Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/34352e3138362e3131362e302f32332d3233203d3e20323639343230.roa
File:                     34352e3138362e3131362e302f32332d3233203d3e20323639343230.roa (raw, json)
Hash identifier:          1GTOeZ6STeQM76q0wypGMrJjAc5zQiRkrX86XNa64DY=
Subject key identifier:   44:86:B8:EE:23:5B:08:A3:7D:B1:F9:D5:BA:80:05:D3:90:54:FD:48
Certificate issuer:       /CN=C3839D882A452B7AB8567F58286919DB7C73545F
Certificate serial:       6E822AC76268500F967AB512BD54C0580515C2A8
Authority key identifier: C3:83:9D:88:2A:45:2B:7A:B8:56:7F:58:28:69:19:DB:7C:73:54:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3839D882A452B7AB8567F58286919DB7C73545F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/34352e3138362e3131362e302f32332d3233203d3e20323639343230.roa
Signing time:             Mon 01 Jun 2026 19:08:49 +0000
ROA not before:           Mon 01 Jun 2026 19:03:49 +0000
ROA not after:            Mon 31 May 2027 19:08:49 +0000
asID:                     269420
IP address blocks:        45.186.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/C3839D882A452B7AB8567F58286919DB7C73545F.crl
                          rsync://rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/C3839D882A452B7AB8567F58286919DB7C73545F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3839D882A452B7AB8567F58286919DB7C73545F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 15:18:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:82:2a:c7:62:68:50:0f:96:7a:b5:12:bd:54:c0:58:05:15:c2:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3839D882A452B7AB8567F58286919DB7C73545F
        Validity
            Not Before: Jun  1 19:03:49 2026 GMT
            Not After : May 31 19:08:49 2027 GMT
        Subject: CN=4486B8EE235B08A37DB1F9D5BA8005D39054FD48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:71:35:bc:0e:b5:2b:b8:30:9b:be:b9:4c:9c:
                    71:61:de:be:10:4f:21:a3:62:fe:3f:b3:44:9f:ac:
                    55:fe:44:6b:49:b2:a4:f1:28:77:f5:96:f5:01:98:
                    f5:32:12:e2:5a:83:35:bd:e2:34:d9:80:23:e1:75:
                    18:6e:0d:a4:c1:d9:0f:cc:89:85:3e:72:c2:31:bd:
                    b5:b3:da:20:4c:2c:ca:31:d3:f7:7f:bd:2a:9f:42:
                    3a:72:23:5a:e8:60:04:9d:5a:87:00:70:d9:97:7b:
                    35:81:4c:ff:32:4b:09:7c:fb:a6:8d:dd:d9:15:82:
                    b7:58:29:95:7a:68:d1:41:e9:7f:90:3f:46:e3:a9:
                    79:ba:71:a4:ec:01:81:d3:cd:d3:b5:2e:8f:69:75:
                    8c:4a:f4:a6:f3:57:90:b2:b5:06:f9:70:fa:3c:85:
                    33:ae:fb:36:de:99:a4:51:36:fb:14:8f:ff:20:dd:
                    53:89:22:6d:be:26:0b:92:7e:25:96:d4:db:9c:04:
                    0c:b0:3a:4f:13:d4:42:d7:c6:30:dc:a6:bd:c6:99:
                    cb:c0:0b:01:fd:db:9a:44:78:1f:9e:eb:86:34:5a:
                    14:5b:f2:90:a7:54:25:d7:ad:6a:74:a3:f0:23:d7:
                    c0:11:e7:0c:d1:92:65:a9:a4:e4:ed:34:e0:d7:93:
                    62:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:86:B8:EE:23:5B:08:A3:7D:B1:F9:D5:BA:80:05:D3:90:54:FD:48
            X509v3 Authority Key Identifier:
                keyid:C3:83:9D:88:2A:45:2B:7A:B8:56:7F:58:28:69:19:DB:7C:73:54:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/C3839D882A452B7AB8567F58286919DB7C73545F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3839D882A452B7AB8567F58286919DB7C73545F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/34352e3138362e3131362e302f32332d3233203d3e20323639343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:12:58:1f:83:a5:63:56:eb:65:b7:9f:52:85:df:0a:13:e4:
         0e:56:75:b1:45:eb:93:b9:9f:6a:42:7b:a4:b0:47:76:7e:5e:
         11:57:de:84:3b:0f:01:11:0e:a9:5f:db:13:82:b5:d5:b3:9f:
         50:93:25:2c:48:b6:46:3e:25:07:40:96:82:ce:e0:67:a0:a9:
         21:cd:a0:a9:fd:14:7c:9c:fc:8e:17:b5:46:78:1d:0c:30:33:
         59:36:26:96:5d:db:01:45:d8:c4:ec:30:11:16:ae:0f:5a:e2:
         e2:10:09:61:30:5c:1c:83:67:1c:85:7a:55:72:5b:84:43:8c:
         d6:55:5d:ee:09:d7:c3:5a:83:a8:2f:73:93:d5:01:d0:8b:23:
         37:56:5c:89:3e:97:9f:4c:3e:eb:fc:a3:3f:e0:55:54:83:4d:
         95:14:b7:0b:58:6a:e0:bc:ce:88:d7:20:15:e9:d4:50:d6:56:
         a7:e1:ed:4b:58:55:a1:d7:08:f9:9c:3a:96:c0:2b:e2:a8:a6:
         14:dc:2e:8a:65:ee:cb:1c:5f:a1:36:a4:1b:11:13:01:a5:4b:
         c3:f7:79:fb:e0:41:e5:d8:82:f5:2d:a5:d9:2f:b2:3f:33:da:
         80:09:fd:a5:28:bd:bf:ba:4b:a6:8d:9b:d0:22:ee:62:5c:fc:
         2b:ef:37:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:48:55 2026 by rpki-client