Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/34352e3233332e3230312e302f32342d3332203d3e20323637333936.roa
File:                     34352e3233332e3230312e302f32342d3332203d3e20323637333936.roa (raw, json)
Hash identifier:          FoOgPe08PXC6sbeVStigRLygGy6VFgcdQYHWOWwClHM=
Subject key identifier:   EC:40:24:83:40:D2:9C:BD:3D:58:A0:C0:EE:92:1C:0F:D7:17:C3:6F
Certificate issuer:       /CN=D11065C38ED3D7D0573D15A86D4828AE1D980631
Certificate serial:       5F0C039A4CE21A818CF7F6CB4BC70BE798741955
Authority key identifier: D1:10:65:C3:8E:D3:D7:D0:57:3D:15:A8:6D:48:28:AE:1D:98:06:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11065C38ED3D7D0573D15A86D4828AE1D980631.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/34352e3233332e3230312e302f32342d3332203d3e20323637333936.roa
Signing time:             Fri 20 Mar 2026 14:44:57 +0000
ROA not before:           Fri 20 Mar 2026 14:39:57 +0000
ROA not after:            Fri 19 Mar 2027 14:44:57 +0000
asID:                     267396
IP address blocks:        45.233.201.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/D11065C38ED3D7D0573D15A86D4828AE1D980631.crl
                          rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/D11065C38ED3D7D0573D15A86D4828AE1D980631.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11065C38ED3D7D0573D15A86D4828AE1D980631.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 17:03:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:0c:03:9a:4c:e2:1a:81:8c:f7:f6:cb:4b:c7:0b:e7:98:74:19:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D11065C38ED3D7D0573D15A86D4828AE1D980631
        Validity
            Not Before: Mar 20 14:39:57 2026 GMT
            Not After : Mar 19 14:44:57 2027 GMT
        Subject: CN=EC40248340D29CBD3D58A0C0EE921C0FD717C36F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:17:e5:37:b9:60:6a:1b:e9:42:8b:07:0f:ac:
                    be:1d:50:87:4b:c5:86:44:ea:55:b1:41:d3:c4:02:
                    7b:8e:c2:4f:ce:78:16:77:8f:ef:fc:60:3b:3b:2b:
                    72:40:9c:ee:c8:5f:f0:2e:49:b0:21:cb:88:9d:6a:
                    45:9d:1d:6b:00:43:30:48:cb:48:6c:b5:18:26:3b:
                    25:eb:57:95:62:b9:a9:2f:35:73:3e:74:b5:6e:f1:
                    fb:40:a2:bb:7b:7e:29:50:e0:b2:73:3b:f9:a6:94:
                    3d:72:ea:5c:76:45:c4:74:31:3d:96:16:d6:1c:59:
                    cf:63:23:07:6d:e9:c5:ef:26:8a:25:c3:ad:76:21:
                    90:d6:75:96:02:e2:79:02:5c:26:00:68:45:6d:e1:
                    ae:f4:d7:07:35:13:de:44:0b:13:25:59:90:91:3d:
                    dc:86:65:e8:a2:ea:2d:47:ff:19:7c:fe:da:18:7d:
                    db:5c:9d:c1:b0:ec:3f:f7:03:69:dc:34:dd:71:c9:
                    84:43:c6:03:d0:c3:59:34:90:b5:ec:0d:52:98:60:
                    84:a9:33:e5:74:9d:56:20:eb:44:02:a1:c3:60:c2:
                    a1:d1:ae:00:c5:ea:53:91:32:46:4e:96:c5:d7:72:
                    31:8f:51:2a:15:0a:a9:e3:63:84:30:1d:63:e9:1d:
                    a5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:40:24:83:40:D2:9C:BD:3D:58:A0:C0:EE:92:1C:0F:D7:17:C3:6F
            X509v3 Authority Key Identifier:
                keyid:D1:10:65:C3:8E:D3:D7:D0:57:3D:15:A8:6D:48:28:AE:1D:98:06:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/D11065C38ED3D7D0573D15A86D4828AE1D980631.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11065C38ED3D7D0573D15A86D4828AE1D980631.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/34352e3233332e3230312e302f32342d3332203d3e20323637333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:30:42:b1:6a:f8:f4:e3:ce:b8:7f:5c:3a:bd:e1:b9:8c:bf:
         84:ea:7c:84:52:08:20:b9:ba:96:46:27:49:19:96:af:b2:ee:
         cb:80:02:38:40:c6:f9:1b:1f:fd:66:5a:dc:75:c5:2c:a7:99:
         bd:8a:71:44:80:3f:df:63:08:94:9f:2e:31:5c:9f:95:06:67:
         fe:ac:10:68:7e:e4:66:25:7b:72:63:39:a6:46:1e:e3:b1:9c:
         20:f9:26:6a:24:0b:0c:3f:3b:8b:95:7b:4a:a0:6d:60:60:62:
         7c:8b:16:6e:45:dd:16:e1:8b:50:41:58:b9:4e:42:18:9d:e6:
         11:da:d3:69:18:5e:0e:ba:ea:bb:dd:f2:ef:48:ce:ff:75:b8:
         08:2f:39:f0:0a:a8:e7:ee:78:f7:97:00:f3:05:bf:8c:49:07:
         15:23:fe:93:44:0b:50:8e:fc:d3:42:1f:d8:ee:64:d2:f3:90:
         fb:3c:29:04:46:c5:0d:cb:48:55:4f:71:02:72:0b:76:68:b0:
         70:61:c7:db:0d:56:85:cb:bd:9b:50:04:90:4f:fc:43:e8:2c:
         d9:a3:75:71:9a:77:9d:83:03:6c:db:b3:9f:11:c2:79:8a:36:
         dd:fe:32:ab:cd:f0:4b:97:02:71:85:90:58:c1:3a:26:d4:cb:
         31:9b:46:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:58:01 2026 by rpki-client