Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/34352e3137312e34342e302f32322d3332203d3e20323638373338.roa
File:                     34352e3137312e34342e302f32322d3332203d3e20323638373338.roa (raw, json)
Hash identifier:          k7d36p9RqX/nRusucTafLnfAYRXpE6rU/LhVmZd4Bns=
Subject key identifier:   81:B6:D5:99:1A:D7:80:BC:C1:4A:AC:27:B3:81:35:2D:2D:97:77:83
Certificate issuer:       /CN=F3088C8FF406C25A15A2E28C5A995783A180F6F1
Certificate serial:       642045CF2D6DDBACCDAE2F395EC2D7F0E2A4A057
Authority key identifier: F3:08:8C:8F:F4:06:C2:5A:15:A2:E2:8C:5A:99:57:83:A1:80:F6:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3088C8FF406C25A15A2E28C5A995783A180F6F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/34352e3137312e34342e302f32322d3332203d3e20323638373338.roa
Signing time:             Mon 14 Sep 2026 18:06:32 +0000
ROA not before:           Mon 14 Sep 2026 18:01:32 +0000
ROA not after:            Mon 13 Sep 2027 18:06:32 +0000
asID:                     268738
IP address blocks:        45.171.44.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/F3088C8FF406C25A15A2E28C5A995783A180F6F1.crl
                          rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/F3088C8FF406C25A15A2E28C5A995783A180F6F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3088C8FF406C25A15A2E28C5A995783A180F6F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 08:17:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:20:45:cf:2d:6d:db:ac:cd:ae:2f:39:5e:c2:d7:f0:e2:a4:a0:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3088C8FF406C25A15A2E28C5A995783A180F6F1
        Validity
            Not Before: Sep 14 18:01:32 2026 GMT
            Not After : Sep 13 18:06:32 2027 GMT
        Subject: CN=81B6D5991AD780BCC14AAC27B381352D2D977783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e8:8d:b7:ec:84:bf:ab:29:cf:63:d2:1d:64:
                    53:5c:fb:25:af:14:20:6c:7b:51:b8:39:aa:6f:e1:
                    ee:e1:06:74:2a:02:ab:6b:cc:e6:f5:5c:9b:da:67:
                    dc:6c:74:be:3b:6a:34:c0:ce:46:9a:4a:f4:09:9c:
                    d9:d6:6b:d9:8f:d1:fa:f3:d4:53:62:56:a9:eb:d0:
                    42:3f:e6:0a:f7:a4:d6:65:6a:72:8f:33:8b:95:2b:
                    69:d5:08:ca:a4:d0:aa:ae:6b:67:00:79:51:51:bb:
                    7e:82:35:54:f5:e4:7a:0a:0f:d5:a4:fe:d4:6b:44:
                    2b:6b:19:0b:75:92:ea:8b:34:d0:1e:00:50:55:de:
                    1b:0d:b4:10:77:0f:fd:91:31:91:94:cf:d0:40:1f:
                    33:59:af:fb:2e:70:77:ef:2c:33:dd:cc:62:14:a0:
                    6c:84:7f:3f:3a:3d:b7:05:5f:55:2b:c8:c8:92:cb:
                    12:85:d5:98:9f:49:c6:ab:60:ab:82:35:b8:a8:3e:
                    6b:50:58:45:a2:dd:d3:38:4a:83:f3:27:5c:e0:73:
                    f3:b7:85:c7:53:45:8a:ee:65:fc:eb:08:04:75:bf:
                    93:d5:10:6a:f4:94:f9:65:2d:04:4c:35:42:ff:f7:
                    01:cc:4d:06:29:36:5a:3b:d4:99:83:d7:29:16:e1:
                    99:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B6:D5:99:1A:D7:80:BC:C1:4A:AC:27:B3:81:35:2D:2D:97:77:83
            X509v3 Authority Key Identifier:
                keyid:F3:08:8C:8F:F4:06:C2:5A:15:A2:E2:8C:5A:99:57:83:A1:80:F6:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/F3088C8FF406C25A15A2E28C5A995783A180F6F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3088C8FF406C25A15A2E28C5A995783A180F6F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/34352e3137312e34342e302f32322d3332203d3e20323638373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:49:1f:6d:21:aa:49:57:c2:46:1f:33:88:9e:28:73:e7:d5:
         f2:bc:ad:b6:19:69:d9:3b:d7:02:7e:e0:6c:2e:e3:9c:4f:26:
         ec:a9:35:62:fa:35:f3:6b:1c:19:b2:46:ab:87:18:7d:bb:ec:
         d1:0d:c7:aa:cf:c1:b4:86:8d:53:84:95:7b:63:7a:a9:31:db:
         28:22:8e:f3:cb:e9:4b:41:0e:83:74:be:ce:94:aa:18:2f:52:
         ae:e6:d2:92:a2:71:38:f1:41:9c:65:19:e1:d8:e7:80:57:ad:
         74:5d:49:a9:8c:75:38:e2:ff:98:d2:a2:b8:33:94:f1:f2:cf:
         35:3e:fc:7b:db:f5:b5:c7:f6:ae:0a:40:a4:a0:bc:bc:26:66:
         d3:c4:c6:1b:27:08:97:f9:c1:78:44:e1:39:8d:52:f0:93:59:
         86:63:e6:0c:8b:f0:c0:73:d5:fb:95:87:ca:03:3d:50:db:5e:
         ac:9f:b2:b2:f3:8b:60:07:31:d8:7a:4c:69:d9:22:bc:e9:df:
         22:f0:fa:26:2b:e0:58:0d:4d:71:54:0d:d8:5a:fa:7c:59:7c:
         d5:8b:47:1e:14:ed:e2:cc:4c:a2:89:d7:0d:59:03:20:a0:7b:
         48:6b:e3:4d:6e:3a:58:e0:17:e2:2a:3f:87:bc:87:80:42:fe:
         df:b2:11:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 11:12:11 2026 by rpki-client