Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HAF1Wj4KgVQpjzyojmhTbekjdmXKknvESETzuona3KoR/1/34352e3233352e3132342e302f32342d3234203d3e20323638313936.roa
File:                     34352e3233352e3132342e302f32342d3234203d3e20323638313936.roa (raw, json)
Hash identifier:          ISeRK1FWIx5z8dIgaTS3diy3PwlzLJ8QR9PKV8/8RZY=
Subject key identifier:   CB:87:4C:28:FA:B5:21:A5:37:6A:B2:EB:8A:F0:13:18:7B:AD:D8:B8
Certificate issuer:       /CN=CB601D115CEB36F637ECADD253ADEDD3C59DFDC3
Certificate serial:       10B986EE249C1DF5A1987FA300C21DE4D03AF293
Authority key identifier: CB:60:1D:11:5C:EB:36:F6:37:EC:AD:D2:53:AD:ED:D3:C5:9D:FD:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB601D115CEB36F637ECADD253ADEDD3C59DFDC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HAF1Wj4KgVQpjzyojmhTbekjdmXKknvESETzuona3KoR/1/34352e3233352e3132342e302f32342d3234203d3e20323638313936.roa
Signing time:             Fri 13 Mar 2026 22:22:42 +0000
ROA not before:           Fri 13 Mar 2026 22:17:42 +0000
ROA not after:            Fri 12 Mar 2027 22:22:42 +0000
asID:                     268196
IP address blocks:        45.235.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HAF1Wj4KgVQpjzyojmhTbekjdmXKknvESETzuona3KoR/1/CB601D115CEB36F637ECADD253ADEDD3C59DFDC3.crl
                          rsync://rpki-repo.registro.br/repo/HAF1Wj4KgVQpjzyojmhTbekjdmXKknvESETzuona3KoR/1/CB601D115CEB36F637ECADD253ADEDD3C59DFDC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB601D115CEB36F637ECADD253ADEDD3C59DFDC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 10:57:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:b9:86:ee:24:9c:1d:f5:a1:98:7f:a3:00:c2:1d:e4:d0:3a:f2:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB601D115CEB36F637ECADD253ADEDD3C59DFDC3
        Validity
            Not Before: Mar 13 22:17:42 2026 GMT
            Not After : Mar 12 22:22:42 2027 GMT
        Subject: CN=CB874C28FAB521A5376AB2EB8AF013187BADD8B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d0:36:b9:d2:34:d4:c4:66:d5:93:06:e8:70:
                    ae:f0:81:e0:66:98:bd:80:5a:0a:c1:b2:45:8a:a1:
                    f0:46:73:a8:3c:42:56:31:b3:0b:b7:ed:ec:9a:fd:
                    0d:28:d6:bb:fe:ca:86:fa:3b:ec:a7:16:f9:3b:62:
                    b5:d5:f1:d1:77:75:3b:be:b2:65:0e:bc:d0:57:6e:
                    ba:e1:d4:94:aa:c2:d7:28:c8:5d:dd:0d:22:e9:db:
                    2c:30:cd:c0:60:8d:82:91:f2:a4:e7:14:d2:fc:5a:
                    b8:35:c4:c7:f9:56:7a:af:72:72:58:09:96:43:95:
                    34:8f:62:c3:c1:79:af:cb:2c:eb:cb:aa:d6:3b:3a:
                    17:e0:6f:fc:c8:d3:69:f9:61:6b:2a:f8:8f:61:00:
                    9a:04:19:ce:c1:64:b4:35:b9:bf:aa:c2:66:f5:75:
                    c9:a6:60:0d:ff:42:54:65:39:c4:34:74:12:83:f6:
                    06:a7:19:59:8c:d8:bf:2f:23:38:3c:b5:3a:ad:31:
                    ac:0c:df:f9:94:99:4d:b4:57:0b:b7:42:01:d0:99:
                    3e:49:0e:44:da:6e:ce:97:9b:cb:1e:12:44:f2:dc:
                    dd:46:7a:76:3d:45:88:d4:5f:ac:37:4f:21:7a:4d:
                    7e:ab:1b:00:a9:b9:43:0c:b6:6c:27:4c:29:ce:7f:
                    ff:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:87:4C:28:FA:B5:21:A5:37:6A:B2:EB:8A:F0:13:18:7B:AD:D8:B8
            X509v3 Authority Key Identifier:
                keyid:CB:60:1D:11:5C:EB:36:F6:37:EC:AD:D2:53:AD:ED:D3:C5:9D:FD:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HAF1Wj4KgVQpjzyojmhTbekjdmXKknvESETzuona3KoR/1/CB601D115CEB36F637ECADD253ADEDD3C59DFDC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB601D115CEB36F637ECADD253ADEDD3C59DFDC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HAF1Wj4KgVQpjzyojmhTbekjdmXKknvESETzuona3KoR/1/34352e3233352e3132342e302f32342d3234203d3e20323638313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:4e:fb:42:bb:7c:84:c7:f2:9f:1c:83:a7:e6:23:5d:07:33:
         76:9b:01:67:20:8e:7e:51:48:81:f9:f1:79:ce:57:9d:8b:84:
         27:03:92:23:2f:dc:5e:fa:73:2e:7e:e4:e8:b8:ce:de:3c:e4:
         4e:3f:85:4d:10:ef:0f:e5:ec:ab:8c:40:75:3e:7b:6c:57:b8:
         77:03:20:08:72:39:58:ff:44:e6:7d:b1:a4:ae:60:20:65:8f:
         ea:11:23:83:bf:32:63:59:2c:7e:25:55:81:76:a9:06:07:7d:
         3d:27:40:5a:e0:29:97:d0:3b:17:08:73:7e:9d:71:38:e6:b0:
         43:bd:64:f5:13:52:50:6a:26:41:b2:05:12:9b:9b:6c:62:18:
         52:ab:14:ab:e8:43:78:ae:47:18:ab:28:25:b0:8f:ee:ed:f0:
         be:15:b8:5b:3c:48:69:ee:b6:2a:3b:98:5a:6c:c6:3e:05:23:
         ce:25:a7:4f:17:1e:fd:84:c0:ff:28:3a:4d:ec:ee:4d:0e:f4:
         fb:ad:9e:0f:95:1f:81:dd:7e:40:31:84:ee:4f:93:d7:a0:13:
         56:1f:bf:e6:b7:48:a7:01:cc:5d:7e:aa:de:2e:23:88:83:b2:
         df:f3:84:ca:f3:85:fd:be:61:e1:c4:4d:1f:62:3c:3d:2a:02:
         70:d8:79:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:18:07 2026 by rpki-client