Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Hvozf5b9A3V4SyeRUB7F9YkuD97aGfpRuerw37Ek9S12/0/34352e3232372e3230382e302f32322d3332203d3e20323637303239.roa
File:                     34352e3232372e3230382e302f32322d3332203d3e20323637303239.roa (raw, json)
Hash identifier:          56PvqDNVTEK1+VUTZ4WXgpDnRjOg/1H/EzLNhI2Tl+I=
Subject key identifier:   44:56:CC:7C:D6:5F:29:72:C6:31:22:82:09:EA:50:64:BE:0A:41:11
Certificate issuer:       /CN=39430958F007062D8044E0B95B8B7B03EE819812
Certificate serial:       50FBB2BE5E48ABB652E884726BC9E94E0CE5FB72
Authority key identifier: 39:43:09:58:F0:07:06:2D:80:44:E0:B9:5B:8B:7B:03:EE:81:98:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39430958F007062D8044E0B95B8B7B03EE819812.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hvozf5b9A3V4SyeRUB7F9YkuD97aGfpRuerw37Ek9S12/0/34352e3232372e3230382e302f32322d3332203d3e20323637303239.roa
Signing time:             Wed 28 Oct 2026 21:35:48 +0000
ROA not before:           Wed 28 Oct 2026 21:30:48 +0000
ROA not after:            Wed 27 Oct 2027 21:35:48 +0000
asID:                     267029
IP address blocks:        45.227.208.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hvozf5b9A3V4SyeRUB7F9YkuD97aGfpRuerw37Ek9S12/0/39430958F007062D8044E0B95B8B7B03EE819812.crl
                          rsync://rpki-repo.registro.br/repo/Hvozf5b9A3V4SyeRUB7F9YkuD97aGfpRuerw37Ek9S12/0/39430958F007062D8044E0B95B8B7B03EE819812.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39430958F007062D8044E0B95B8B7B03EE819812.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 03:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:fb:b2:be:5e:48:ab:b6:52:e8:84:72:6b:c9:e9:4e:0c:e5:fb:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39430958F007062D8044E0B95B8B7B03EE819812
        Validity
            Not Before: Oct 28 21:30:48 2026 GMT
            Not After : Oct 27 21:35:48 2027 GMT
        Subject: CN=4456CC7CD65F2972C631228209EA5064BE0A4111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b6:47:af:48:87:0c:ef:ef:ad:d7:f4:19:62:
                    83:ff:62:8d:50:ea:a2:23:e1:a8:75:35:df:07:10:
                    a4:61:5c:87:e5:d6:aa:d2:8f:39:31:88:ab:81:30:
                    fa:6b:5a:ab:44:51:ca:64:68:a9:4c:9e:c3:b6:c0:
                    fd:c9:07:22:46:56:cd:8e:42:6c:51:2c:69:74:54:
                    3f:7f:2d:99:7d:46:aa:45:4d:02:4f:73:fa:c1:14:
                    53:3e:01:b1:89:b8:ba:02:73:4d:a2:03:2c:ad:ab:
                    1f:2c:c5:c6:85:f2:47:1b:ab:a7:d6:92:a7:5e:b6:
                    1a:20:24:cf:0b:59:d6:15:87:29:d6:14:11:60:8b:
                    86:96:0c:a9:e6:69:33:eb:db:7c:b1:02:03:38:ae:
                    f4:08:d6:8b:fc:9e:d0:aa:38:0e:a6:61:a3:0f:db:
                    78:45:b0:8e:1a:93:35:fc:d0:56:7c:42:e3:0b:33:
                    f4:4f:e9:fe:ae:a0:d2:e6:ff:ee:d2:12:a8:6c:2e:
                    29:7f:88:b5:ed:ea:a1:f1:7f:0e:f7:c7:63:1a:38:
                    00:72:15:76:09:5b:86:84:f8:5c:8c:e5:94:da:7b:
                    80:d5:fc:5a:7c:00:b3:29:d9:a8:64:1f:14:5a:c4:
                    be:2e:aa:ac:70:b4:08:8c:70:8f:ef:79:5c:5b:f5:
                    08:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:56:CC:7C:D6:5F:29:72:C6:31:22:82:09:EA:50:64:BE:0A:41:11
            X509v3 Authority Key Identifier:
                keyid:39:43:09:58:F0:07:06:2D:80:44:E0:B9:5B:8B:7B:03:EE:81:98:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hvozf5b9A3V4SyeRUB7F9YkuD97aGfpRuerw37Ek9S12/0/39430958F007062D8044E0B95B8B7B03EE819812.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39430958F007062D8044E0B95B8B7B03EE819812.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hvozf5b9A3V4SyeRUB7F9YkuD97aGfpRuerw37Ek9S12/0/34352e3232372e3230382e302f32322d3332203d3e20323637303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:b8:38:d6:cc:1e:eb:55:f2:43:36:21:4d:52:0b:d5:b0:39:
         23:bc:71:56:ed:34:ec:3a:ed:bc:6a:a3:b5:f9:b0:ba:68:b6:
         55:76:17:d1:9e:1f:71:99:a2:44:42:12:d1:65:83:63:e3:bf:
         73:eb:a7:c6:7f:fe:30:a9:69:ee:94:be:c5:15:73:82:59:56:
         f7:1d:cb:4f:ac:b4:6a:e2:99:20:39:4b:46:34:a1:dd:df:54:
         d2:67:e3:71:9c:a9:78:09:a1:a5:a7:3f:22:08:35:70:99:d1:
         cf:09:55:77:a4:df:cd:06:55:74:af:c2:ce:08:d6:57:ad:21:
         f4:55:78:6f:cb:61:b4:21:f2:46:cf:55:28:85:b9:c5:a1:3c:
         db:bf:69:af:c8:77:99:fd:d4:33:72:48:9b:8d:f7:b4:3e:98:
         18:f0:a6:9a:10:f0:f7:49:b3:ef:5e:83:e0:a5:74:0f:06:f6:
         12:84:bb:ed:a5:30:91:5d:22:74:84:b1:1a:e3:89:39:eb:b8:
         d6:c6:2c:44:35:40:4f:fb:c1:b4:80:c6:d5:07:db:5f:9c:2f:
         ee:34:cd:de:9b:ca:e0:81:92:d1:93:8c:51:16:58:4b:3c:ab:
         f7:91:84:e2:92:3e:90:ea:c8:d3:bc:06:4d:e7:d5:7d:c0:b3:
         be:ac:b3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 19:46:11 2026 by rpki-client