Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/34352e3138362e3132332e302f32342d3234203d3e20323639343233.roa
File:                     34352e3138362e3132332e302f32342d3234203d3e20323639343233.roa (raw, json)
Hash identifier:          ejY2LRsrQBPvRi2O/h0yjn5FqYYUEuqVozHHH0oIQX8=
Subject key identifier:   79:7E:22:90:05:7F:43:7B:04:B5:6B:8E:AA:5E:82:D6:33:6F:BA:FA
Certificate issuer:       /CN=F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0
Certificate serial:       0F020374756EE29FFFC4E128FF6C8BB382AF9BEC
Authority key identifier: F0:E2:45:D2:CA:D0:9D:3E:65:9F:55:20:93:C7:FF:CB:E1:D2:5D:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/34352e3138362e3132332e302f32342d3234203d3e20323639343233.roa
Signing time:             Thu 05 Mar 2026 18:40:39 +0000
ROA not before:           Thu 05 Mar 2026 18:35:39 +0000
ROA not after:            Thu 04 Mar 2027 18:40:39 +0000
asID:                     269423
IP address blocks:        45.186.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.crl
                          rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 11:51:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:02:03:74:75:6e:e2:9f:ff:c4:e1:28:ff:6c:8b:b3:82:af:9b:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0
        Validity
            Not Before: Mar  5 18:35:39 2026 GMT
            Not After : Mar  4 18:40:39 2027 GMT
        Subject: CN=797E2290057F437B04B56B8EAA5E82D6336FBAFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1a:e2:f2:86:5b:46:22:01:64:2d:18:4d:4f:
                    9f:b3:b8:10:b6:c6:93:68:1e:db:d7:c4:0e:fc:e2:
                    75:93:33:ba:c3:cb:e7:b2:73:8e:95:ec:05:13:cb:
                    36:80:70:6c:a2:1f:53:b4:d1:02:00:c5:bb:6b:0b:
                    82:91:14:b6:e0:74:89:34:1e:b8:97:2d:0f:b0:c9:
                    be:7b:90:e8:22:99:a3:c2:ba:7e:73:2f:0d:2f:fa:
                    6f:b0:40:7e:01:9b:70:0f:4c:ae:9b:95:b7:65:58:
                    23:fe:75:9d:52:dc:1e:87:2c:67:8c:98:31:b2:48:
                    7d:77:1e:72:34:fb:42:ac:d7:67:5b:21:5d:51:5a:
                    1f:03:e0:52:9c:68:81:85:8e:38:6d:7a:59:3f:88:
                    1c:68:ca:62:53:12:2d:de:e2:2b:45:95:23:9a:6c:
                    95:ba:f5:9f:c8:c8:76:85:7a:b8:d8:3a:e4:53:02:
                    d5:35:d5:4a:d5:66:24:c3:bb:82:d0:56:d6:bd:26:
                    1f:7a:21:7c:07:1a:9f:e8:75:67:60:96:71:7c:69:
                    b2:6b:30:49:de:03:68:4b:93:d6:4c:20:d1:6e:ea:
                    f6:7d:38:18:f7:7a:c0:eb:d3:26:7e:ba:d2:2f:c2:
                    79:c5:76:f2:47:3c:f4:ad:5c:98:ce:dd:1f:2b:a8:
                    3e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:7E:22:90:05:7F:43:7B:04:B5:6B:8E:AA:5E:82:D6:33:6F:BA:FA
            X509v3 Authority Key Identifier:
                keyid:F0:E2:45:D2:CA:D0:9D:3E:65:9F:55:20:93:C7:FF:CB:E1:D2:5D:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/34352e3138362e3132332e302f32342d3234203d3e20323639343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:c4:c2:d1:83:77:ef:03:31:6d:72:11:cc:07:9b:eb:b9:7f:
         e8:2f:bc:9d:df:ad:5f:c3:b8:75:21:b5:8c:89:61:db:5e:29:
         3e:fa:f1:92:98:11:32:ed:bc:b7:a5:9b:1a:12:b0:4f:83:9f:
         32:7c:15:0d:21:05:7c:cf:43:98:79:d0:d7:ae:65:ad:9c:27:
         e8:7b:f1:05:0f:e8:fb:db:23:eb:a6:08:c6:d4:46:76:92:37:
         3e:36:1b:bd:93:47:58:50:08:9a:ef:ed:5d:1c:e4:e9:2f:78:
         78:6a:a3:8d:79:b4:32:cf:0d:49:88:1b:78:39:21:9e:13:92:
         b8:74:33:fa:07:d5:b0:85:6b:a8:14:0f:69:57:13:06:8d:54:
         6d:97:a9:16:da:e5:2c:47:bd:e4:c9:97:92:2b:31:72:40:89:
         67:e7:fe:50:24:f7:b7:b6:13:b5:94:05:ae:b2:57:89:1b:fb:
         b7:f4:58:29:98:ec:3e:fd:e3:0b:51:dd:bb:e5:98:dd:a7:f2:
         59:b6:b9:dd:2f:19:3c:1c:9d:07:47:76:5c:c3:94:ba:0f:eb:
         92:e8:46:c3:8e:32:70:7f:c9:33:0e:b2:fa:d5:8f:60:bc:24:
         38:3b:4a:b7:fa:1a:f9:6d:7a:20:be:16:b7:67:3c:a4:1e:2a:
         f7:b1:fd:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:05:32 2026 by rpki-client