Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/34352e3138362e3132302e302f32322d3232203d3e20323639343233.roa
File:                     34352e3138362e3132302e302f32322d3232203d3e20323639343233.roa (raw, json)
Hash identifier:          +CkvqfIBJTIeB+elA4VjiHW44ZxcfGggSi6nnfYfMN4=
Subject key identifier:   9F:C6:FC:F0:7A:FB:69:5C:C4:FC:32:59:3F:43:41:1B:D4:B3:77:AE
Certificate issuer:       /CN=F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0
Certificate serial:       401848C3C7E6805A1747AE0EBAA7D0B408F243FC
Authority key identifier: F0:E2:45:D2:CA:D0:9D:3E:65:9F:55:20:93:C7:FF:CB:E1:D2:5D:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/34352e3138362e3132302e302f32322d3232203d3e20323639343233.roa
Signing time:             Thu 05 Mar 2026 18:40:39 +0000
ROA not before:           Thu 05 Mar 2026 18:35:39 +0000
ROA not after:            Thu 04 Mar 2027 18:40:39 +0000
asID:                     269423
IP address blocks:        45.186.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.crl
                          rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 11:51:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:18:48:c3:c7:e6:80:5a:17:47:ae:0e:ba:a7:d0:b4:08:f2:43:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0
        Validity
            Not Before: Mar  5 18:35:39 2026 GMT
            Not After : Mar  4 18:40:39 2027 GMT
        Subject: CN=9FC6FCF07AFB695CC4FC32593F43411BD4B377AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:54:bb:d0:b0:80:4d:dc:1f:80:84:8f:cf:34:
                    3e:8d:f6:d9:c3:f7:33:27:c2:c5:07:0f:d4:18:b1:
                    17:92:9a:c9:51:97:c9:32:bd:76:d4:a0:a6:0b:e1:
                    f4:ed:dd:e9:3a:66:f2:2f:3b:a7:52:4b:fe:b7:6d:
                    43:4b:05:b7:85:d6:c7:ae:96:54:0e:11:64:47:68:
                    23:b6:ab:c6:b2:0e:b1:7b:4a:f2:51:1f:67:75:8a:
                    30:5f:31:18:a8:76:fe:e0:b8:b8:94:11:c3:3c:38:
                    11:2d:80:1f:30:f8:95:45:e5:72:42:c8:ad:4a:99:
                    1f:fe:f7:4b:78:e1:b9:d0:86:6c:a1:7a:eb:8d:10:
                    68:db:c9:75:6c:36:69:32:f2:1e:32:52:6f:f1:8d:
                    cf:6f:58:1b:74:98:21:dc:46:1e:f5:a6:68:ef:b7:
                    60:0c:99:19:bf:8c:ef:bc:dc:76:be:91:f2:23:78:
                    c2:a1:d7:91:ed:73:29:44:21:49:2f:db:1a:09:c2:
                    78:5c:42:a2:94:1b:c2:3a:7c:cf:c8:89:a2:4a:40:
                    43:61:09:61:3c:5f:8f:bf:64:02:01:b3:11:ef:e4:
                    a0:85:87:96:b9:de:2f:77:23:26:66:b7:e0:2f:94:
                    e4:77:02:fa:ae:71:db:31:44:08:74:41:af:59:b7:
                    da:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C6:FC:F0:7A:FB:69:5C:C4:FC:32:59:3F:43:41:1B:D4:B3:77:AE
            X509v3 Authority Key Identifier:
                keyid:F0:E2:45:D2:CA:D0:9D:3E:65:9F:55:20:93:C7:FF:CB:E1:D2:5D:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/34352e3138362e3132302e302f32322d3232203d3e20323639343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:87:0e:9d:38:3b:6e:04:ed:55:a2:ad:2c:93:6e:8a:70:35:
         94:8e:fe:e6:ab:56:a5:dc:52:15:a3:b7:52:b9:2b:5d:1c:7c:
         ca:a4:2a:ba:d8:11:8c:96:ca:6e:5e:aa:b7:0f:95:7d:66:b2:
         2e:2e:78:10:fc:07:99:e3:ce:5d:65:97:1a:35:ed:1b:69:fd:
         1c:e5:77:b3:03:78:03:fe:42:4a:e2:50:bc:d6:08:61:a1:67:
         bb:be:d4:2a:1b:8c:4a:a0:5b:0a:26:ce:f6:29:ef:d2:93:b2:
         52:47:e4:b6:32:d2:0f:b3:de:30:e9:a1:6e:a3:fd:01:e6:61:
         34:bd:d6:89:b0:7f:52:91:a9:67:a1:cf:68:5e:5b:03:da:b5:
         df:b9:24:4d:d4:07:f6:39:37:7f:5c:32:39:aa:7d:81:da:47:
         f3:04:ec:7e:e7:5c:a5:f3:05:5d:66:bd:52:41:75:df:67:6c:
         3f:42:58:55:3f:31:81:66:92:ca:4b:57:bf:6d:32:87:c1:36:
         43:e5:06:30:5b:f1:ec:fd:35:28:27:b3:68:63:7c:96:9b:6d:
         75:9b:eb:84:55:88:e1:13:41:50:2d:06:d3:ee:b9:df:71:c3:
         69:a9:8f:f9:43:0a:94:6e:88:1c:4b:96:d0:89:44:49:69:26:
         dd:51:92:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:05:40 2026 by rpki-client