Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/34352e3136362e34382e302f32342d3234203d3e20323637393532.roa
File:                     34352e3136362e34382e302f32342d3234203d3e20323637393532.roa (raw, json)
Hash identifier:          ClyREo73uozcpGMP65a4Lxmq3rAHHKDK+VdrRh3ZKk0=
Subject key identifier:   F0:A5:04:3E:3E:FE:18:BA:72:53:EF:E0:CD:59:59:CC:14:6D:7B:6E
Certificate issuer:       /CN=2124AAA7D0FC397516525A2092F690A62F40A18E
Certificate serial:       4DF48AB50663923CE3083A88AAE7A4C2CB2FB678
Authority key identifier: 21:24:AA:A7:D0:FC:39:75:16:52:5A:20:92:F6:90:A6:2F:40:A1:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2124AAA7D0FC397516525A2092F690A62F40A18E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/34352e3136362e34382e302f32342d3234203d3e20323637393532.roa
Signing time:             Thu 23 Apr 2026 18:33:57 +0000
ROA not before:           Thu 23 Apr 2026 18:28:57 +0000
ROA not after:            Thu 22 Apr 2027 18:33:57 +0000
asID:                     267952
IP address blocks:        45.166.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/2124AAA7D0FC397516525A2092F690A62F40A18E.crl
                          rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/2124AAA7D0FC397516525A2092F690A62F40A18E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2124AAA7D0FC397516525A2092F690A62F40A18E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 11:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:f4:8a:b5:06:63:92:3c:e3:08:3a:88:aa:e7:a4:c2:cb:2f:b6:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2124AAA7D0FC397516525A2092F690A62F40A18E
        Validity
            Not Before: Apr 23 18:28:57 2026 GMT
            Not After : Apr 22 18:33:57 2027 GMT
        Subject: CN=F0A5043E3EFE18BA7253EFE0CD5959CC146D7B6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:14:7e:ea:78:23:5b:06:a3:4c:d3:48:08:58:
                    0d:a6:6c:e0:1c:14:33:e9:dd:df:c9:e2:2a:04:c2:
                    28:8e:96:14:9b:bc:00:21:ca:81:59:74:7d:e9:3e:
                    67:94:17:a6:fe:81:a5:a7:db:7e:07:2d:ce:3a:d6:
                    71:1f:1f:98:fe:fa:54:ca:66:a3:b1:27:4b:f8:5f:
                    05:5b:03:53:25:f5:14:2a:70:af:f1:68:2a:16:22:
                    51:97:d6:78:2c:98:bc:41:9a:f9:1b:40:b1:3f:a4:
                    b6:43:94:4d:f9:2b:32:d7:87:4f:7c:88:f9:8d:b9:
                    64:56:24:7a:eb:7f:aa:46:45:1e:e5:89:46:b9:b4:
                    e8:c8:d9:1c:ae:19:c5:7f:14:0f:05:ba:c2:a8:fa:
                    5d:69:fb:5b:98:07:66:cf:c0:f0:dc:61:b4:01:33:
                    04:98:0f:4d:c9:fd:a1:b8:1e:01:98:ee:80:15:ef:
                    c1:03:9d:34:14:05:76:03:a6:08:f2:13:05:2e:51:
                    79:90:00:8f:05:e0:d9:ca:96:ab:bb:f1:bf:7b:4f:
                    1d:c6:8a:7f:43:17:19:4f:f7:85:cd:99:3b:a5:5f:
                    1d:86:af:f1:cf:0a:4a:81:3c:26:95:7d:33:be:f4:
                    3b:bd:6c:ab:f0:9f:d6:cb:95:0a:83:77:2d:4c:e6:
                    d9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A5:04:3E:3E:FE:18:BA:72:53:EF:E0:CD:59:59:CC:14:6D:7B:6E
            X509v3 Authority Key Identifier:
