Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HroozinayaLBW9qaenDxXn281WjCMFe6ufaqyPepni8a/0/3137302e38322e3233362e302f32322d3234203d3e20323636343439.roa
File:                     3137302e38322e3233362e302f32322d3234203d3e20323636343439.roa (raw, json)
Hash identifier:          5CuwEP1z4d4JagAqoezT8MQZf4X/FgJbJVR+Drz1ovk=
Subject key identifier:   04:DB:08:BC:4A:7C:09:E6:AD:80:03:B0:51:E3:C3:CA:62:ED:56:F4
Certificate issuer:       /CN=34DAECD13A39FBAA320D8EB5C51287D02305C30E
Certificate serial:       21CA533A2F3EDA7909699CEC67C41B0C261F0A9C
Authority key identifier: 34:DA:EC:D1:3A:39:FB:AA:32:0D:8E:B5:C5:12:87:D0:23:05:C3:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34DAECD13A39FBAA320D8EB5C51287D02305C30E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HroozinayaLBW9qaenDxXn281WjCMFe6ufaqyPepni8a/0/3137302e38322e3233362e302f32322d3234203d3e20323636343439.roa
Signing time:             Mon 06 Jul 2026 12:36:05 +0000
ROA not before:           Mon 06 Jul 2026 12:31:05 +0000
ROA not after:            Mon 05 Jul 2027 12:36:05 +0000
asID:                     266449
IP address blocks:        170.82.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HroozinayaLBW9qaenDxXn281WjCMFe6ufaqyPepni8a/0/34DAECD13A39FBAA320D8EB5C51287D02305C30E.crl
                          rsync://rpki-repo.registro.br/repo/HroozinayaLBW9qaenDxXn281WjCMFe6ufaqyPepni8a/0/34DAECD13A39FBAA320D8EB5C51287D02305C30E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34DAECD13A39FBAA320D8EB5C51287D02305C30E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 14:29:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ca:53:3a:2f:3e:da:79:09:69:9c:ec:67:c4:1b:0c:26:1f:0a:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34DAECD13A39FBAA320D8EB5C51287D02305C30E
        Validity
            Not Before: Jul  6 12:31:05 2026 GMT
            Not After : Jul  5 12:36:05 2027 GMT
        Subject: CN=04DB08BC4A7C09E6AD8003B051E3C3CA62ED56F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:18:ec:d5:d2:94:be:1a:ce:19:b2:41:b7:9e:
                    86:91:ab:47:26:3d:c6:aa:24:cb:f0:5f:5f:e4:11:
                    6a:25:1b:69:cf:a8:e7:6f:52:e0:80:29:47:55:32:
                    65:19:7f:0d:b3:d9:b4:36:d7:2c:1f:e7:b8:cb:3c:
                    d9:f1:4d:fc:62:58:74:7a:0a:86:cd:d6:a1:11:5b:
                    5d:a5:64:92:8f:bc:93:e1:5a:c7:b1:b4:62:d8:0c:
                    d5:71:20:81:42:63:58:56:90:66:f3:5a:80:5a:1a:
                    a6:c4:db:07:8d:09:24:8e:07:10:f5:40:da:11:fa:
                    9d:4a:73:94:14:8f:dd:1e:d2:1c:21:73:4e:52:48:
                    ce:0e:3c:8e:a0:d2:d0:95:af:a1:47:52:a5:9c:34:
                    17:a2:54:13:f4:71:f3:15:e8:da:6a:55:30:3b:5c:
                    00:6e:4a:80:d6:71:90:cb:fe:5a:a7:7b:4e:9b:be:
                    49:52:1a:19:67:4c:fe:fd:4c:fa:4f:32:6c:55:c7:
                    ce:f0:ce:3b:bc:68:78:39:51:90:21:9e:b8:14:c1:
                    ff:5f:0e:f7:86:36:65:bd:61:3c:cb:04:cd:d1:62:
                    2d:b5:12:ad:1a:be:89:95:52:a3:35:b1:48:21:61:
                    88:ea:71:cd:90:de:7b:98:75:11:2a:5f:5b:dc:a8:
                    74:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:DB:08:BC:4A:7C:09:E6:AD:80:03:B0:51:E3:C3:CA:62:ED:56:F4
            X509v3 Authority Key Identifier:
                keyid:34:DA:EC:D1:3A:39:FB:AA:32:0D:8E:B5:C5:12:87:D0:23:05:C3:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HroozinayaLBW9qaenDxXn281WjCMFe6ufaqyPepni8a/0/34DAECD13A39FBAA320D8EB5C51287D02305C30E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34DAECD13A39FBAA320D8EB5C51287D02305C30E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HroozinayaLBW9qaenDxXn281WjCMFe6ufaqyPepni8a/0/3137302e38322e3233362e302f32322d3234203d3e20323636343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:29:03:b6:2c:b9:d5:af:8f:94:55:19:6e:d1:b1:eb:4a:25:
         74:3d:47:7c:75:cf:51:2c:33:3e:26:15:cd:b9:8a:96:53:25:
         10:8a:ca:46:01:9e:e2:9d:dd:ee:cf:e8:76:47:3a:3d:21:01:
         f7:d7:7a:0d:f6:8c:6e:5f:21:a1:b0:b3:da:55:88:8c:79:a0:
         f0:7f:46:d4:e9:a6:44:5b:41:21:d1:5e:37:88:20:5f:27:f2:
         a6:0f:f1:c8:0d:20:76:18:ce:21:9c:4b:35:1b:d6:7e:37:56:
         02:f3:8c:bb:99:11:51:f4:d4:bb:f9:63:45:a1:d0:ea:52:66:
         6b:1b:1a:36:f5:e4:58:0d:5e:52:59:33:47:23:67:b5:99:71:
         98:64:90:8a:40:7f:d5:5c:ed:1f:51:41:0f:8a:73:91:88:21:
         f3:e7:c5:e0:26:8e:32:8f:d5:d9:00:b2:a9:5b:9c:e0:21:5a:
         e4:d5:e6:d8:5c:9a:b9:a8:94:6c:67:6f:31:24:dd:b0:e0:b9:
         03:5f:24:f8:5a:3f:7e:33:ce:92:12:ba:7a:52:00:55:2d:07:
         de:c0:f5:f5:a7:d9:f5:d1:97:48:53:8b:a6:fa:a9:92:d0:fd:
         cc:7a:22:ab:02:4f:c1:ec:b0:96:8c:36:f6:89:fe:9b:15:83:
         79:0e:cf:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:34:47 2026 by rpki-client