Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaKUkmgiHFXBBkQzGVmysuKrQs6yFtqoytzVXc8RTRhK/0/34352e37302e3134342e302f32322d3235203d3e20323637353638.roa
File:                     34352e37302e3134342e302f32322d3235203d3e20323637353638.roa (raw, json)
Hash identifier:          PZwQ7o3LRlRcwxzfCw9EwAigUS5fYBFn/K1kT6L20G4=
Subject key identifier:   B8:1A:E6:A8:F2:39:C9:EC:ED:B0:03:C3:BA:50:92:08:47:D8:05:66
Certificate issuer:       /CN=405BC1D1FF7A6457E2EEE8FF4C05D35F913EDBE5
Certificate serial:       117DA8B428F6E691DE50B67EAA463A452A46815E
Authority key identifier: 40:5B:C1:D1:FF:7A:64:57:E2:EE:E8:FF:4C:05:D3:5F:91:3E:DB:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/405BC1D1FF7A6457E2EEE8FF4C05D35F913EDBE5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaKUkmgiHFXBBkQzGVmysuKrQs6yFtqoytzVXc8RTRhK/0/34352e37302e3134342e302f32322d3235203d3e20323637353638.roa
Signing time:             Mon 09 Mar 2026 13:46:12 +0000
ROA not before:           Mon 09 Mar 2026 13:41:12 +0000
ROA not after:            Mon 08 Mar 2027 13:46:12 +0000
asID:                     267568
IP address blocks:        45.70.144.0/22 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HaKUkmgiHFXBBkQzGVmysuKrQs6yFtqoytzVXc8RTRhK/0/405BC1D1FF7A6457E2EEE8FF4C05D35F913EDBE5.crl
                          rsync://rpki-repo.registro.br/repo/HaKUkmgiHFXBBkQzGVmysuKrQs6yFtqoytzVXc8RTRhK/0/405BC1D1FF7A6457E2EEE8FF4C05D35F913EDBE5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/405BC1D1FF7A6457E2EEE8FF4C05D35F913EDBE5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 15:19:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:7d:a8:b4:28:f6:e6:91:de:50:b6:7e:aa:46:3a:45:2a:46:81:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=405BC1D1FF7A6457E2EEE8FF4C05D35F913EDBE5
        Validity
            Not Before: Mar  9 13:41:12 2026 GMT
            Not After : Mar  8 13:46:12 2027 GMT
        Subject: CN=B81AE6A8F239C9ECEDB003C3BA50920847D80566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:11:a1:5d:ec:2a:3b:e1:47:ff:5d:d3:61:d6:
                    0f:cc:1a:80:a2:41:aa:16:6e:d0:f9:de:34:47:10:
                    f7:ac:90:04:b7:b4:c7:b9:50:e3:a0:af:73:88:f0:
                    ac:51:b2:28:c5:03:55:8c:18:d4:6e:46:5c:e7:6d:
                    f8:03:24:bb:99:a1:59:4f:85:43:01:73:7e:5f:2b:
                    8d:c0:12:7d:8f:ff:cb:98:1b:07:5b:5e:c0:38:90:
                    43:e4:30:55:06:42:98:ef:5a:e4:cc:03:aa:1a:9d:
                    61:f0:1c:8d:de:86:5f:f2:98:c8:21:02:13:e9:d6:
                    70:4d:61:ba:d7:7b:f5:b9:0c:31:c5:84:7f:ad:02:
                    ca:c6:2d:b8:fe:b4:63:ad:39:90:37:ec:fe:e4:59:
                    1a:65:27:26:d5:eb:02:ae:3c:c0:47:d4:94:a3:2d:
                    18:d7:0a:7e:b0:9b:7d:4c:94:46:be:5f:54:62:bd:
                    47:b3:70:95:f7:52:da:55:2b:cb:54:d1:bf:1b:0a:
                    3e:35:dc:ca:f0:0b:31:bf:27:f8:d4:9d:45:16:06:
                    c1:2e:60:77:76:8e:c8:b5:49:08:ba:41:cc:b0:a2:
                    a2:70:e9:2e:4a:0c:b8:ee:ba:e9:a5:c2:90:bc:71:
                    36:c5:41:61:21:59:92:0b:52:43:4e:59:17:82:5f:
                    93:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1A:E6:A8:F2:39:C9:EC:ED:B0:03:C3:BA:50:92:08:47:D8:05:66
            X509v3 Authority Key Identifier:
                keyid:40:5B:C1:D1:FF:7A:64:57:E2:EE:E8:FF:4C:05:D3:5F:91:3E:DB:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaKUkmgiHFXBBkQzGVmysuKrQs6yFtqoytzVXc8RTRhK/0/405BC1D1FF7A6457E2EEE8FF4C05D35F913EDBE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/405BC1D1FF7A6457E2EEE8FF4C05D35F913EDBE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaKUkmgiHFXBBkQzGVmysuKrQs6yFtqoytzVXc8RTRhK/0/34352e37302e3134342e302f32322d3235203d3e20323637353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:96:a0:41:06:99:56:8f:a3:b3:31:b4:b1:8b:ac:7e:67:a8:
         11:5c:13:51:34:7e:15:b4:0d:e3:2c:5c:8f:d2:df:3a:b4:76:
         fe:4c:02:71:ad:3a:a9:bd:4f:61:6e:dc:30:f1:11:5f:0b:c1:
         a0:4c:eb:a5:8b:8f:95:3b:8b:60:a2:66:24:00:b8:ba:ac:3e:
         ec:99:ca:42:3a:86:a4:37:47:85:71:17:d6:5c:db:64:0e:d3:
         78:6b:32:05:88:bf:e9:45:75:3b:27:e5:60:66:9e:3a:0b:ec:
         87:9d:1d:16:67:cf:0b:df:4d:94:4c:86:8a:92:2d:c6:1b:93:
         51:98:49:75:7f:5f:b2:e2:5a:5d:b7:cd:49:58:87:ab:09:64:
         d4:f2:54:49:08:e5:98:3d:75:75:5f:f2:2e:62:59:8b:9e:c9:
         82:5d:a7:72:3d:f6:49:51:1a:11:30:ab:5d:87:59:0e:4a:54:
         10:df:c2:e5:88:dd:18:b5:79:a8:b2:67:7b:d6:31:16:20:a8:
         2c:b0:b6:ba:2b:d2:77:f7:a7:a4:f0:e2:c6:f3:93:bc:9a:f5:
         ba:74:b6:57:18:cd:ab:3c:71:53:a8:0c:6f:d2:f9:10:5a:55:
         20:42:a9:83:be:da:ec:b3:da:22:6f:ed:f3:8a:f3:d8:f8:42:
         bb:bf:f6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:16:08 2026 by rpki-client