Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/34352e3137302e39362e302f32322d3332203d3e20323638313537.roa
File:                     34352e3137302e39362e302f32322d3332203d3e20323638313537.roa (raw, json)
Hash identifier:          XR2KIlyk5mB37XpIwNwMFCfs/oYP5wFhcmbS56P5tRY=
Subject key identifier:   E0:4C:69:35:31:41:49:43:EB:75:7C:D2:B8:1D:AF:98:56:F2:4D:35
Certificate issuer:       /CN=6EAB8AEBC03A78D8510770FB0532867992B2761B
Certificate serial:       7A6A78557AE91EF108285CC7769BB38BBB236AA9
Authority key identifier: 6E:AB:8A:EB:C0:3A:78:D8:51:07:70:FB:05:32:86:79:92:B2:76:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EAB8AEBC03A78D8510770FB0532867992B2761B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/34352e3137302e39362e302f32322d3332203d3e20323638313537.roa
Signing time:             Wed 04 Mar 2026 17:10:54 +0000
ROA not before:           Wed 04 Mar 2026 17:05:54 +0000
ROA not after:            Wed 03 Mar 2027 17:10:54 +0000
asID:                     268157
IP address blocks:        45.170.96.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/6EAB8AEBC03A78D8510770FB0532867992B2761B.crl
                          rsync://rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/6EAB8AEBC03A78D8510770FB0532867992B2761B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EAB8AEBC03A78D8510770FB0532867992B2761B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 16:59:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:6a:78:55:7a:e9:1e:f1:08:28:5c:c7:76:9b:b3:8b:bb:23:6a:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EAB8AEBC03A78D8510770FB0532867992B2761B
        Validity
            Not Before: Mar  4 17:05:54 2026 GMT
            Not After : Mar  3 17:10:54 2027 GMT
        Subject: CN=E04C693531414943EB757CD2B81DAF9856F24D35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:be:53:0f:16:99:52:45:53:8b:42:58:29:c6:
                    7c:e1:1b:1e:92:2f:04:6b:91:c8:e7:39:1f:70:2b:
                    6d:0b:bb:b8:a8:a8:a0:7b:70:6e:83:c2:5c:f6:19:
                    36:66:99:1f:c3:ce:e7:26:ff:ce:96:c0:8e:ed:88:
                    f2:27:f1:00:fe:b7:d4:ce:a6:22:d0:08:ec:33:42:
                    34:af:47:e8:81:4f:fe:19:9d:9d:0d:a3:6e:c1:b2:
                    35:cb:b6:c2:23:37:b7:d5:6b:35:40:69:4c:ec:44:
                    aa:25:9c:77:c8:dd:6d:fa:bc:38:94:77:a0:69:dd:
                    ea:8a:28:65:ea:f3:4e:1c:b5:ca:69:64:90:93:80:
                    47:f1:96:34:2c:82:f7:76:b5:b9:ba:0b:c1:71:08:
                    7e:e5:f3:b5:e3:b4:67:92:27:48:5e:ba:2f:93:44:
                    e2:54:41:4d:7b:29:f9:8a:25:d2:db:21:5b:fa:fc:
                    79:e5:ec:25:91:6c:81:92:f0:71:3e:97:26:f1:04:
                    41:ba:48:89:cd:42:11:80:1f:48:a9:f5:58:18:4c:
                    80:4c:37:c6:12:5a:c7:b7:af:fe:6f:71:19:7b:57:
                    e3:d6:ef:ea:d7:1d:a7:f0:6f:3f:53:e2:1a:75:8d:
                    49:bc:81:39:e2:6a:2f:9a:ab:a5:87:89:79:92:fd:
                    5c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:4C:69:35:31:41:49:43:EB:75:7C:D2:B8:1D:AF:98:56:F2:4D:35
            X509v3 Authority Key Identifier:
                keyid:6E:AB:8A:EB:C0:3A:78:D8:51:07:70:FB:05:32:86:79:92:B2:76:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/6EAB8AEBC03A78D8510770FB0532867992B2761B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EAB8AEBC03A78D8510770FB0532867992B2761B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/34352e3137302e39362e302f32322d3332203d3e20323638313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:a4:49:32:db:f6:f7:93:15:25:b7:73:a4:9f:c7:b0:4d:f3:
         83:b4:61:ae:81:02:ca:e4:dc:e5:8e:db:43:e3:53:11:f4:2c:
         06:58:e7:03:b8:87:df:80:5c:2c:e0:86:b7:c5:62:ee:e1:21:
         61:56:c1:2d:c7:f0:76:8b:b1:75:8e:7e:9c:a9:7d:af:55:ae:
         21:43:5f:91:7d:34:c1:6b:4a:67:63:3f:17:f4:e3:0e:ac:36:
         8a:ce:cc:a0:f0:26:18:43:e5:74:7f:52:6c:a1:9a:57:ba:35:
         ff:7e:5b:34:82:b7:96:62:48:b5:66:3e:e1:73:df:2a:67:1e:
         8d:5a:a4:eb:ba:aa:c0:ac:14:6d:3a:3d:2d:f9:d5:65:f9:8a:
         b0:17:34:03:9b:a7:b3:43:1d:15:2c:30:d0:ec:be:07:d3:39:
         55:b4:2d:c6:7f:c0:08:0f:be:8c:03:1b:fd:3c:d5:36:47:88:
         75:7c:98:91:87:e0:a7:b4:ef:09:5f:3d:a6:0d:04:7f:0a:30:
         21:60:b1:32:c6:32:42:2f:a7:8c:44:d8:c4:c4:54:44:c2:3f:
         a3:6d:8f:34:72:ae:ca:8b:01:a7:43:54:23:c4:ca:db:c2:e5:
         36:30:f2:cc:35:16:7b:c7:f4:a3:12:6d:d4:52:48:e9:c6:a8:
         b5:14:ae:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:41:45 2026 by rpki-client