Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/34352e3232392e3234302e302f32322d3232203d3e20323637313432.roa
File:                     34352e3232392e3234302e302f32322d3232203d3e20323637313432.roa (raw, json)
Hash identifier:          HCLdkfI4Z4OyDXcZBPc0+4nsarlUClntHgqh4SZCztQ=
Subject key identifier:   98:82:30:C0:73:5A:D5:6E:2F:4D:B1:C6:16:33:D6:91:CD:AF:2E:A1
Certificate issuer:       /CN=8B61F412D9491EE5358447F35A3653BE4A23D667
Certificate serial:       46C261555122EE8A3014A3E2F8AEE0B9EF33FD86
Authority key identifier: 8B:61:F4:12:D9:49:1E:E5:35:84:47:F3:5A:36:53:BE:4A:23:D6:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B61F412D9491EE5358447F35A3653BE4A23D667.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/34352e3232392e3234302e302f32322d3232203d3e20323637313432.roa
Signing time:             Wed 25 Mar 2026 16:17:22 +0000
ROA not before:           Wed 25 Mar 2026 16:12:22 +0000
ROA not after:            Wed 24 Mar 2027 16:17:22 +0000
asID:                     267142
IP address blocks:        45.229.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/8B61F412D9491EE5358447F35A3653BE4A23D667.crl
                          rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/8B61F412D9491EE5358447F35A3653BE4A23D667.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B61F412D9491EE5358447F35A3653BE4A23D667.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 14:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c2:61:55:51:22:ee:8a:30:14:a3:e2:f8:ae:e0:b9:ef:33:fd:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B61F412D9491EE5358447F35A3653BE4A23D667
        Validity
            Not Before: Mar 25 16:12:22 2026 GMT
            Not After : Mar 24 16:17:22 2027 GMT
        Subject: CN=988230C0735AD56E2F4DB1C61633D691CDAF2EA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:91:18:cd:dc:ab:13:ae:cd:b7:db:c6:c2:60:
                    5a:54:cf:9e:5e:81:50:48:b6:11:93:23:be:0a:10:
                    84:4c:0d:47:bf:0d:e9:07:b3:8a:e9:2c:85:1f:60:
                    61:7e:4d:08:d1:d0:de:36:a4:d1:2e:0c:23:38:24:
                    ff:e1:be:9f:e8:46:ac:15:68:9a:6d:53:2e:34:f8:
                    c5:1d:7b:f8:a5:b1:8f:c2:21:e5:70:58:4b:11:3b:
                    9c:79:38:7e:e1:a8:38:e5:bc:46:0a:a5:3b:ee:65:
                    52:4b:1a:16:74:a1:fd:a3:57:04:ba:fb:f7:30:ee:
                    cc:70:48:26:e3:1f:40:fb:7e:8c:7b:76:1f:c7:2f:
                    d9:f3:f6:74:27:da:86:2e:4b:f3:b3:31:26:af:e8:
                    60:28:7c:9c:50:91:1b:fb:88:2e:f7:5e:2b:25:fa:
                    5f:5f:e6:3c:1e:57:5f:e6:2b:ea:89:a3:ad:c7:f8:
                    01:00:19:75:16:5a:c3:a3:58:c7:3b:de:9a:f5:34:
                    27:42:17:28:9a:c2:34:86:9a:8c:62:fb:79:5d:41:
                    85:a2:1c:bc:eb:de:48:33:db:ff:4d:21:92:be:e8:
                    e4:2b:44:b5:ff:4a:a8:76:aa:84:1d:c8:88:23:a8:
                    2d:a5:3f:98:e1:fe:2c:30:0c:d3:7f:ac:cc:c2:46:
                    0f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:82:30:C0:73:5A:D5:6E:2F:4D:B1:C6:16:33:D6:91:CD:AF:2E:A1
            X509v3 Authority Key Identifier:
                keyid:8B:61:F4:12:D9:49:1E:E5:35:84:47:F3:5A:36:53:BE:4A:23:D6:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/8B61F412D9491EE5358447F35A3653BE4A23D667.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B61F412D9491EE5358447F35A3653BE4A23D667.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/34352e3232392e3234302e302f32322d3232203d3e20323637313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:f5:41:bb:3e:36:7c:e5:1e:1d:70:8e:b5:03:54:15:25:c7:
         c8:40:12:3b:1d:a1:81:dd:45:8b:79:98:e3:01:fc:27:5b:dc:
         14:00:0a:f9:48:46:30:b3:5b:90:f1:42:b8:d1:ca:58:80:97:
         9a:b5:d6:61:e4:b2:4c:95:53:a1:c1:59:51:a1:2f:51:72:01:
         20:f4:14:1e:a8:8a:01:b5:05:02:08:0c:4e:f6:df:03:45:fa:
         60:72:3a:0f:69:20:28:ba:2c:5f:c3:2a:7e:8b:f3:6b:08:0d:
         e4:ce:df:9a:59:4f:65:7d:0d:d5:a9:39:98:e3:81:7e:3f:68:
         77:ad:5b:2e:a1:30:a8:0d:51:1c:32:fd:50:9c:c5:50:23:ed:
         d3:77:20:db:0e:98:7f:20:27:fe:60:b7:2c:aa:82:a9:2e:0a:
         9e:6f:02:c9:20:4f:25:56:74:bc:a8:a4:86:1c:e5:99:13:d5:
         e9:c4:73:66:fc:be:cc:d9:d2:3b:e2:95:14:94:93:e4:9c:e6:
         a9:81:8f:ed:ce:9d:d2:91:85:48:f7:02:a7:a6:37:1a:c5:69:
         40:fc:fc:4a:bd:f4:e5:5c:6a:34:e7:7b:60:b8:8d:89:8f:ee:
         fe:44:5a:f5:9e:af:94:18:ad:82:8a:98:60:73:00:92:45:9f:
         32:7a:7c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:08:09 2026 by rpki-client