Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HAF1Wj4KgVQpjzyojmhTbekjdmXKknvESETzuona3KoR/1/34352e3233352e3132342e302f32332d3233203d3e20323638313936.roa
File:                     34352e3233352e3132342e302f32332d3233203d3e20323638313936.roa (raw, json)
Hash identifier:          l6ifbg71nl28gRhuHFkI3PD4RpPZa+G/rE4zfZ+AYCA=
Subject key identifier:   F1:0D:48:07:AA:89:84:B1:28:A0:23:F1:D9:06:3E:8B:DA:99:28:35
Certificate issuer:       /CN=CB601D115CEB36F637ECADD253ADEDD3C59DFDC3
Certificate serial:       760BCA364AB84779209C4134E7267F31C6CA9365
Authority key identifier: CB:60:1D:11:5C:EB:36:F6:37:EC:AD:D2:53:AD:ED:D3:C5:9D:FD:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB601D115CEB36F637ECADD253ADEDD3C59DFDC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HAF1Wj4KgVQpjzyojmhTbekjdmXKknvESETzuona3KoR/1/34352e3233352e3132342e302f32332d3233203d3e20323638313936.roa
Signing time:             Fri 13 Mar 2026 22:20:34 +0000
ROA not before:           Fri 13 Mar 2026 22:15:34 +0000
ROA not after:            Fri 12 Mar 2027 22:20:34 +0000
asID:                     268196
IP address blocks:        45.235.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HAF1Wj4KgVQpjzyojmhTbekjdmXKknvESETzuona3KoR/1/CB601D115CEB36F637ECADD253ADEDD3C59DFDC3.crl
                          rsync://rpki-repo.registro.br/repo/HAF1Wj4KgVQpjzyojmhTbekjdmXKknvESETzuona3KoR/1/CB601D115CEB36F637ECADD253ADEDD3C59DFDC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB601D115CEB36F637ECADD253ADEDD3C59DFDC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 10:57:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:0b:ca:36:4a:b8:47:79:20:9c:41:34:e7:26:7f:31:c6:ca:93:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB601D115CEB36F637ECADD253ADEDD3C59DFDC3
        Validity
            Not Before: Mar 13 22:15:34 2026 GMT
            Not After : Mar 12 22:20:34 2027 GMT
        Subject: CN=F10D4807AA8984B128A023F1D9063E8BDA992835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f7:c4:3e:5d:fc:da:fa:9d:48:db:38:ed:23:
                    66:bb:e5:1e:5e:28:69:49:ac:7d:3d:67:c4:5c:23:
                    7d:cb:38:c5:95:2c:ee:a9:a9:40:3f:46:61:8b:37:
                    0b:07:b6:7a:af:dd:c7:10:83:a8:02:f3:e7:3c:be:
                    eb:f1:98:ab:d2:38:c4:b2:6c:01:1c:3f:80:0c:7b:
                    9a:18:1e:e9:26:ab:6d:d9:c8:2a:e5:ad:77:5a:74:
                    44:75:54:1b:96:a0:c1:05:4c:f1:dc:47:4c:85:ee:
                    80:b9:91:0e:cb:0c:c2:e6:1b:43:2d:a1:bf:05:65:
                    3e:3f:d7:2b:df:be:34:ba:ad:18:07:4c:b0:31:79:
                    36:79:64:3b:69:7b:d0:85:d9:3b:73:36:10:50:d3:
                    00:a3:a9:d2:8b:0d:16:88:20:23:e2:96:1e:9f:c9:
                    33:ff:81:8e:d8:f0:59:02:54:4b:70:e9:15:11:f7:
                    c9:4e:12:7a:df:0e:2b:8d:e6:d8:6e:8f:37:4a:5e:
                    3a:fc:92:7f:6e:97:ab:63:64:85:68:58:fc:67:59:
                    92:2a:fc:11:46:24:56:06:8b:87:5f:0e:5a:a2:eb:
                    64:a6:4b:8f:0b:69:a1:34:51:d8:ea:15:2c:fe:a2:
                    6c:09:34:34:93:a1:b8:c6:41:6a:51:1e:79:99:46:
                    58:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:0D:48:07:AA:89:84:B1:28:A0:23:F1:D9:06:3E:8B:DA:99:28:35
            X509v3 Authority Key Identifier:
                keyid:CB:60:1D:11:5C:EB:36:F6:37:EC:AD:D2:53:AD:ED:D3:C5:9D:FD:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HAF1Wj4KgVQpjzyojmhTbekjdmXKknvESETzuona3KoR/1/CB601D115CEB36F637ECADD253ADEDD3C59DFDC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB601D115CEB36F637ECADD253ADEDD3C59DFDC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HAF1Wj4KgVQpjzyojmhTbekjdmXKknvESETzuona3KoR/1/34352e3233352e3132342e302f32332d3233203d3e20323638313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:68:24:42:ae:6c:11:8d:06:6b:47:27:26:e0:2d:bb:2f:0d:
         fd:f9:e6:41:7f:bf:5a:c8:b6:d6:69:74:0b:f0:e7:97:b5:ea:
         5c:ea:e4:35:47:d8:bd:30:fa:30:ca:ae:da:7d:27:5c:71:b2:
         72:07:2f:1e:cb:6f:79:c9:43:dc:06:44:a0:ab:e6:2f:8f:7b:
         db:65:6e:d7:ee:45:da:1a:3a:2a:16:14:06:a6:b2:cf:84:a3:
         53:c0:4a:4b:b1:c1:fc:52:e4:2b:be:a6:de:94:c3:f3:6b:a4:
         3f:c3:ab:66:4d:08:84:c4:ff:25:e5:88:da:86:75:f2:d3:ba:
         67:4f:ce:8d:cf:d3:6c:40:fa:40:2d:05:97:db:4a:7f:ea:64:
         d5:da:07:55:6c:07:63:70:e9:0f:4a:17:d9:1a:85:dd:c7:00:
         8c:ff:02:50:d8:f2:99:b6:cd:c1:a4:5b:e8:44:6b:c8:60:52:
         f1:9c:c3:90:bb:0a:8a:aa:59:df:17:c8:74:95:af:d4:21:76:
         60:d8:ee:d7:ba:c8:6d:b4:4a:f4:f0:b4:b2:96:16:d4:4e:90:
         47:ec:25:57:59:bf:bb:ed:03:c6:1a:47:71:8e:03:d4:9b:89:
         6b:46:6c:41:e7:85:25:d3:ec:b2:2e:0e:8d:e8:1d:74:c4:f9:
         05:a1:00:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:38:45 2026 by rpki-client