Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/34352e37312e34382e302f32322d3234203d3e203631353836.roa
File:                     34352e37312e34382e302f32322d3234203d3e203631353836.roa (raw, json)
Hash identifier:          8Yqydzjw0r2gLn3xrKqDMtTz97aGWsGS4FwLx8v0KIM=
Subject key identifier:   CB:2F:7E:DD:B3:21:79:43:24:10:22:19:CD:B8:81:D9:F4:32:A6:8A
Certificate issuer:       /CN=BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E
Certificate serial:       1957A68D0246DC099CEBE9FDA8515C2B911960CE
Authority key identifier: BE:25:C1:52:BA:CF:D2:DD:98:8E:23:E9:C9:7A:A1:AE:B4:BA:5B:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/34352e37312e34382e302f32322d3234203d3e203631353836.roa
Signing time:             Wed 23 Sep 2026 20:01:57 +0000
ROA not before:           Wed 23 Sep 2026 19:56:57 +0000
ROA not after:            Wed 22 Sep 2027 20:01:57 +0000
asID:                     61586
IP address blocks:        45.71.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.crl
                          rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 15:33:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:57:a6:8d:02:46:dc:09:9c:eb:e9:fd:a8:51:5c:2b:91:19:60:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E
        Validity
            Not Before: Sep 23 19:56:57 2026 GMT
            Not After : Sep 22 20:01:57 2027 GMT
        Subject: CN=CB2F7EDDB321794324102219CDB881D9F432A68A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0e:87:c2:62:c5:bc:71:3f:2b:7b:3d:82:b7:
                    bd:0f:0a:b9:09:b0:57:e0:aa:2d:56:95:d7:82:c2:
                    0f:da:4f:d3:6f:c4:2f:73:c8:59:45:42:38:ae:2b:
                    94:87:7e:96:40:5b:fa:c5:d4:f6:f1:3f:99:74:1d:
                    cc:83:a1:47:fb:0a:d1:fa:a3:1b:ec:9e:0b:fd:27:
                    24:29:2b:31:84:78:0e:a2:54:d4:bc:47:3e:5e:12:
                    61:50:4d:5a:4c:80:86:0d:1c:64:b6:64:0c:31:af:
                    d9:72:89:df:e5:ab:81:ab:a9:ad:7d:34:81:c6:0d:
                    45:4c:6d:26:78:18:a9:05:98:31:0b:4d:4b:49:3c:
                    ac:d6:dd:fb:82:52:b4:52:b2:0a:08:63:b5:ae:ad:
                    b2:e5:c4:b3:df:43:30:92:e4:57:8a:dd:c9:61:7e:
                    b9:99:ea:ff:da:5b:99:29:7c:4b:f6:62:26:fd:e8:
                    0f:36:cb:6a:44:dc:95:c0:b3:c5:b5:ba:26:75:0e:
                    69:b2:98:dd:51:66:f9:14:3d:29:8a:44:e0:b5:44:
                    2b:75:b6:63:92:64:de:3a:20:08:53:2e:78:34:2c:
                    0b:65:42:1a:b9:ad:01:4c:1f:fa:37:41:b0:18:97:
                    1d:6e:96:15:ba:bc:3e:2d:45:f9:87:0d:36:5d:17:
                    8d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:2F:7E:DD:B3:21:79:43:24:10:22:19:CD:B8:81:D9:F4:32:A6:8A
            X509v3 Authority Key Identifier:
                keyid:BE:25:C1:52:BA:CF:D2:DD:98:8E:23:E9:C9:7A:A1:AE:B4:BA:5B:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/34352e37312e34382e302f32322d3234203d3e203631353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:4e:a4:53:64:ad:95:eb:83:13:b0:37:c5:dc:18:f5:c2:b0:
         2a:2e:06:32:41:ec:fc:70:58:51:9a:9d:95:de:46:53:20:df:
         a2:80:35:c0:fc:2a:d1:9c:2b:ee:e4:c0:62:03:ed:b4:67:5b:
         0e:6d:c5:f8:18:60:75:08:82:e9:37:30:2c:d8:bd:f0:09:44:
         87:6b:6b:97:b8:ae:37:1c:39:c3:7d:89:2a:61:c8:f9:1d:ee:
         b9:6d:47:85:51:f1:37:bf:50:c3:47:a9:52:94:c8:db:10:cd:
         6e:d5:d1:cb:87:15:47:ef:e6:47:36:0a:06:eb:64:98:93:77:
         f2:6f:2c:62:22:b0:6f:21:01:83:19:03:cb:7b:d2:c9:b6:6d:
         d2:40:61:90:b3:0f:bf:ee:19:79:c1:35:52:5d:7e:83:23:13:
         f2:97:cb:6e:8c:dc:0c:f4:7b:69:ed:5c:5d:2a:47:32:c7:b9:
         0d:74:b0:25:7d:a0:09:c3:d7:54:12:c0:85:b6:c0:cb:74:d5:
         dd:af:1e:5e:bd:1b:41:b8:22:eb:4d:d8:c2:24:15:0b:8a:d4:
         40:b9:25:b5:45:c0:39:39:bd:c1:3d:be:91:22:12:9b:ce:c5:
         0c:27:52:6d:b5:4a:99:9c:a3:41:f8:a0:8d:96:93:b1:c5:75:
         52:e5:38:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 17:49:20 2026 by rpki-client