Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkDBt2FtpoenzA4YYuzWPGStpW7WZPtu4qcmssJwYFs6/0/34352e3138342e3137322e302f32322d3234203d3e20323639333332.roa
File:                     34352e3138342e3137322e302f32322d3234203d3e20323639333332.roa (raw, json)
Hash identifier:          KDyBqOvix5eNm7Mz3S4JL3/s9zdxzq+4Fxd6MsO/wOs=
Subject key identifier:   EF:45:1C:EC:8B:11:E1:90:60:93:7D:47:FB:C9:7F:B2:32:A4:73:7F
Certificate issuer:       /CN=9BC9377DB8A52FE9A6BF1799F56605E648AA6E21
Certificate serial:       12640A8280E4D4CEB625ABD80A7F445966E46149
Authority key identifier: 9B:C9:37:7D:B8:A5:2F:E9:A6:BF:17:99:F5:66:05:E6:48:AA:6E:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BC9377DB8A52FE9A6BF1799F56605E648AA6E21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkDBt2FtpoenzA4YYuzWPGStpW7WZPtu4qcmssJwYFs6/0/34352e3138342e3137322e302f32322d3234203d3e20323639333332.roa
Signing time:             Fri 24 Apr 2026 20:46:00 +0000
ROA not before:           Fri 24 Apr 2026 20:41:00 +0000
ROA not after:            Fri 23 Apr 2027 20:46:00 +0000
asID:                     269332
IP address blocks:        45.184.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HkDBt2FtpoenzA4YYuzWPGStpW7WZPtu4qcmssJwYFs6/0/9BC9377DB8A52FE9A6BF1799F56605E648AA6E21.crl
                          rsync://rpki-repo.registro.br/repo/HkDBt2FtpoenzA4YYuzWPGStpW7WZPtu4qcmssJwYFs6/0/9BC9377DB8A52FE9A6BF1799F56605E648AA6E21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BC9377DB8A52FE9A6BF1799F56605E648AA6E21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 01:55:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:64:0a:82:80:e4:d4:ce:b6:25:ab:d8:0a:7f:44:59:66:e4:61:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BC9377DB8A52FE9A6BF1799F56605E648AA6E21
        Validity
            Not Before: Apr 24 20:41:00 2026 GMT
            Not After : Apr 23 20:46:00 2027 GMT
        Subject: CN=EF451CEC8B11E19060937D47FBC97FB232A4737F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2e:1d:74:38:11:c6:cd:ad:20:5b:99:05:4d:
                    3a:24:f6:36:34:d4:b5:7d:cc:d1:c2:74:75:ef:5c:
                    59:cd:5f:d6:38:bd:0a:c0:4a:10:c7:dc:50:0b:fd:
                    54:e6:2d:64:6b:b8:fb:07:69:5b:cb:38:11:22:8a:
                    82:9d:1e:fa:b1:b6:23:af:ab:c1:ed:31:4e:ed:7c:
                    c8:24:ac:b3:42:9e:8a:79:3f:ec:8a:cd:41:69:03:
                    0c:40:7e:55:77:ae:64:67:fd:75:10:10:01:a3:b8:
                    ea:c8:76:c4:b8:e4:a5:3c:53:77:7a:f0:4e:b1:87:
                    b8:3d:e9:97:30:eb:6c:b2:d3:c8:0b:df:83:31:1b:
                    ae:b9:42:19:d9:c7:c0:4b:78:2a:37:28:8f:66:34:
                    a7:82:d3:cb:33:a0:df:32:81:79:14:0c:9a:13:b8:
                    ae:73:44:01:0b:0a:0d:bd:ac:e6:ca:88:03:41:75:
                    55:e7:b9:e1:e7:bf:20:ab:eb:35:fe:56:49:51:dc:
                    c6:a3:26:bc:b1:3d:4e:0e:38:c7:ea:c1:55:fa:5e:
                    36:e9:43:94:9f:4e:26:49:42:47:c0:ee:e2:3d:0e:
                    63:ed:35:70:f4:ae:c2:3e:9f:af:bb:94:c9:72:d4:
                    a4:b4:2a:e2:61:72:f6:e9:19:7e:03:07:e8:f5:e7:
                    25:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:45:1C:EC:8B:11:E1:90:60:93:7D:47:FB:C9:7F:B2:32:A4:73:7F
            X509v3 Authority Key Identifier:
                keyid:9B:C9:37:7D:B8:A5:2F:E9:A6:BF:17:99:F5:66:05:E6:48:AA:6E:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkDBt2FtpoenzA4YYuzWPGStpW7WZPtu4qcmssJwYFs6/0/9BC9377DB8A52FE9A6BF1799F56605E648AA6E21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BC9377DB8A52FE9A6BF1799F56605E648AA6E21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkDBt2FtpoenzA4YYuzWPGStpW7WZPtu4qcmssJwYFs6/0/34352e3138342e3137322e302f32322d3234203d3e20323639333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:ca:a1:a6:a8:0c:dc:10:64:46:aa:44:c6:f7:75:06:2a:75:
         77:6d:9c:95:94:6b:88:a0:97:d8:ae:61:89:45:4a:ec:a1:3c:
         59:28:bb:96:aa:76:be:dd:a2:18:15:c3:38:ca:5a:41:af:f6:
         7a:e0:d0:8c:44:3b:37:57:f9:34:85:93:7f:6e:70:b0:8e:12:
         c5:d0:34:18:3a:52:d0:eb:6b:ff:27:1e:64:b2:3b:f4:1d:29:
         4c:61:ea:f9:40:06:e5:20:6f:25:aa:f0:c9:fd:7d:5b:2c:13:
         f6:eb:d6:a9:8c:ee:0a:a1:59:0c:c4:95:5d:70:57:23:94:6f:
         c2:ac:f6:2a:bc:43:44:aa:52:d5:58:b1:82:75:dd:b9:dd:33:
         63:d2:6c:95:ba:ea:f1:c6:93:6b:f2:92:dd:a1:37:e7:68:ee:
         96:62:12:a8:51:a5:d0:2f:26:8c:f6:c5:1b:e9:07:35:14:cb:
         73:22:2e:f0:b8:d5:19:96:da:62:e9:6f:ac:57:c5:fc:cc:dc:
         f4:c4:4e:b0:37:6b:1f:3c:23:fc:12:44:28:e0:b1:2a:e1:89:
         04:be:27:66:31:42:72:40:7a:54:a7:18:69:02:87:b1:16:e3:
         6c:85:47:c9:f4:42:a4:d7:4b:1e:78:e0:f3:1f:0c:52:95:ea:
         7a:42:a5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:39:42 2026 by rpki-client