Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/34352e3136302e3234352e302f32342d3234203d3e20323638343532.roa
File:                     34352e3136302e3234352e302f32342d3234203d3e20323638343532.roa (raw, json)
Hash identifier:          Yi5A1lphLn7DrNhMqDNrbPhc9qDvUhFpt1CcO6Rm5Ck=
Subject key identifier:   D3:05:D5:98:94:B4:DF:E7:99:F8:FA:40:A2:17:C3:61:F9:FA:15:BC
Certificate issuer:       /CN=84398976322691988CABA640BBB2854AECDF6B87
Certificate serial:       710FE46EF7B50B6355FD6DC1E6AF78D18ADBD963
Authority key identifier: 84:39:89:76:32:26:91:98:8C:AB:A6:40:BB:B2:85:4A:EC:DF:6B:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/34352e3136302e3234352e302f32342d3234203d3e20323638343532.roa
Signing time:             Mon 04 May 2026 18:19:32 +0000
ROA not before:           Mon 04 May 2026 18:14:32 +0000
ROA not after:            Mon 03 May 2027 18:19:32 +0000
asID:                     268452
IP address blocks:        45.160.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.crl
                          rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 17:58:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:0f:e4:6e:f7:b5:0b:63:55:fd:6d:c1:e6:af:78:d1:8a:db:d9:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84398976322691988CABA640BBB2854AECDF6B87
        Validity
            Not Before: May  4 18:14:32 2026 GMT
            Not After : May  3 18:19:32 2027 GMT
        Subject: CN=D305D59894B4DFE799F8FA40A217C361F9FA15BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ce:63:51:a0:8d:6c:4a:ff:7a:e2:39:a4:a9:
                    ec:94:92:c1:d3:4e:f4:57:ed:3e:aa:6a:70:a2:ff:
                    f2:1a:93:c0:56:e4:fe:c4:64:2f:4a:c1:07:40:db:
                    84:a9:c2:40:7c:70:3b:66:c2:f9:13:dc:33:1a:f0:
                    cb:0c:2b:16:bc:00:58:44:18:f2:a8:15:5f:a2:3f:
                    66:54:89:81:2a:0a:f7:07:90:64:8d:02:1c:c5:2e:
                    66:92:dc:61:7f:f5:0a:ac:e2:5f:22:3a:71:f7:ec:
                    1f:86:00:cd:f5:a8:4f:ab:cb:84:c0:4c:cf:61:f8:
                    5d:e0:7e:86:a1:72:f4:29:8f:70:84:6a:a8:21:3f:
                    15:0a:fd:df:da:7f:d7:3a:f9:bd:d0:58:d6:2f:c8:
                    65:ce:21:5f:69:8f:34:2b:62:d6:65:45:f8:f6:1c:
                    e1:7c:93:60:14:18:1d:01:83:9a:f3:61:fc:17:ed:
                    c3:ee:3c:39:0d:e7:2d:e3:71:2b:07:41:67:b1:12:
                    a6:bb:ad:af:99:7d:8f:21:fb:64:f8:b9:df:1f:95:
                    08:81:3e:3e:02:97:ec:e3:32:72:87:40:c0:e1:1d:
                    d4:34:52:1c:e3:28:b9:59:c9:80:e0:bb:b8:8d:2c:
                    9b:3a:be:e5:6a:26:84:0f:5c:15:8d:00:ec:31:ca:
                    6e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:05:D5:98:94:B4:DF:E7:99:F8:FA:40:A2:17:C3:61:F9:FA:15:BC
            X509v3 Authority Key Identifier:
                keyid:84:39:89:76:32:26:91:98:8C:AB:A6:40:BB:B2:85:4A:EC:DF:6B:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/34352e3136302e3234352e302f32342d3234203d3e20323638343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:4b:5a:a4:78:50:f2:1e:74:83:e7:66:0f:f6:e1:2b:72:3e:
         a5:d6:6f:e5:eb:94:af:f6:5d:91:dd:b4:33:69:21:26:a4:9c:
         75:7e:26:0f:fa:56:1e:19:5d:21:ec:5d:6e:56:bd:b9:75:35:
         de:96:85:01:ba:4a:c5:cc:54:6f:c2:68:a4:92:24:03:f4:84:
         62:28:9c:ca:df:8a:81:66:72:08:6c:a8:3b:9d:fc:05:1b:75:
         cb:23:d1:5f:bc:28:ac:b8:1e:9e:68:1e:92:14:b5:d2:14:cf:
         ea:eb:c2:71:fa:2f:6b:ba:a7:1d:03:d3:14:9b:27:b4:5b:58:
         eb:a7:bf:1d:24:db:e8:55:38:14:a4:a4:0c:bb:a7:f3:d2:bd:
         1a:0a:6f:e4:a3:79:08:81:43:de:6f:7f:fc:e7:27:6c:ef:a0:
         0d:1b:a2:5b:19:c6:3c:f3:d3:f8:50:85:e9:0e:03:f8:b7:be:
         1b:78:92:48:ca:0e:0f:e8:53:93:10:48:4f:2f:cc:b4:4a:69:
         85:4f:ef:b8:4f:cc:fe:b0:9b:87:1a:87:5e:30:f3:e6:0d:f5:
         7f:35:db:4a:c8:5d:32:87:8e:fa:b7:88:ad:f7:aa:6d:eb:1c:
         e1:f6:43:bd:8b:ba:cb:62:49:77:4c:da:97:5f:db:7b:3d:5d:
         15:01:1c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:59:17 2026 by rpki-client