Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/1/34352e3232382e3234342e302f32322d3234203d3e20323637303833.roa
File:                     34352e3232382e3234342e302f32322d3234203d3e20323637303833.roa (raw, json)
Hash identifier:          r25tYl9xGINX2/e7IO9hiXa1QjGJlPOqeo74/a4XixE=
Subject key identifier:   EE:FA:B5:AE:9D:50:69:86:1C:7E:79:FB:7E:CA:A1:58:83:D6:20:50
Certificate issuer:       /CN=1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB
Certificate serial:       5289F585EF1B79CD9DB004D7A87C280CF4F550D6
Authority key identifier: 1F:6C:29:54:DA:AB:7F:76:D6:4B:99:3F:3B:15:C4:6F:86:A9:FF:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/1/34352e3232382e3234342e302f32322d3234203d3e20323637303833.roa
Signing time:             Thu 05 Feb 2026 17:31:33 +0000
ROA not before:           Thu 05 Feb 2026 17:26:33 +0000
ROA not after:            Thu 04 Feb 2027 17:31:33 +0000
asID:                     267083
IP address blocks:        45.228.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/1/1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB.crl
                          rsync://rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/1/1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:22:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:89:f5:85:ef:1b:79:cd:9d:b0:04:d7:a8:7c:28:0c:f4:f5:50:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB
        Validity
            Not Before: Feb  5 17:26:33 2026 GMT
            Not After : Feb  4 17:31:33 2027 GMT
        Subject: CN=EEFAB5AE9D5069861C7E79FB7ECAA15883D62050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:89:94:22:21:57:a5:3c:f1:df:1e:88:cc:35:
                    56:ca:6b:2e:28:6b:54:0a:8e:fc:c6:f9:3f:15:18:
                    1c:f9:dd:c6:fe:46:4f:2b:fd:77:a5:97:dd:09:38:
                    4e:78:ef:2f:79:33:77:7f:c6:9a:f3:ce:10:3d:05:
                    96:18:d4:0e:ac:e1:48:22:88:d8:dc:6e:43:0e:ce:
                    49:28:40:45:43:7e:7b:2f:83:5e:72:77:c5:2c:71:
                    42:6a:3e:97:1e:3b:e5:a0:f9:cc:61:e7:0b:47:ea:
                    ce:31:44:ae:57:c8:9d:4b:4f:d5:a0:2a:ee:46:7e:
                    0f:ee:7a:81:86:f4:d7:82:f9:da:bd:01:92:06:5c:
                    88:e0:9a:83:36:58:bb:72:66:a6:65:d3:ff:8b:dc:
                    fb:81:fd:d6:87:93:8f:5a:db:70:48:8b:0f:d7:29:
                    a2:d8:49:91:79:8f:25:64:fd:af:bb:e2:56:c5:2b:
                    5f:71:a7:a7:ea:45:5a:0e:58:b1:3c:a9:14:3e:5f:
                    27:fc:32:be:5d:c2:70:36:d8:9c:f9:64:c9:17:8d:
                    71:54:66:9c:66:a5:14:b2:9c:f4:c4:a5:17:0a:2c:
                    f5:38:d2:17:d2:e1:a1:de:c8:cb:78:7d:97:f0:92:
                    22:8a:80:0f:15:ac:8a:15:94:3c:c2:f2:04:d7:c9:
                    85:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:FA:B5:AE:9D:50:69:86:1C:7E:79:FB:7E:CA:A1:58:83:D6:20:50
            X509v3 Authority Key Identifier:
                keyid:1F:6C:29:54:DA:AB:7F:76:D6:4B:99:3F:3B:15:C4:6F:86:A9:FF:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/1/1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/1/34352e3232382e3234342e302f32322d3234203d3e20323637303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:76:79:2d:04:54:0d:03:df:45:cd:93:32:82:d7:64:4a:1f:
         0e:49:2b:7a:60:54:46:26:48:32:6d:9f:50:20:11:10:e8:5b:
         55:ba:e2:0f:cd:1c:56:d0:9b:15:25:03:41:f0:aa:da:9a:42:
         1f:2c:33:51:4a:5b:b5:57:49:8e:ba:08:cf:8d:b1:5d:49:9a:
         0b:2c:c0:1c:b4:84:f4:4c:aa:c4:76:04:4c:d0:85:64:4a:a2:
         e1:b4:c0:f2:d5:5d:67:a0:ae:0a:de:b8:42:13:21:e8:a1:80:
         29:c7:04:4c:0c:7c:83:74:1d:df:29:d5:6a:e6:89:ca:1f:24:
         34:c4:75:b9:d0:e1:87:a4:74:dc:52:de:e1:cf:5e:6b:5c:b3:
         9c:44:29:a3:3b:bf:b3:95:b8:ba:83:d8:4e:9f:56:c1:96:f4:
         3b:52:1a:ca:1b:6b:ba:c6:7e:4e:33:f8:a7:3f:39:0a:db:d8:
         de:cc:93:79:ca:b9:37:a7:da:15:04:70:07:2b:aa:8c:0d:79:
         11:c0:3e:19:78:c4:af:e6:55:4c:74:63:a5:7b:ec:0a:50:a3:
         7f:ef:42:62:f8:05:d3:91:cf:23:47:87:3c:fb:ff:b2:01:66:
         bf:6d:3c:06:6b:13:86:ff:5c:77:4f:b3:ed:10:50:53:9f:b1:
         76:f7:e2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:48:12 2026 by rpki-client