Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/34352e3136302e3234342e302f32322d3232203d3e20323638343532.roa
File:                     34352e3136302e3234342e302f32322d3232203d3e20323638343532.roa (raw, json)
Hash identifier:          l6EeTZbGUFN43SjdH3xz27GH0ozr4uGbZKIc9cmhZYU=
Subject key identifier:   B9:F5:1A:58:C1:A2:A3:04:D0:36:B1:81:3A:AF:70:DE:49:C1:81:43
Certificate issuer:       /CN=84398976322691988CABA640BBB2854AECDF6B87
Certificate serial:       6066ADF283DB75FF41A82D1D13F061F1F16C1A23
Authority key identifier: 84:39:89:76:32:26:91:98:8C:AB:A6:40:BB:B2:85:4A:EC:DF:6B:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/34352e3136302e3234342e302f32322d3232203d3e20323638343532.roa
Signing time:             Wed 13 May 2026 17:20:44 +0000
ROA not before:           Wed 13 May 2026 17:15:44 +0000
ROA not after:            Wed 12 May 2027 17:20:44 +0000
asID:                     268452
IP address blocks:        45.160.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.crl
                          rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 17:58:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:66:ad:f2:83:db:75:ff:41:a8:2d:1d:13:f0:61:f1:f1:6c:1a:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84398976322691988CABA640BBB2854AECDF6B87
        Validity
            Not Before: May 13 17:15:44 2026 GMT
            Not After : May 12 17:20:44 2027 GMT
        Subject: CN=B9F51A58C1A2A304D036B1813AAF70DE49C18143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:46:aa:37:f5:f3:cc:5e:d0:83:c3:7e:3e:b4:
                    18:96:21:c0:3c:d2:ee:1a:17:3c:17:03:f7:cb:f8:
                    dd:a1:81:a5:b9:6f:80:7e:06:ff:b7:45:0d:fd:1a:
                    75:1f:40:b5:78:5c:bf:c1:ba:53:61:94:b6:75:e2:
                    0a:73:85:12:fe:c1:d3:24:86:85:2f:49:88:7e:6a:
                    fd:d8:6a:27:db:dc:ae:4a:c3:e5:6d:e0:f2:98:8c:
                    95:b7:bf:b9:b9:87:a2:51:73:7d:5b:53:75:a5:f2:
                    bf:f4:73:af:97:c4:65:c0:03:2a:12:2c:f5:c4:3e:
                    dd:2e:7a:22:ab:36:f3:9b:59:ca:2e:4b:f5:40:01:
                    69:24:fe:b1:78:2b:22:0b:22:9c:4d:52:dc:c5:b5:
                    94:31:a3:a0:a1:e3:64:ad:24:d9:c4:64:8b:96:a6:
                    bd:87:bd:02:f8:9e:49:d4:c3:43:86:a2:2b:61:1a:
                    49:3d:68:e6:77:9d:91:77:7f:09:96:a5:98:dc:90:
                    89:fe:d9:da:95:00:04:34:f8:73:2e:1b:b8:3f:73:
                    cc:f9:fa:5c:85:f4:a2:11:9f:19:85:77:89:e0:0e:
                    7f:9a:12:8e:2f:4a:4d:66:58:1b:9a:0f:f8:1a:e7:
                    9e:cc:e4:14:80:c5:dd:0b:42:fd:f7:eb:c3:16:92:
                    65:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F5:1A:58:C1:A2:A3:04:D0:36:B1:81:3A:AF:70:DE:49:C1:81:43
            X509v3 Authority Key Identifier:
                keyid:84:39:89:76:32:26:91:98:8C:AB:A6:40:BB:B2:85:4A:EC:DF:6B:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/34352e3136302e3234342e302f32322d3232203d3e20323638343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:1c:88:dc:58:24:a5:93:58:13:cc:4a:e7:d5:c9:1a:11:88:
         d9:2b:be:d2:9f:9a:f5:70:fc:95:40:62:66:75:72:a2:ff:2d:
         b4:80:d8:49:b6:9c:76:49:c0:f9:5e:9e:f1:b0:eb:97:3b:72:
         e2:82:56:da:6c:ad:51:a0:0d:de:3b:31:08:72:4d:ff:87:b0:
         9c:84:eb:09:d3:02:23:8e:34:9b:b7:e5:c2:6f:e7:44:e2:cc:
         49:ca:74:08:33:b0:8a:f1:40:d9:e4:7f:e3:76:b7:e6:17:f2:
         6d:ec:3e:a4:36:aa:45:e1:44:21:ac:fc:68:a3:62:ef:9a:74:
         a5:b5:58:b9:8b:ff:68:43:2c:00:69:28:1b:c3:e4:f2:20:42:
         3f:87:14:de:10:b7:1e:01:95:a6:5c:9c:e4:31:21:2c:e3:f5:
         95:f1:33:48:74:9e:eb:97:3d:b1:77:e8:19:c2:b5:f4:f0:6a:
         9d:4f:8d:8a:4f:de:2d:1a:7e:b4:f8:dc:f3:34:db:03:17:01:
         95:a4:c5:63:8c:16:4f:45:88:ec:31:ce:42:10:91:a9:c7:c6:
         d0:5c:28:ba:d5:bf:dd:f5:5c:52:75:ca:cd:82:43:f8:72:7a:
         3c:83:fd:67:5d:9c:d8:8d:4b:90:98:b6:83:44:17:a2:03:35:
         71:3d:b3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:58:46 2026 by rpki-client