Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/34352e3138302e3230352e302f32342d3234203d3e20323639313439.roa
File:                     34352e3138302e3230352e302f32342d3234203d3e20323639313439.roa (raw, json)
Hash identifier:          2pvcrge3w6cPwKLjFNXrSE1UeqrFq9klQDdovb/tU78=
Subject key identifier:   DE:E2:B2:07:3D:8D:B7:81:2E:1F:EB:82:53:4C:EB:69:54:CF:AF:01
Certificate issuer:       /CN=F82D21AF854C0D12899CF9E18B7205BCF75379D1
Certificate serial:       1D22DEEAD161A703442093CFB118D1BF8D3B305F
Authority key identifier: F8:2D:21:AF:85:4C:0D:12:89:9C:F9:E1:8B:72:05:BC:F7:53:79:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F82D21AF854C0D12899CF9E18B7205BCF75379D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/34352e3138302e3230352e302f32342d3234203d3e20323639313439.roa
Signing time:             Thu 27 Aug 2026 19:17:15 +0000
ROA not before:           Thu 27 Aug 2026 19:12:15 +0000
ROA not after:            Thu 26 Aug 2027 19:17:15 +0000
asID:                     269149
IP address blocks:        45.180.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/F82D21AF854C0D12899CF9E18B7205BCF75379D1.crl
                          rsync://rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/F82D21AF854C0D12899CF9E18B7205BCF75379D1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F82D21AF854C0D12899CF9E18B7205BCF75379D1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 17:05:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:22:de:ea:d1:61:a7:03:44:20:93:cf:b1:18:d1:bf:8d:3b:30:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F82D21AF854C0D12899CF9E18B7205BCF75379D1
        Validity
            Not Before: Aug 27 19:12:15 2026 GMT
            Not After : Aug 26 19:17:15 2027 GMT
        Subject: CN=DEE2B2073D8DB7812E1FEB82534CEB6954CFAF01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1b:a4:a4:a4:13:80:ca:f8:cb:0e:26:2d:88:
                    60:bc:d6:a6:1b:36:13:5c:0b:76:2f:a9:03:b2:62:
                    03:cf:e6:64:4e:a0:ac:ef:57:e0:d2:b6:8a:73:f8:
                    94:bb:8d:15:1b:35:9c:a1:f4:14:45:86:03:7c:b4:
                    c0:f5:f2:d2:f8:63:d5:e0:7f:83:18:49:ba:09:fb:
                    50:66:12:b7:cc:3a:94:ee:8c:7c:30:ac:6a:e5:34:
                    48:1f:7c:83:fc:97:ef:03:24:8f:9d:14:3e:d0:49:
                    06:f0:7f:0b:9b:1c:90:e3:83:c3:07:16:22:c1:ea:
                    3f:2d:a6:1f:26:11:4f:95:ab:f0:36:07:fa:93:71:
                    ac:95:38:53:7b:95:61:2d:65:d0:4a:b4:47:88:05:
                    bb:3c:fd:63:41:9f:54:ee:02:74:8a:60:db:1f:b7:
                    f3:02:17:dc:9d:48:6c:7c:33:98:57:00:99:1c:2d:
                    63:3f:c1:48:c6:2a:ad:c1:f2:21:c0:3b:bb:bb:a1:
                    8e:9a:4f:05:01:b3:8c:56:6e:53:d0:b6:0f:a7:f2:
                    55:c8:cf:11:f5:17:de:41:92:68:10:55:c1:6b:41:
                    95:c5:a7:02:a1:d5:dd:86:5a:70:59:34:c0:67:2a:
                    f9:96:fc:3f:5f:f6:7e:a6:25:95:ac:d2:3b:f7:87:
                    74:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E2:B2:07:3D:8D:B7:81:2E:1F:EB:82:53:4C:EB:69:54:CF:AF:01
            X509v3 Authority Key Identifier:
                keyid:F8:2D:21:AF:85:4C:0D:12:89:9C:F9:E1:8B:72:05:BC:F7:53:79:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/F82D21AF854C0D12899CF9E18B7205BCF75379D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F82D21AF854C0D12899CF9E18B7205BCF75379D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/34352e3138302e3230352e302f32342d3234203d3e20323639313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:74:11:4e:6e:b8:ac:be:1e:8f:aa:a3:9a:df:9f:1c:79:95:
         2a:6a:07:3b:ed:9e:a0:92:64:22:5a:87:5a:65:eb:55:87:df:
         61:57:a3:aa:52:51:f0:fa:e2:42:45:8e:80:42:34:2a:d1:90:
         89:b4:80:51:48:a1:76:3b:09:26:cc:dc:eb:c4:d9:78:e5:b2:
         75:c1:b9:d6:bd:10:a5:4a:17:f7:cd:03:20:d1:fe:24:96:45:
         e8:c8:f9:b3:e9:b7:ea:9e:27:1e:4c:ad:3f:c6:2a:43:a5:d3:
         78:76:73:ed:2c:14:0b:76:9a:fb:36:e7:ce:17:47:2e:70:9e:
         3f:4a:10:ed:72:1e:00:32:90:e0:74:fb:ae:aa:9e:3e:26:ec:
         5e:52:e2:73:19:2d:af:44:2e:b3:b9:09:85:e5:e6:2a:57:aa:
         70:b0:06:cd:53:89:51:f5:ed:c3:d0:8b:9d:31:c3:9d:8b:95:
         80:11:e3:9d:a1:34:76:19:3f:ba:96:2e:38:fe:09:90:78:f2:
         9a:f3:3a:33:1c:db:25:b8:a4:1e:e9:a5:ed:c9:c8:3c:13:90:
         42:ca:9a:6b:3b:6e:c0:9d:9d:ff:0e:cd:95:4d:10:52:e9:6f:
         fb:1a:d0:21:1d:63:c4:7b:4b:eb:cb:69:c7:26:b4:25:bb:fd:
         ff:ac:d5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:37:07 2026 by rpki-client