Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/34352e3233332e3230302e302f32342d3332203d3e20323637333936.roa
File:                     34352e3233332e3230302e302f32342d3332203d3e20323637333936.roa (raw, json)
Hash identifier:          Q4KuA75V6As2Q/Z5mqsWR4MJiMZ1AROsNQiBISsabkE=
Subject key identifier:   7E:4D:2C:8C:D2:B5:63:BF:A8:D8:1C:57:07:F2:BC:56:12:AC:A9:11
Certificate issuer:       /CN=D11065C38ED3D7D0573D15A86D4828AE1D980631
Certificate serial:       601B6A5E9E96472A01AE3E7F4AEACC0409544DF6
Authority key identifier: D1:10:65:C3:8E:D3:D7:D0:57:3D:15:A8:6D:48:28:AE:1D:98:06:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11065C38ED3D7D0573D15A86D4828AE1D980631.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/34352e3233332e3230302e302f32342d3332203d3e20323637333936.roa
Signing time:             Fri 20 Mar 2026 14:44:51 +0000
ROA not before:           Fri 20 Mar 2026 14:39:51 +0000
ROA not after:            Fri 19 Mar 2027 14:44:51 +0000
asID:                     267396
IP address blocks:        45.233.200.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/D11065C38ED3D7D0573D15A86D4828AE1D980631.crl
                          rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/D11065C38ED3D7D0573D15A86D4828AE1D980631.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11065C38ED3D7D0573D15A86D4828AE1D980631.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 17:03:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:1b:6a:5e:9e:96:47:2a:01:ae:3e:7f:4a:ea:cc:04:09:54:4d:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D11065C38ED3D7D0573D15A86D4828AE1D980631
        Validity
            Not Before: Mar 20 14:39:51 2026 GMT
            Not After : Mar 19 14:44:51 2027 GMT
        Subject: CN=7E4D2C8CD2B563BFA8D81C5707F2BC5612ACA911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:6c:cf:51:c4:cd:25:ca:69:c3:ea:f9:ab:69:
                    92:37:1c:21:6a:e5:71:bb:18:a0:ed:ab:b1:18:86:
                    25:5e:75:70:a1:e2:93:a3:66:9b:7c:fc:08:78:95:
                    55:52:bd:93:24:e1:d8:d2:63:62:70:36:a4:44:72:
                    93:fa:59:49:c8:d4:7b:20:80:65:45:c7:14:8d:db:
                    f8:7d:62:8e:d6:e5:71:95:d5:4d:2e:80:b7:91:a4:
                    f0:dd:3c:74:65:83:1b:dc:b8:76:f8:0b:35:9e:8b:
                    b8:ae:f1:5b:b4:11:4c:37:06:19:c3:c3:47:b8:de:
                    09:df:a5:86:83:5a:66:f2:ad:f7:61:62:b8:c5:6a:
                    53:02:62:3a:56:87:90:89:58:b9:2e:04:4a:16:ad:
                    04:5d:f6:d1:62:22:24:95:3d:62:e7:42:ae:dd:f5:
                    50:85:dc:b5:83:36:c2:1e:4e:95:20:14:47:c2:c7:
                    1a:74:38:50:4e:74:e2:ad:d4:14:44:5b:60:f8:5f:
                    20:a4:24:f3:1a:8f:08:30:40:62:00:7b:76:94:a5:
                    e2:7e:4f:87:a4:6a:ad:49:93:9e:fd:8c:cd:c5:b6:
                    45:04:87:78:e5:21:14:9c:91:ef:a8:35:04:58:a6:
                    f7:58:5c:45:64:43:e8:21:94:7e:26:9b:84:a8:45:
                    92:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:4D:2C:8C:D2:B5:63:BF:A8:D8:1C:57:07:F2:BC:56:12:AC:A9:11
            X509v3 Authority Key Identifier:
                keyid:D1:10:65:C3:8E:D3:D7:D0:57:3D:15:A8:6D:48:28:AE:1D:98:06:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/D11065C38ED3D7D0573D15A86D4828AE1D980631.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11065C38ED3D7D0573D15A86D4828AE1D980631.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/34352e3233332e3230302e302f32342d3332203d3e20323637333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e0:6b:ab:ad:d1:c5:5a:a6:1b:bc:a8:37:86:24:91:ec:ec:9a:
         d6:e0:7b:88:f3:86:77:91:1e:a1:1b:8f:67:14:4c:cc:12:19:
         f8:98:34:b8:4b:73:fc:af:fc:6e:f8:4d:97:a4:e8:2c:79:c9:
         c4:18:04:37:51:35:bc:06:55:5c:c4:cc:0e:ec:89:1d:02:9b:
         c4:41:93:19:52:4e:6f:7d:36:78:55:34:95:0d:46:75:eb:84:
         91:2a:9c:37:cd:c1:5c:23:cd:c5:7d:8d:df:2b:cc:75:b2:24:
         07:5d:39:a1:37:b4:1f:da:13:7a:97:b3:85:a6:b5:ae:1e:3e:
         fa:7f:8b:42:f2:65:68:a5:ca:95:3f:a8:9a:45:28:3b:1c:3f:
         43:60:a9:e2:02:a0:1d:2a:b0:65:e1:3f:85:e8:1c:83:e5:01:
         35:05:47:7d:7f:b3:52:87:68:c8:5a:01:61:15:79:9f:ea:83:
         cf:0a:17:bc:85:7f:94:0b:e9:3e:d9:9f:eb:4b:94:2c:31:eb:
         29:90:08:17:e8:c2:da:70:5b:4b:90:68:28:03:52:7b:d6:d0:
         f7:c5:1e:2a:5a:18:1e:c4:b3:40:65:d3:79:31:aa:70:e4:24:
         ea:be:47:20:bb:5c:a9:1c:4c:63:fe:32:a6:7e:41:25:f6:a5:
         2c:05:93:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:20:33 2026 by rpki-client