Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/34352e342e3133322e302f32322d3332203d3e20323636303632.roa
File:                     34352e342e3133322e302f32322d3332203d3e20323636303632.roa (raw, json)
Hash identifier:          xQA94nCA0Qi8N28ZaHpj6C3/5aZy8e1p2I3wfeGE+ic=
Subject key identifier:   FD:C5:64:62:74:68:DA:23:30:D6:B4:63:E7:67:6B:A1:3E:32:B8:13
Certificate issuer:       /CN=952E367CCE60CE462735A409663E7DE3B0470E97
Certificate serial:       10FF2353CF89DFC14923252561F43CFBB3025956
Authority key identifier: 95:2E:36:7C:CE:60:CE:46:27:35:A4:09:66:3E:7D:E3:B0:47:0E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/952E367CCE60CE462735A409663E7DE3B0470E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/34352e342e3133322e302f32322d3332203d3e20323636303632.roa
Signing time:             Mon 20 Apr 2026 18:28:04 +0000
ROA not before:           Mon 20 Apr 2026 18:23:04 +0000
ROA not after:            Mon 19 Apr 2027 18:28:04 +0000
asID:                     266062
IP address blocks:        45.4.132.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/952E367CCE60CE462735A409663E7DE3B0470E97.crl
                          rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/952E367CCE60CE462735A409663E7DE3B0470E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/952E367CCE60CE462735A409663E7DE3B0470E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:59:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ff:23:53:cf:89:df:c1:49:23:25:25:61:f4:3c:fb:b3:02:59:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=952E367CCE60CE462735A409663E7DE3B0470E97
        Validity
            Not Before: Apr 20 18:23:04 2026 GMT
            Not After : Apr 19 18:28:04 2027 GMT
        Subject: CN=FDC564627468DA2330D6B463E7676BA13E32B813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3e:42:1b:ff:9b:af:e3:ce:cb:6c:ad:e4:91:
                    06:7a:d1:68:c3:90:1b:49:f3:39:7e:e3:55:03:df:
                    f7:0e:ee:79:e9:39:4e:24:77:e2:53:37:54:76:f6:
                    aa:b1:e9:a2:aa:39:6b:b1:54:89:5b:96:de:cf:9e:
                    dd:74:02:d7:57:19:e9:ec:f0:4d:73:a1:72:db:b8:
                    02:54:d1:45:9c:e8:d8:96:e2:11:d2:0a:31:f1:0b:
                    44:0c:c5:28:f9:66:42:8d:75:85:c8:24:33:7e:c2:
                    0b:27:86:dc:b4:66:d0:89:b1:ba:b9:90:57:30:c0:
                    62:d9:1b:c4:5b:74:58:f9:da:c3:5c:84:8a:34:c4:
                    0a:9e:29:41:3f:20:34:80:4b:5a:03:14:59:6b:2a:
                    0e:64:13:1b:d2:82:76:70:d7:a3:eb:83:06:f2:dd:
                    79:56:70:06:f5:2e:17:ba:27:c3:10:38:f5:8f:f0:
                    77:4e:f2:9a:b0:40:c1:eb:db:84:ab:95:61:73:d1:
                    e4:24:8f:92:99:bb:10:3a:4b:ef:ef:62:16:a4:7f:
                    b1:f3:1a:aa:3c:96:01:3b:50:8a:14:fb:21:b8:67:
                    c9:3a:5d:1b:cb:f2:62:87:77:3a:71:0e:b1:54:c9:
                    ec:cf:03:fd:6d:ce:a8:02:c6:34:64:a0:14:54:d4:
                    eb:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C5:64:62:74:68:DA:23:30:D6:B4:63:E7:67:6B:A1:3E:32:B8:13
            X509v3 Authority Key Identifier:
                keyid:95:2E:36:7C:CE:60:CE:46:27:35:A4:09:66:3E:7D:E3:B0:47:0E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/952E367CCE60CE462735A409663E7DE3B0470E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/952E367CCE60CE462735A409663E7DE3B0470E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/34352e342e3133322e302f32322d3332203d3e20323636303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:c6:3b:9a:d9:66:d8:f1:a5:79:f4:95:ab:fd:10:41:9f:7d:
         3a:bb:12:d3:b0:98:bb:df:83:d9:ae:66:99:18:04:1a:2a:ec:
         2f:42:36:df:88:25:8a:a1:be:7e:fd:15:01:8f:5c:ff:6a:5d:
         8a:84:65:01:3f:42:5a:55:5f:a0:73:57:af:ad:33:f1:4d:6a:
         f0:5d:f2:6a:4a:13:d2:80:bf:16:54:cc:15:96:8d:03:de:15:
         bd:aa:27:9e:3f:a6:fd:99:0c:2d:e7:2e:c6:1f:11:92:ed:16:
         b7:44:56:e2:a2:4b:91:ad:f1:85:69:5a:2e:57:ae:01:d0:8a:
         c4:fc:3b:79:21:19:df:6b:b7:eb:26:84:e2:69:55:96:fa:30:
         29:79:1c:31:b3:12:69:45:d8:d8:50:64:7d:fd:99:6b:e0:79:
         1d:c9:24:a9:00:e5:07:4a:6e:09:4c:e0:3f:65:34:7c:bb:1c:
         b6:bd:80:d2:17:6c:21:e5:1f:4a:99:fb:b1:30:6e:be:d9:b8:
         32:c8:3c:cf:01:74:c0:3f:ad:ce:c7:b4:e7:94:13:5e:0e:6a:
         db:0b:26:97:2e:3b:c7:43:6d:2e:95:cc:29:e7:02:61:1e:42:
         24:b7:75:7f:32:28:dd:83:17:f1:b5:cc:00:d7:f1:72:16:a0:
         ec:2c:41:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:37:50 2026 by rpki-client