Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hu31ZEFgvteyFZAdykGbpgCMzLK2Z541EZyotBTzEsWH/0/34352e3139302e3231362e302f32342d3234203d3e20323639363337.roa
File:                     34352e3139302e3231362e302f32342d3234203d3e20323639363337.roa (raw, json)
Hash identifier:          GfgauryxK8BTVP2bU5x/e/L7DWDfZJYxvpWFs1xD580=
Subject key identifier:   C2:E9:C6:27:F0:DA:47:80:A4:F1:A0:BC:4C:69:7F:0C:F4:51:8E:05
Certificate issuer:       /CN=DF17A2020CB3F8AD2FAA9F0DB4E01CB3770C0F94
Certificate serial:       690D1B08C9BE876BDD76C7DAFD9102E6B878797F
Authority key identifier: DF:17:A2:02:0C:B3:F8:AD:2F:AA:9F:0D:B4:E0:1C:B3:77:0C:0F:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF17A2020CB3F8AD2FAA9F0DB4E01CB3770C0F94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hu31ZEFgvteyFZAdykGbpgCMzLK2Z541EZyotBTzEsWH/0/34352e3139302e3231362e302f32342d3234203d3e20323639363337.roa
Signing time:             Fri 08 May 2026 20:27:10 +0000
ROA not before:           Fri 08 May 2026 20:22:10 +0000
ROA not after:            Fri 07 May 2027 20:27:10 +0000
asID:                     269637
IP address blocks:        45.190.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hu31ZEFgvteyFZAdykGbpgCMzLK2Z541EZyotBTzEsWH/0/DF17A2020CB3F8AD2FAA9F0DB4E01CB3770C0F94.crl
                          rsync://rpki-repo.registro.br/repo/Hu31ZEFgvteyFZAdykGbpgCMzLK2Z541EZyotBTzEsWH/0/DF17A2020CB3F8AD2FAA9F0DB4E01CB3770C0F94.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF17A2020CB3F8AD2FAA9F0DB4E01CB3770C0F94.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 06:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:0d:1b:08:c9:be:87:6b:dd:76:c7:da:fd:91:02:e6:b8:78:79:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF17A2020CB3F8AD2FAA9F0DB4E01CB3770C0F94
        Validity
            Not Before: May  8 20:22:10 2026 GMT
            Not After : May  7 20:27:10 2027 GMT
        Subject: CN=C2E9C627F0DA4780A4F1A0BC4C697F0CF4518E05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f2:af:f5:15:38:e3:31:8b:99:b4:e5:57:6d:
                    fb:4c:11:d6:63:b2:31:c7:fa:14:60:cf:59:ad:54:
                    4a:ae:ec:7e:ca:93:71:88:10:e8:a7:75:09:1c:6c:
                    6c:c7:e3:66:78:86:49:bd:f8:37:04:6d:8b:8f:f7:
                    a9:bd:cd:f8:d7:82:39:b4:b1:02:24:fa:1c:42:c1:
                    bf:05:2c:6c:d3:24:dc:d4:29:91:64:de:ef:c8:c0:
                    09:ee:46:95:c7:49:b6:68:cc:be:18:f4:5c:10:0a:
                    da:d6:f6:f8:11:ce:27:66:c8:20:38:04:d1:0b:00:
                    f1:6d:74:9b:13:d4:4e:18:ac:2b:d2:f2:13:51:c6:
                    e0:35:08:2f:20:b0:ab:18:e9:6a:62:24:8a:74:d6:
                    25:ee:b5:69:98:4e:84:a1:42:ec:66:5c:7d:a1:be:
                    f7:d0:5f:a0:8f:e8:fd:ee:97:c3:7f:c0:04:b1:fc:
                    72:08:a2:e2:66:30:e3:22:a5:6a:df:4a:f4:d0:5a:
                    82:8c:23:cc:d4:4b:94:36:dd:ef:26:80:2e:74:bf:
                    c4:c5:39:4e:5c:d9:3b:e4:a8:ff:5d:c5:a5:24:5d:
                    0c:0d:e3:38:8d:c5:ea:bb:59:31:2a:2c:6b:5f:ed:
                    95:07:75:8a:88:c5:5d:88:fa:4c:9c:64:46:55:d5:
                    83:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E9:C6:27:F0:DA:47:80:A4:F1:A0:BC:4C:69:7F:0C:F4:51:8E:05
            X509v3 Authority Key Identifier:
                keyid:DF:17:A2:02:0C:B3:F8:AD:2F:AA:9F:0D:B4:E0:1C:B3:77:0C:0F:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hu31ZEFgvteyFZAdykGbpgCMzLK2Z541EZyotBTzEsWH/0/DF17A2020CB3F8AD2FAA9F0DB4E01CB3770C0F94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF17A2020CB3F8AD2FAA9F0DB4E01CB3770C0F94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hu31ZEFgvteyFZAdykGbpgCMzLK2Z541EZyotBTzEsWH/0/34352e3139302e3231362e302f32342d3234203d3e20323639363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:80:06:11:aa:38:db:11:f7:e1:b7:2e:6e:0f:c6:1c:36:79:
         e7:dc:bd:d1:99:be:36:57:40:b1:63:f6:ca:6f:06:52:b4:51:
         cc:db:8f:f6:ce:90:d5:0e:b2:c3:92:ff:68:8e:6e:18:7c:a2:
         cd:f3:32:73:e9:0a:df:27:4a:f7:04:0a:f1:3f:bb:3d:0d:7d:
         b6:fc:34:2a:61:e9:91:6b:92:9a:b8:95:cb:ee:2e:c3:db:b6:
         0c:80:df:29:35:be:1f:1f:e3:55:cb:24:99:62:a0:9d:a2:bb:
         06:18:3b:6d:fb:69:2c:dc:ba:5a:af:b9:ae:ab:ce:f1:5d:14:
         a1:92:18:27:f4:a0:67:d4:4b:25:48:31:aa:2f:24:fc:28:43:
         23:fb:b7:f4:e0:ca:33:5f:54:f0:a6:6e:a1:4c:ba:f6:b1:42:
         b0:01:2a:72:65:d8:c3:c8:ff:03:5b:8b:c2:71:2d:12:56:4f:
         67:b7:03:a5:65:6d:97:33:34:70:4b:1c:96:ad:2e:01:e0:66:
         f2:83:76:cf:93:5f:48:5c:10:41:f6:34:45:ea:95:88:4f:26:
         34:54:55:f1:6a:79:05:20:bc:9a:d0:14:4a:aa:c9:29:a9:11:
         e5:5a:94:74:d1:d3:e2:8d:11:f6:06:67:99:6a:23:39:e9:07:
         7b:1a:a6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:05:36 2026 by rpki-client