Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/34352e3233382e3131322e302f32322d3234203d3e20323638333331.roa
File:                     34352e3233382e3131322e302f32322d3234203d3e20323638333331.roa (raw, json)
Hash identifier:          oHB+oEaihGTXv3ZjAKgzyYMmHCCo0BAwJw0MoI7QWH0=
Subject key identifier:   E8:7F:43:C1:0C:72:15:34:1F:35:FE:0F:EA:DD:7E:64:AC:60:89:0C
Certificate issuer:       /CN=BF9D09185198062395625CCDCA55DA0C823BC527
Certificate serial:       09FE6798A93FC099DC4B8031C4437B5905F7756D
Authority key identifier: BF:9D:09:18:51:98:06:23:95:62:5C:CD:CA:55:DA:0C:82:3B:C5:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF9D09185198062395625CCDCA55DA0C823BC527.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/34352e3233382e3131322e302f32322d3234203d3e20323638333331.roa
Signing time:             Fri 24 Apr 2026 15:07:56 +0000
ROA not before:           Fri 24 Apr 2026 15:02:56 +0000
ROA not after:            Fri 23 Apr 2027 15:07:56 +0000
asID:                     268331
IP address blocks:        45.238.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/BF9D09185198062395625CCDCA55DA0C823BC527.crl
                          rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/BF9D09185198062395625CCDCA55DA0C823BC527.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF9D09185198062395625CCDCA55DA0C823BC527.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 10:55:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:fe:67:98:a9:3f:c0:99:dc:4b:80:31:c4:43:7b:59:05:f7:75:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF9D09185198062395625CCDCA55DA0C823BC527
        Validity
            Not Before: Apr 24 15:02:56 2026 GMT
            Not After : Apr 23 15:07:56 2027 GMT
        Subject: CN=E87F43C10C7215341F35FE0FEADD7E64AC60890C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7b:3f:fe:11:ee:93:48:9e:43:8e:33:b9:4e:
                    c8:6a:dc:9d:dc:7b:7b:30:23:e3:8b:80:da:b6:99:
                    5e:84:11:83:fb:59:39:2b:4b:f9:c3:b1:69:55:ce:
                    a2:d5:01:c5:01:ae:2f:97:54:53:b7:ef:d5:a2:0d:
                    11:db:00:16:04:e6:8c:dc:bf:2f:63:14:9b:dd:cb:
                    64:50:59:31:88:48:d5:85:cb:9e:62:23:9b:21:a5:
                    35:c3:ed:3d:0c:61:b2:35:e4:9f:0f:47:8c:4a:ff:
                    e0:34:9e:c5:b9:ef:a0:ae:19:d1:ce:28:3b:31:93:
                    74:af:3e:c8:0e:06:3d:4a:96:49:ef:85:c4:cf:65:
                    d1:72:4b:a2:36:c1:da:ca:8f:4f:e1:9b:93:af:04:
                    13:ae:a8:ab:f6:5a:9b:85:38:a8:2e:c0:a6:5a:96:
                    df:e2:07:dd:05:9c:61:3c:05:0b:a2:72:97:d8:d3:
                    dd:de:ae:1a:1b:82:b3:4a:3a:d8:cb:77:0f:6c:17:
                    d8:a5:ea:65:83:bc:08:2f:ad:32:d7:24:3f:69:0d:
                    cd:f6:96:bf:fa:3c:17:c2:b5:12:53:b4:26:34:e6:
                    54:0a:34:4b:45:69:7c:04:cc:1e:a5:6f:8c:7b:c5:
                    bb:62:16:c8:58:2a:de:bd:09:1b:c1:6a:14:1f:4f:
                    47:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:7F:43:C1:0C:72:15:34:1F:35:FE:0F:EA:DD:7E:64:AC:60:89:0C
            X509v3 Authority Key Identifier:
                keyid:BF:9D:09:18:51:98:06:23:95:62:5C:CD:CA:55:DA:0C:82:3B:C5:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/BF9D09185198062395625CCDCA55DA0C823BC527.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF9D09185198062395625CCDCA55DA0C823BC527.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/34352e3233382e3131322e302f32322d3234203d3e20323638333331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:e9:f9:05:24:41:23:51:48:d0:54:bf:08:71:a3:57:67:bf:
         c9:ff:fb:66:8c:72:18:88:07:c8:b2:80:73:a1:bd:99:6e:b5:
         3e:78:91:0d:63:b3:ec:53:a5:8b:22:41:da:39:01:de:9a:89:
         55:08:27:15:89:0c:91:7b:6b:ba:d3:34:23:44:7c:ee:96:c2:
         16:ef:5c:9a:ef:f6:73:3d:0e:b3:6d:69:0c:80:e6:47:63:c5:
         0b:ce:16:30:5d:11:71:ca:1f:69:60:1d:df:21:ae:2c:0d:5e:
         46:73:7d:31:2e:9f:b5:1b:c6:9a:6c:58:fa:4e:c9:76:82:7c:
         e9:86:a9:b7:6d:e9:36:47:1a:3c:b6:8c:20:74:6a:f2:29:13:
         ae:0e:69:51:de:4a:c5:e6:18:7b:ca:3f:e7:d2:cc:3b:bd:4e:
         5e:11:b5:40:b1:c8:f8:fe:a8:02:4e:56:77:50:a5:87:c2:a9:
         84:4c:28:bd:4d:69:cc:6d:53:93:74:64:84:57:ca:99:3a:e3:
         89:c1:dc:35:4d:7f:4f:13:ee:84:17:ce:47:c2:11:5b:4d:a0:
         9d:ee:08:00:07:a5:14:77:c7:84:aa:33:cc:3f:21:75:fe:c1:
         8a:19:a9:79:93:4b:af:bc:a1:c9:fb:88:a6:74:d2:0a:c3:05:
         a7:28:9a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:42:22 2026 by rpki-client