Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B3HrPFEnYBwBvTAyQpfXzk6mz25mXLVsJLZ3AdFFRJZS/0/34352e3233342e3230372e302f32342d3234203d3e20323735373330.roa
File:                     34352e3233342e3230372e302f32342d3234203d3e20323735373330.roa (raw, json)
Hash identifier:          erpD03i0hvL6442LmX7bsrciimT7Vni5VHF+iQxA9J4=
Subject key identifier:   BB:8E:EF:20:74:B1:D0:8F:6E:14:3C:86:12:D2:EF:2D:53:1D:3B:42
Certificate issuer:       /CN=4C0DA6C0727D350B5C7553F51479AB514AFAE91E
Certificate serial:       46627B13860426E0094C9B11D83C42440119BBE7
Authority key identifier: 4C:0D:A6:C0:72:7D:35:0B:5C:75:53:F5:14:79:AB:51:4A:FA:E9:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C0DA6C0727D350B5C7553F51479AB514AFAE91E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B3HrPFEnYBwBvTAyQpfXzk6mz25mXLVsJLZ3AdFFRJZS/0/34352e3233342e3230372e302f32342d3234203d3e20323735373330.roa
Signing time:             Mon 11 May 2026 17:06:41 +0000
ROA not before:           Mon 11 May 2026 17:01:41 +0000
ROA not after:            Mon 10 May 2027 17:06:41 +0000
asID:                     275730
IP address blocks:        45.234.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B3HrPFEnYBwBvTAyQpfXzk6mz25mXLVsJLZ3AdFFRJZS/0/4C0DA6C0727D350B5C7553F51479AB514AFAE91E.crl
                          rsync://rpki-repo.registro.br/repo/B3HrPFEnYBwBvTAyQpfXzk6mz25mXLVsJLZ3AdFFRJZS/0/4C0DA6C0727D350B5C7553F51479AB514AFAE91E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C0DA6C0727D350B5C7553F51479AB514AFAE91E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 08:05:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:62:7b:13:86:04:26:e0:09:4c:9b:11:d8:3c:42:44:01:19:bb:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C0DA6C0727D350B5C7553F51479AB514AFAE91E
        Validity
            Not Before: May 11 17:01:41 2026 GMT
            Not After : May 10 17:06:41 2027 GMT
        Subject: CN=BB8EEF2074B1D08F6E143C8612D2EF2D531D3B42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:03:75:6a:16:68:81:f6:0c:de:a2:6f:66:f9:
                    24:13:bb:cf:5a:3c:9c:46:39:04:e0:df:17:5b:f2:
                    09:37:1b:56:7f:46:fb:d7:64:73:35:84:90:8f:f3:
                    14:8b:d1:c7:b5:48:91:72:99:48:d1:d3:0c:33:6c:
                    66:47:9f:32:1b:d1:1b:52:42:e8:20:47:c3:ea:56:
                    eb:2c:f6:29:8c:48:4b:e2:c0:c1:b9:2a:c9:a1:42:
                    16:6e:09:26:6a:b3:3c:29:3b:1b:85:d3:19:4c:22:
                    fd:62:91:14:42:98:e5:01:a2:a4:0b:1f:40:ee:19:
                    15:10:c8:6b:cc:ff:89:64:61:42:f2:fd:80:27:45:
                    99:10:88:29:64:c1:1d:03:5b:15:c2:70:f9:b0:72:
                    33:a3:09:f9:15:71:8f:fb:49:c7:fa:ae:64:cb:45:
                    0f:f8:a4:ac:98:c9:ae:cc:74:03:40:6a:38:0f:d8:
                    ba:5a:e6:82:07:02:07:25:4e:8d:9d:77:c6:5e:66:
                    a8:4a:0b:03:9c:b6:35:41:67:e5:e2:cc:a1:db:7e:
                    1f:c8:21:a1:8e:de:2c:47:45:86:0e:8e:79:0c:6f:
                    d4:d4:80:6b:d4:d5:4e:4c:fe:a8:1e:f7:fb:fd:c5:
                    cc:27:30:04:01:b2:84:79:60:c2:82:54:f2:2b:e3:
                    89:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:8E:EF:20:74:B1:D0:8F:6E:14:3C:86:12:D2:EF:2D:53:1D:3B:42
            X509v3 Authority Key Identifier:
                keyid:4C:0D:A6:C0:72:7D:35:0B:5C:75:53:F5:14:79:AB:51:4A:FA:E9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B3HrPFEnYBwBvTAyQpfXzk6mz25mXLVsJLZ3AdFFRJZS/0/4C0DA6C0727D350B5C7553F51479AB514AFAE91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C0DA6C0727D350B5C7553F51479AB514AFAE91E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B3HrPFEnYBwBvTAyQpfXzk6mz25mXLVsJLZ3AdFFRJZS/0/34352e3233342e3230372e302f32342d3234203d3e20323735373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:39:7c:52:eb:43:97:bc:39:1e:b1:ad:b8:c3:37:f2:f8:a9:
         21:41:c7:d1:6f:29:78:ff:61:19:01:ec:2c:e6:9d:a4:cf:70:
         57:f1:09:95:ab:1d:67:de:c6:1d:4c:40:4f:54:14:0a:86:91:
         dc:a6:1c:a1:3a:5a:1f:39:46:d1:f9:e6:cb:9f:3d:a4:a7:e6:
         8d:20:03:fa:67:5e:f6:4e:ea:0b:77:47:4b:c1:b4:b5:fa:6c:
         bb:e8:0b:d9:a4:41:dd:38:45:2d:6f:05:4b:dd:b2:9d:6a:09:
         22:37:56:dc:d5:b9:0e:d8:1e:fe:0c:99:57:08:78:38:15:94:
         a0:5b:6e:7a:7b:c5:4d:bc:70:80:97:98:b3:08:25:11:a7:c3:
         3e:75:7c:53:fd:50:f8:4b:ff:6b:5d:55:09:1f:49:66:ef:da:
         4c:c8:8e:f2:d2:20:fb:05:33:4d:f4:cb:10:a7:10:72:2c:54:
         2d:91:90:66:92:3e:5b:44:28:4d:ed:fd:d3:7f:0d:c9:1c:7a:
         c4:aa:b3:b6:bc:2d:b8:f8:07:f4:ae:75:7b:17:07:5e:e8:a1:
         8b:ee:5b:6f:d7:c7:f0:be:03:18:e5:57:f8:f1:8e:dc:07:52:
         6f:85:ba:03:d0:fc:43:18:bd:d9:79:6a:0c:06:eb:07:15:03:
         d0:d2:d1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:17:39 2026 by rpki-client