Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/34352e3233332e3230332e302f32342d3332203d3e20323637333936.roa
File:                     34352e3233332e3230332e302f32342d3332203d3e20323637333936.roa (raw, json)
Hash identifier:          ggI1BWP6EdG5Zi3afzpFW/42FCYSnRRhNmc7Ii5Mo4U=
Subject key identifier:   EF:C2:04:0D:F1:A5:AF:69:3A:CC:48:40:70:76:5E:77:4B:17:B7:DB
Certificate issuer:       /CN=D11065C38ED3D7D0573D15A86D4828AE1D980631
Certificate serial:       5726BB169E99CE8D7BADEE0E6395AEB7BF6F8A55
Authority key identifier: D1:10:65:C3:8E:D3:D7:D0:57:3D:15:A8:6D:48:28:AE:1D:98:06:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11065C38ED3D7D0573D15A86D4828AE1D980631.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/34352e3233332e3230332e302f32342d3332203d3e20323637333936.roa
Signing time:             Fri 20 Mar 2026 14:45:08 +0000
ROA not before:           Fri 20 Mar 2026 14:40:08 +0000
ROA not after:            Fri 19 Mar 2027 14:45:08 +0000
asID:                     267396
IP address blocks:        45.233.203.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/D11065C38ED3D7D0573D15A86D4828AE1D980631.crl
                          rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/D11065C38ED3D7D0573D15A86D4828AE1D980631.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11065C38ED3D7D0573D15A86D4828AE1D980631.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 17:03:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:26:bb:16:9e:99:ce:8d:7b:ad:ee:0e:63:95:ae:b7:bf:6f:8a:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D11065C38ED3D7D0573D15A86D4828AE1D980631
        Validity
            Not Before: Mar 20 14:40:08 2026 GMT
            Not After : Mar 19 14:45:08 2027 GMT
        Subject: CN=EFC2040DF1A5AF693ACC484070765E774B17B7DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a3:92:29:be:4f:b2:58:b9:ea:ad:c0:a4:b9:
                    b4:32:0e:96:e9:26:b3:87:e8:07:d9:83:d1:0c:09:
                    84:14:34:6d:05:91:e5:ec:20:6d:31:ee:8d:6b:61:
                    a1:f6:39:26:37:4b:48:dd:d2:f4:42:99:b0:c6:a1:
                    bf:f4:1a:70:b1:6c:8f:47:9d:52:9b:e8:77:b2:41:
                    41:cd:be:f1:1b:ce:bd:59:ca:0a:b4:ac:44:6b:54:
                    a8:ab:78:95:1a:1e:d4:1f:4f:29:a3:a6:77:b9:75:
                    ea:20:08:95:fa:03:7f:24:3c:46:32:9a:31:ef:87:
                    f3:a4:e9:bf:75:34:94:36:ff:39:ac:85:9f:e8:29:
                    96:d3:d1:3d:4d:44:8e:4b:54:20:3b:64:69:17:22:
                    05:c0:8c:e5:68:91:9c:ce:cf:1d:62:85:06:e3:8d:
                    b8:7e:f6:b5:59:62:fc:3a:ef:f3:eb:96:c5:02:eb:
                    c5:18:f3:66:3c:87:92:83:04:42:6d:dc:6e:46:82:
                    c4:c9:2c:80:69:6b:f0:8d:7c:67:8f:67:5e:d1:b1:
                    7f:8c:a4:22:6a:20:4d:63:78:87:3f:ef:f6:5d:45:
                    54:7b:d9:8b:d6:5a:ea:d2:0a:8b:5d:25:70:ee:92:
                    f5:66:84:42:e1:d3:9e:f9:79:ea:b2:c6:9a:06:e4:
                    58:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C2:04:0D:F1:A5:AF:69:3A:CC:48:40:70:76:5E:77:4B:17:B7:DB
            X509v3 Authority Key Identifier:
                keyid:D1:10:65:C3:8E:D3:D7:D0:57:3D:15:A8:6D:48:28:AE:1D:98:06:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/D11065C38ED3D7D0573D15A86D4828AE1D980631.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11065C38ED3D7D0573D15A86D4828AE1D980631.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/34352e3233332e3230332e302f32342d3332203d3e20323637333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:cc:ce:d0:79:6c:f6:b2:ed:39:65:bc:f2:22:30:73:97:bb:
         40:41:db:e1:4c:78:bb:3f:a8:50:a5:f0:4f:29:d5:81:4d:4f:
         aa:2c:72:4a:b2:1f:5a:2c:0e:80:b3:7b:a9:9a:09:10:32:50:
         36:b4:67:40:1a:de:3b:73:af:b2:03:3a:ec:30:e2:b1:c2:5e:
         b1:ce:db:89:cb:36:5a:71:87:c7:a6:17:41:44:c4:ea:65:aa:
         8a:e4:81:a3:ea:68:e5:71:1b:bc:d1:10:0a:18:4b:38:0f:23:
         83:b6:49:6c:74:23:1d:bb:cb:cc:bf:32:27:1f:51:48:3f:a8:
         c4:b5:9c:1f:b5:7e:2c:3c:68:37:a5:6c:51:6a:3f:44:89:16:
         69:ca:0e:d9:09:00:b3:15:6c:a1:49:63:6b:69:e7:61:c6:dd:
         73:ab:37:bf:c1:b3:4f:9b:e8:3e:b7:2f:42:51:fb:a6:14:0b:
         e3:db:66:88:52:d4:71:d8:62:34:0f:54:8a:80:4d:f6:40:71:
         a0:45:b7:2c:1c:1d:b3:25:b3:3f:23:64:74:71:37:4f:d0:56:
         df:0a:f7:4b:ba:12:37:8f:26:8c:d6:64:96:5d:e6:fc:2a:79:
         a4:0d:7f:37:b4:61:f1:7d:a1:51:d8:9b:a9:59:97:9e:08:14:
         15:03:ab:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:21:05 2026 by rpki-client