Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2hGepubiKTY8FpZPgxh3TNvMNFnU5AWjPg4tQLb3QXbH/0/34352e3136322e3130342e302f32322d3233203d3e20323638353136.roa
File:                     34352e3136322e3130342e302f32322d3233203d3e20323638353136.roa (raw, json)
Hash identifier:          HrWM5gnwEEfRPq/tqT3CSPXBoZ+qYGFqKR02AyDRnU4=
Subject key identifier:   B9:E6:35:D0:09:38:A8:41:58:57:EA:20:15:2D:38:AF:64:0B:84:A5
Certificate issuer:       /CN=BC779DF721B6D7336A615134C72893A4896EDE08
Certificate serial:       2FA567DE3672AE76EC525EFA7A1283B7059B1096
Authority key identifier: BC:77:9D:F7:21:B6:D7:33:6A:61:51:34:C7:28:93:A4:89:6E:DE:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC779DF721B6D7336A615134C72893A4896EDE08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2hGepubiKTY8FpZPgxh3TNvMNFnU5AWjPg4tQLb3QXbH/0/34352e3136322e3130342e302f32322d3233203d3e20323638353136.roa
Signing time:             Fri 08 May 2026 17:14:52 +0000
ROA not before:           Fri 08 May 2026 17:09:52 +0000
ROA not after:            Fri 07 May 2027 17:14:52 +0000
asID:                     268516
IP address blocks:        45.162.104.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2hGepubiKTY8FpZPgxh3TNvMNFnU5AWjPg4tQLb3QXbH/0/BC779DF721B6D7336A615134C72893A4896EDE08.crl
                          rsync://rpki-repo.registro.br/repo/2hGepubiKTY8FpZPgxh3TNvMNFnU5AWjPg4tQLb3QXbH/0/BC779DF721B6D7336A615134C72893A4896EDE08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC779DF721B6D7336A615134C72893A4896EDE08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 06:28:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a5:67:de:36:72:ae:76:ec:52:5e:fa:7a:12:83:b7:05:9b:10:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC779DF721B6D7336A615134C72893A4896EDE08
        Validity
            Not Before: May  8 17:09:52 2026 GMT
            Not After : May  7 17:14:52 2027 GMT
        Subject: CN=B9E635D00938A8415857EA20152D38AF640B84A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:70:c8:08:1b:5c:2f:3b:10:85:48:13:6d:97:
                    45:0c:f8:c9:b2:33:d7:f5:3a:33:1c:c2:4d:2f:b7:
                    cd:db:e8:47:6a:57:42:cb:7b:b2:53:86:a7:4b:54:
                    f9:9b:1d:fa:12:5c:9d:9a:50:fa:a9:db:bc:bd:b0:
                    01:cd:e5:55:79:68:5a:cb:d4:d4:12:4f:31:10:32:
                    b1:03:4d:9a:f0:39:3d:c4:a6:86:81:36:4c:b0:d0:
                    71:51:d0:95:af:45:68:15:b8:0a:df:88:c0:31:71:
                    88:6d:cd:c4:80:2d:95:e8:cd:1a:77:ee:24:a0:00:
                    64:c7:1f:55:6f:4a:89:23:6b:d7:d2:83:f2:27:94:
                    16:c2:fe:bd:6b:b7:aa:7c:d7:61:09:bd:62:d9:88:
                    25:c9:8f:28:09:7d:d1:0a:67:d1:02:36:c0:56:c5:
                    75:38:7c:99:01:2e:4b:2f:02:26:b2:6a:31:e1:c3:
                    99:c8:20:63:66:50:f4:41:40:f4:9d:3f:bc:f4:df:
                    67:ff:0d:75:00:9f:40:89:53:3b:58:ec:01:71:96:
                    cf:0f:32:90:c6:94:65:b0:ac:61:d7:41:4d:bd:11:
                    4a:01:67:4f:1a:e4:b6:44:16:b8:6b:a8:83:17:7a:
                    49:00:5b:a0:6b:c2:b9:45:e3:d9:c1:19:0f:03:dd:
                    e4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E6:35:D0:09:38:A8:41:58:57:EA:20:15:2D:38:AF:64:0B:84:A5
            X509v3 Authority Key Identifier:
                keyid:BC:77:9D:F7:21:B6:D7:33:6A:61:51:34:C7:28:93:A4:89:6E:DE:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2hGepubiKTY8FpZPgxh3TNvMNFnU5AWjPg4tQLb3QXbH/0/BC779DF721B6D7336A615134C72893A4896EDE08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC779DF721B6D7336A615134C72893A4896EDE08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hGepubiKTY8FpZPgxh3TNvMNFnU5AWjPg4tQLb3QXbH/0/34352e3136322e3130342e302f32322d3233203d3e20323638353136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:e9:cc:0d:be:45:93:52:61:9b:bf:4c:45:cd:8d:d7:2b:26:
         0d:e7:1a:c1:50:53:2b:b1:b5:98:f3:3b:ff:c9:c3:3a:88:68:
         31:75:1f:8b:6b:e1:03:44:1c:ce:27:ad:37:5e:1a:88:bf:4b:
         00:52:c9:9f:08:8e:06:26:a8:7f:e8:f9:15:87:85:6d:5f:17:
         5d:27:37:47:31:6c:61:b0:56:69:11:cd:73:a0:a8:29:15:48:
         e2:73:06:1e:19:40:1d:25:f7:ce:9d:d7:cc:14:1e:b7:b0:d5:
         5b:7b:e2:58:20:ad:6c:46:e1:c5:b8:4e:83:33:b3:b5:de:97:
         5a:0f:fe:ef:89:33:46:6e:77:b6:6c:47:3d:5f:e9:1e:65:43:
         6e:3c:df:18:5f:91:9e:4a:3b:68:d3:a8:dd:53:18:cc:bb:e3:
         70:49:c8:48:07:11:bd:1b:5d:8a:3f:91:d0:b1:fd:b9:3c:fb:
         f4:4b:46:f8:35:34:7d:32:d4:ef:6e:4d:91:c7:df:f6:38:76:
         38:13:37:07:cf:15:a8:1d:27:9b:08:95:e7:66:02:8a:3a:ae:
         3e:e5:1a:e0:8a:9d:89:60:88:eb:22:35:0a:0f:ca:7d:e5:5d:
         26:b1:50:b0:00:3d:f0:54:ec:15:77:06:ed:92:72:78:00:54:
         a2:31:a8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:45:21 2026 by rpki-client