                keyid:21:24:AA:A7:D0:FC:39:75:16:52:5A:20:92:F6:90:A6:2F:40:A1:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/2124AAA7D0FC397516525A2092F690A62F40A18E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2124AAA7D0FC397516525A2092F690A62F40A18E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/34352e3136362e34382e302f32342d3234203d3e20323637393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:05:d1:34:6e:b5:87:e4:78:5a:ef:32:7e:5a:03:d5:36:03:
         d1:d1:56:c8:46:cd:77:f9:c0:19:c3:87:2a:36:a9:24:42:8a:
         33:eb:67:60:79:0d:3c:2e:a0:99:4f:d7:2a:71:d7:f5:29:b1:
         48:79:4c:65:21:cf:00:9d:41:00:c7:39:10:35:13:8a:5e:5d:
         7a:02:18:c9:de:5a:02:bd:f3:32:cd:58:69:d4:24:84:7b:53:
         ab:3c:8f:14:44:98:27:f9:91:13:40:73:92:68:0e:4a:ba:e3:
         43:d5:ed:6e:5a:6b:fd:74:00:8e:2e:29:92:dd:32:21:86:1c:
         ac:a8:49:7f:d8:f7:78:79:8a:e0:51:49:28:e4:95:21:24:c6:
         54:a3:7e:27:14:2f:15:c4:d7:08:66:ce:99:b2:f7:7a:11:ef:
         f7:70:6b:e8:fb:b8:e7:c0:32:db:c1:45:88:49:c9:0c:a0:97:
         41:2f:4a:28:4d:8e:e1:96:67:71:a3:f8:3c:dd:20:27:1c:49:
         a0:30:d8:43:e1:fd:9e:5a:ab:d4:56:d9:55:02:01:0b:10:bb:
         77:6b:5f:c6:c9:4d:29:eb:52:de:88:d1:29:f8:94:45:77:b1:
         e6:af:09:85:df:2b:5f:e7:e2:69:68:bb:7c:68:3c:85:54:64:
         e0:31:64:72
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTfSKtQZjkjzjCDqIquekwssvtngwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjEyNEFBQTdEMEZDMzk3NTE2NTI1QTIwOTJGNjkwQTYy
RjQwQTE4RTAeFw0yNjA0MjMxODI4NTdaFw0yNzA0MjIxODMzNTdaMDMxMTAvBgNV
BAMTKEYwQTUwNDNFM0VGRTE4QkE3MjUzRUZFMENENTk1OUNDMTQ2RDdCNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUFH7qeCNbBqNM00gIWA2mbOAc
FDPp3d/J4ioEwiiOlhSbvAAhyoFZdH3pPmeUF6b+gaWn234HLc461nEfH5j++lTK
ZqOxJ0v4XwVbA1Ml9RQqcK/xaCoWIlGX1ngsmLxBmvkbQLE/pLZDlE35KzLXh098
iPmNuWRWJHrrf6pGRR7liUa5tOjI2RyuGcV/FA8FusKo+l1p+1uYB2bPwPDcYbQB
MwSYD03J/aG4HgGY7oAV78EDnTQUBXYDpgjyEwUuUXmQAI8F4NnKlqu78b97Tx3G
in9DFxlP94XNmTulXx2Gr/HPCkqBPCaVfTO+9Du9bKvwn9bLlQqDdy1M5tlDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU8KUEPj7+GLpyU+/gzVlZzBRte24wHwYDVR0j
BBgwFoAUISSqp9D8OXUWUlogkvaQpi9AoY4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFRuV3JjdmR5Y21aNjY5aUtaRnJ1anlITGhiUHR3TjZrWjMzNHdTNFFW
TEwvMC8yMTI0QUFBN0QwRkMzOTc1MTY1MjVBMjA5MkY2OTBBNjJGNDBBMThFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxMjRBQUE3RDBGQzM5NzUx
NjUyNUEyMDkyRjY5MEE2MkY0MEExOEUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hUbldyY3ZkeWNtWjY2OWlLWkZydWp5SExoYlB0d042a1ozMzR3UzRRVkxMLzAv
MzQzNTJlMzEzNjM2MmUzNDM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzkzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALaYwMA0GCSqGSIb3DQEBCwUAA4IBAQBSBdE0brWH
5Hha7zJ+WgPVNgPR0VbIRs13+cAZw4cqNqkkQooz62dgeQ08LqCZT9cqcdf1KbFI
eUxlIc8AnUEAxzkQNROKXl16AhjJ3loCvfMyzVhp1CSEe1OrPI8URJgn+ZETQHOS
aA5KuuND1e1uWmv9dACOLimS3TIhhhysqEl/2Pd4eYrgUUko5JUhJMZUo34nFC8V
xNcIZs6Zsvd6Ee/3cGvo+7jnwDLbwUWISckMoJdBL0ooTY7hlmdxo/g83SAnHEmg
MNhD4f2eWqvUVtlVAgELELt3a1/GyU0p61LeiNEp+JRFd7HmrwmF3ytf5+JpaLt8
aDyFVGTgMWRy
-----END CERTIFICATE-----
Generated at Wed May 13 21:02:40 2026 by rpki-client