e:54:1d:b8:33:5f:ac:91:f3:f1:62:
         90:b9:3a:77:57:de:73:16:de:ed:aa:2a:29:27:3e:99:36:26:
         a0:c6:40:bf:bf:b4:2f:78:e6:fe:12:67:44:9b:b1:29:bb:f5:
         c0:af:e6:79:76:de:68:dc:2c:3e:f6:4a:ca:9a:81:97:23:c0:
         b8:79:e2:6f:49:4f:62:2f:3a:ac:90:01:b7:f4:22:dc:21:1c:
         86:6b:78:6e:59:c5:ad:6b:60:fe:42:9b:d4:fe:92:35:22:d5:
         b6:01:e5:37:31:9c:3d:fc:9d:7d:c9:32:bf:54:1d:6f:59:8a:
         76:ac:0c:a6:9b:57:fc:c7:79:7e:4f:72:cf:b2:4f:e1:03:43:
         9e:cf:95:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:04:15 2026 by rpki-client