Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/34352e3137372e342e302f32332d3332203d3e20323638393433.roa
File:                     34352e3137372e342e302f32332d3332203d3e20323638393433.roa (raw, json)
Hash identifier:          Gu7Fpv5pz27GFga3bRLg8jiFLxXFoVWYG/6J+CUyVVo=
Subject key identifier:   84:4A:14:76:4B:AD:66:A2:5D:5E:CE:4C:F5:D2:B2:33:86:30:3A:6D
Certificate issuer:       /CN=244210A52780C11301B2190D98A2A7329C57A68B
Certificate serial:       3FF47F7C1DA46B875E15B982C920DF829D5235BB
Authority key identifier: 24:42:10:A5:27:80:C1:13:01:B2:19:0D:98:A2:A7:32:9C:57:A6:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/244210A52780C11301B2190D98A2A7329C57A68B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/34352e3137372e342e302f32332d3332203d3e20323638393433.roa
Signing time:             Wed 06 May 2026 14:08:58 +0000
ROA not before:           Wed 06 May 2026 14:03:58 +0000
ROA not after:            Wed 05 May 2027 14:08:58 +0000
asID:                     268943
IP address blocks:        45.177.4.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/244210A52780C11301B2190D98A2A7329C57A68B.crl
                          rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/244210A52780C11301B2190D98A2A7329C57A68B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/244210A52780C11301B2190D98A2A7329C57A68B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 07:15:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:f4:7f:7c:1d:a4:6b:87:5e:15:b9:82:c9:20:df:82:9d:52:35:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=244210A52780C11301B2190D98A2A7329C57A68B
        Validity
            Not Before: May  6 14:03:58 2026 GMT
            Not After : May  5 14:08:58 2027 GMT
        Subject: CN=844A14764BAD66A25D5ECE4CF5D2B23386303A6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4b:c2:8f:7c:e1:5b:4c:fe:60:cc:90:43:c0:
                    08:ce:5b:89:ca:7b:d5:a1:03:e8:c7:4e:ad:e1:1c:
                    7f:ae:1d:8f:35:48:ff:9c:2f:b1:ef:6e:11:43:2b:
                    7a:8d:b4:33:62:cd:7c:45:0a:b0:00:1e:95:bc:f9:
                    c6:45:e5:57:bd:2a:6f:06:e7:4f:a8:e3:8b:97:20:
                    8f:10:9b:2a:66:f9:54:90:e0:46:79:c5:8f:bd:f0:
                    17:3f:66:ff:ff:8a:1b:62:fd:3a:7e:fd:a2:9c:d4:
                    93:2b:a8:4c:dd:82:ad:73:4a:c0:82:86:4c:d2:07:
                    fa:e6:a9:08:01:91:11:c5:ee:66:10:b5:ed:9f:43:
                    bb:12:bd:68:12:c5:66:9c:4e:00:43:ca:f6:41:fc:
                    a0:f5:0d:5e:84:7f:e4:82:4a:cb:04:36:1e:98:11:
                    5c:06:bb:7c:b3:ac:3b:a6:b1:93:95:d4:21:f6:54:
                    6d:f3:61:0a:4e:0f:d1:9e:ca:04:e2:05:ea:6a:7f:
                    d4:7a:b2:0e:06:96:d8:f3:f5:56:5b:5a:9b:a5:aa:
                    83:d8:cb:a8:c3:bb:e4:cf:d5:18:cb:c9:33:2a:b6:
                    38:4b:ff:12:8a:0c:01:56:5b:ab:5c:72:77:94:59:
                    d0:ff:eb:f4:b8:79:df:e5:45:59:8a:cc:d9:72:02:
                    1d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:4A:14:76:4B:AD:66:A2:5D:5E:CE:4C:F5:D2:B2:33:86:30:3A:6D
            X509v3 Authority Key Identifier:
                keyid:24:42:10:A5:27:80:C1:13:01:B2:19:0D:98:A2:A7:32:9C:57:A6:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/244210A52780C11301B2190D98A2A7329C57A68B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/244210A52780C11301B2190D98A2A7329C57A68B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/34352e3137372e342e302f32332d3332203d3e20323638393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ca:04:f8:68:c7:8c:72:99:1f:c2:53:42:ea:36:83:22:79:e1:
         f4:9a:4d:4b:da:a2:5d:35:d2:8e:67:9d:d1:dc:7f:33:6f:65:
         ce:dd:ce:07:fe:ae:a3:8c:07:b5:e2:2d:3e:8d:f0:c2:a8:0e:
         a5:40:3b:eb:ab:f8:75:ff:a5:58:4f:9b:96:81:6f:47:50:c3:
         6c:aa:19:92:64:c0:59:1b:9b:c1:8a:60:f1:b1:1e:d2:fb:2e:
         69:63:48:b3:53:07:7b:00:d9:07:70:bd:f4:66:d0:c2:42:d3:
         dd:f5:95:99:5e:3a:66:e8:d6:a9:36:9d:8e:a5:9f:0f:8c:c0:
         32:a2:33:fb:ac:01:cb:05:86:15:97:a4:55:f6:c4:7a:a2:b7:
         54:2a:34:1f:ce:ff:b5:65:25:05:3b:1b:8a:60:85:83:30:4b:
         c6:2a:62:f1:4e:e9:7d:ad:4e:23:cc:2f:64:11:55:16:85:07:
         4c:7b:93:d8:21:d1:1d:1b:17:20:48:da:6f:25:fd:ab:4b:a6:
         be:0c:08:6c:2a:56:8e:32:c8:eb:82:6f:23:4d:2a:43:dc:7a:
         49:07:ea:df:d2:47:86:b2:50:19:ae:3e:18:c2:c0:63:61:8b:
         23:f5:1a:1e:91:5c:9b:0a:01:3a:b6:dc:98:3b:c5:78:33:5e:
         29:33:19:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:16:08 2026 by rpki-client