Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/34352e3136382e39342e302f32342d3234203d3e20323733333932.roa
File:                     34352e3136382e39342e302f32342d3234203d3e20323733333932.roa (raw, json)
Hash identifier:          kgn8IJbonz1OynuApXsaZ9lWwb7G7pCYCrhGrzVkd2w=
Subject key identifier:   A6:F2:A9:0C:89:A3:2D:13:4C:84:7E:3D:00:1B:DA:E4:13:2B:7D:C2
Certificate issuer:       /CN=928F3E5FCF74B2479829DEF0B258A8F907E5008C
Certificate serial:       43C19A7623DA022D0B218806AB7B288240865F84
Authority key identifier: 92:8F:3E:5F:CF:74:B2:47:98:29:DE:F0:B2:58:A8:F9:07:E5:00:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/928F3E5FCF74B2479829DEF0B258A8F907E5008C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/34352e3136382e39342e302f32342d3234203d3e20323733333932.roa
Signing time:             Fri 11 Sep 2026 05:28:25 +0000
ROA not before:           Fri 11 Sep 2026 05:23:25 +0000
ROA not after:            Fri 10 Sep 2027 05:28:25 +0000
asID:                     273392
IP address blocks:        45.168.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/928F3E5FCF74B2479829DEF0B258A8F907E5008C.crl
                          rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/928F3E5FCF74B2479829DEF0B258A8F907E5008C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/928F3E5FCF74B2479829DEF0B258A8F907E5008C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 11:54:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:c1:9a:76:23:da:02:2d:0b:21:88:06:ab:7b:28:82:40:86:5f:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928F3E5FCF74B2479829DEF0B258A8F907E5008C
        Validity
            Not Before: Sep 11 05:23:25 2026 GMT
            Not After : Sep 10 05:28:25 2027 GMT
        Subject: CN=A6F2A90C89A32D134C847E3D001BDAE4132B7DC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:93:b5:f7:d3:fc:b7:26:6d:c9:60:66:29:43:
                    49:48:81:6a:91:85:26:13:fb:de:28:3c:c5:c4:ca:
                    ca:2f:24:b4:ac:06:22:ca:13:f5:c3:f3:f6:a0:f8:
                    4b:dc:a9:f6:45:dc:ae:40:59:7a:fa:1c:01:a4:78:
                    96:54:b6:3b:36:a8:42:d9:c1:c8:4e:c8:17:f8:c7:
                    12:59:45:26:80:91:5a:6f:11:94:f4:a9:e7:10:e7:
                    1c:57:7b:29:1b:dd:45:1a:11:38:83:2c:50:45:5a:
                    06:00:2f:3d:60:aa:58:cc:bf:50:62:88:63:f3:90:
                    59:3c:14:5d:ed:c6:56:6a:46:e0:4f:2e:5b:42:8a:
                    d9:7b:c9:2c:57:e9:48:20:c3:17:d3:4c:e4:63:aa:
                    57:cb:d5:6d:08:f1:56:65:c6:c3:a3:df:33:f6:c4:
                    a1:18:45:97:26:74:17:0f:c4:d2:28:e8:24:bb:fb:
                    20:d2:69:7c:cc:11:34:d2:6d:02:00:00:1f:98:23:
                    de:60:e4:bb:a9:2f:97:f2:7b:f9:ae:49:b8:a4:89:
                    22:ff:9b:d9:60:0a:d5:57:51:b9:b8:52:83:53:98:
                    2d:90:ba:e4:2a:a7:87:02:67:48:fc:18:7c:2f:18:
                    50:98:09:6a:61:ba:92:1e:71:fa:07:74:32:a6:e5:
                    aa:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F2:A9:0C:89:A3:2D:13:4C:84:7E:3D:00:1B:DA:E4:13:2B:7D:C2
            X509v3 Authority Key Identifier:
                keyid:92:8F:3E:5F:CF:74:B2:47:98:29:DE:F0:B2:58:A8:F9:07:E5:00:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/928F3E5FCF74B2479829DEF0B258A8F907E5008C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/928F3E5FCF74B2479829DEF0B258A8F907E5008C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/34352e3136382e39342e302f32342d3234203d3e20323733333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:fb:af:76:df:9a:04:29:94:0f:6a:cd:ea:ff:d1:1c:f4:85:
         38:41:d2:07:ca:de:34:07:48:76:41:3c:59:68:39:7f:42:0d:
         f6:4a:17:9a:79:31:3a:7b:96:99:3c:8d:72:d9:95:2f:8e:34:
         27:87:69:ff:cf:46:72:f1:44:3d:32:e0:56:88:ba:29:ec:90:
         de:fb:79:e6:17:39:bb:ff:08:4e:a7:93:84:7e:a9:9e:9d:a8:
         82:ab:f9:09:5a:16:a3:d6:a1:24:78:84:98:57:ae:9e:4e:6c:
         66:fc:ae:d7:52:31:f3:18:27:64:5a:9f:fc:85:c0:77:45:e0:
         15:74:7f:1f:11:af:32:e9:1a:0e:be:2c:56:87:f2:7a:9b:a2:
         30:6d:1f:10:03:e3:3c:4a:b4:f7:1a:dd:5c:54:99:78:c4:c9:
         60:80:18:3b:fc:de:15:74:af:99:29:09:c8:a5:60:d7:a6:9b:
         28:e6:f3:47:96:c8:90:28:04:b7:9d:f2:14:f1:90:7a:27:bf:
         8f:b0:63:d0:ab:3e:db:de:9b:01:19:2f:f2:a1:85:ae:09:7f:
         f4:50:7c:4f:20:f0:9c:5c:2f:35:44:40:99:02:a6:db:0d:e1:
         a4:65:aa:be:ff:8f:c4:d9:cd:1a:bc:5f:f9:51:1d:48:69:c2:
         e1:1a:f5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 16:14:06 2026 by rpki-client