Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/0/34352e3138352e3130302e302f32332d3233203d3e20323639333638.roa
File:                     34352e3138352e3130302e302f32332d3233203d3e20323639333638.roa (raw, json)
Hash identifier:          6pY3tRTmSaHyIY4hEJTSSGpCxYV8pun3vONIP8ynDWY=
Subject key identifier:   3E:7E:FA:FA:D8:2C:D8:C7:3F:BD:2A:4C:3F:A3:D3:8F:67:C6:74:99
Certificate issuer:       /CN=510593E55BF7DF9C9640505BCC0F9E789B6EABFA
Certificate serial:       6594C1E842CCB31731C11AD9E439033259AED0B4
Authority key identifier: 51:05:93:E5:5B:F7:DF:9C:96:40:50:5B:CC:0F:9E:78:9B:6E:AB:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/510593E55BF7DF9C9640505BCC0F9E789B6EABFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/0/34352e3138352e3130302e302f32332d3233203d3e20323639333638.roa
Signing time:             Mon 16 Mar 2026 13:22:37 +0000
ROA not before:           Mon 16 Mar 2026 13:17:37 +0000
ROA not after:            Mon 15 Mar 2027 13:22:37 +0000
asID:                     269368
IP address blocks:        45.185.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/0/510593E55BF7DF9C9640505BCC0F9E789B6EABFA.crl
                          rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/0/510593E55BF7DF9C9640505BCC0F9E789B6EABFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/510593E55BF7DF9C9640505BCC0F9E789B6EABFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 17:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:94:c1:e8:42:cc:b3:17:31:c1:1a:d9:e4:39:03:32:59:ae:d0:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=510593E55BF7DF9C9640505BCC0F9E789B6EABFA
        Validity
            Not Before: Mar 16 13:17:37 2026 GMT
            Not After : Mar 15 13:22:37 2027 GMT
        Subject: CN=3E7EFAFAD82CD8C73FBD2A4C3FA3D38F67C67499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7c:50:d5:4f:6b:3a:41:de:9f:b1:1d:58:06:
                    d9:6a:4a:f3:a9:f8:bc:14:aa:e3:0c:35:d6:0f:f9:
                    e7:5f:e7:54:95:4e:4d:aa:e4:da:77:f2:b7:eb:fc:
                    73:00:89:a5:62:be:ed:2e:54:0b:c9:89:0c:10:97:
                    d3:f8:08:a2:17:6c:22:3c:87:d6:92:32:a2:f2:01:
                    43:e1:5f:c6:5d:06:73:5d:9a:42:1b:35:91:ba:db:
                    af:78:7a:07:1b:9f:74:db:77:a7:de:c7:59:0c:1f:
                    31:1c:36:cb:e0:7c:97:47:e2:e0:6b:f4:75:ba:ad:
                    8a:ae:01:d2:bc:22:8c:d4:7d:de:52:68:04:ca:f2:
                    73:13:7c:61:7f:47:ea:48:0e:f7:d2:23:cf:a8:f8:
                    24:03:d3:08:1e:76:c2:85:e2:88:02:5f:43:6d:4c:
                    d8:2e:56:0e:43:75:79:b0:37:11:d5:43:df:ef:5f:
                    66:1d:d7:34:f8:cf:5c:dc:74:0a:35:b6:c1:90:59:
                    fe:b8:0b:2e:e8:0b:a1:71:2f:84:14:3a:bc:d6:9b:
                    a3:e9:44:4b:f4:6f:e6:d6:85:21:d0:32:84:0a:94:
                    ec:1f:e2:5c:ef:30:a3:b0:05:7b:2c:aa:b0:69:5f:
                    9b:49:d8:c1:58:57:0f:8c:38:cc:dd:10:4d:30:68:
                    f7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:7E:FA:FA:D8:2C:D8:C7:3F:BD:2A:4C:3F:A3:D3:8F:67:C6:74:99
            X509v3 Authority Key Identifier:
                keyid:51:05:93:E5:5B:F7:DF:9C:96:40:50:5B:CC:0F:9E:78:9B:6E:AB:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/0/510593E55BF7DF9C9640505BCC0F9E789B6EABFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/510593E55BF7DF9C9640505BCC0F9E789B6EABFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/0/34352e3138352e3130302e302f32332d3233203d3e20323639333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:92:b4:f5:25:b7:1c:fa:6f:24:41:00:72:45:b3:52:f1:fc:
         e2:07:7b:80:31:85:07:aa:c3:22:84:5a:c8:d3:2c:da:16:62:
         32:a7:ba:07:da:43:bc:10:af:73:2e:1d:9a:ee:1d:66:9d:ba:
         27:61:75:5f:fd:80:31:7a:44:a2:8b:31:7d:11:4b:e0:85:dd:
         d9:65:34:08:89:3e:92:c6:69:a8:9b:6a:38:db:1f:02:6e:92:
         ac:d5:09:8f:5e:83:74:0c:66:4e:b4:bb:79:2b:28:eb:b1:85:
         82:92:96:59:b6:d8:de:7d:05:cc:82:ff:7c:d3:ce:22:e2:59:
         1f:10:a5:0a:92:70:9d:15:43:5e:4f:04:ed:06:1a:99:e5:7a:
         a3:4d:e9:a3:26:51:f7:51:40:4c:a4:90:19:f3:ce:b2:a2:d4:
         47:ff:ca:ae:6e:e1:3d:c6:7a:61:46:15:69:3f:de:dd:9c:b8:
         26:0b:f6:ae:70:df:42:bd:8e:b3:dc:72:09:69:8b:43:e9:2b:
         04:f3:3b:2c:2f:0b:68:d4:2d:5b:5e:22:82:1c:38:75:ee:4a:
         86:d6:df:89:c0:d6:ac:2f:a6:53:dd:df:e3:5f:4f:b0:9d:1b:
         ee:0f:67:83:99:64:fc:8c:dc:62:19:97:93:bc:21:32:61:5d:
         6a:bb:b8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:45:46 2026 by rpki-client