Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/34352e3138362e3131382e302f32332d3233203d3e20323639343230.roa
File:                     34352e3138362e3131382e302f32332d3233203d3e20323639343230.roa (raw, json)
Hash identifier:          9yBlrFkY04t/zPzfMZYueENSguFHlS+PFNcLNiFPk70=
Subject key identifier:   29:83:AB:D8:36:49:1A:DF:1B:F6:3F:EC:13:62:C1:F4:32:9B:8D:00
Certificate issuer:       /CN=C3839D882A452B7AB8567F58286919DB7C73545F
Certificate serial:       0575ACD0D17152EEED3620F397BA7F0760828B5B
Authority key identifier: C3:83:9D:88:2A:45:2B:7A:B8:56:7F:58:28:69:19:DB:7C:73:54:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3839D882A452B7AB8567F58286919DB7C73545F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/34352e3138362e3131382e302f32332d3233203d3e20323639343230.roa
Signing time:             Mon 01 Jun 2026 19:09:01 +0000
ROA not before:           Mon 01 Jun 2026 19:04:01 +0000
ROA not after:            Mon 31 May 2027 19:09:01 +0000
asID:                     269420
IP address blocks:        45.186.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/C3839D882A452B7AB8567F58286919DB7C73545F.crl
                          rsync://rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/C3839D882A452B7AB8567F58286919DB7C73545F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3839D882A452B7AB8567F58286919DB7C73545F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 15:18:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:75:ac:d0:d1:71:52:ee:ed:36:20:f3:97:ba:7f:07:60:82:8b:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3839D882A452B7AB8567F58286919DB7C73545F
        Validity
            Not Before: Jun  1 19:04:01 2026 GMT
            Not After : May 31 19:09:01 2027 GMT
        Subject: CN=2983ABD836491ADF1BF63FEC1362C1F4329B8D00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:11:4a:1c:42:5e:6b:3d:6b:39:46:45:33:3b:
                    ff:0c:85:09:73:13:0c:28:1a:74:7c:ac:c8:1b:ef:
                    9c:d2:7e:45:39:0c:8f:16:13:b9:5e:8d:38:3b:4c:
                    b7:30:97:91:1b:ed:2c:10:a7:44:a1:b2:fa:7d:e4:
                    fa:23:35:3e:ab:6c:a7:83:0a:26:3f:7c:f6:4a:b7:
                    0e:cf:d3:ed:52:57:cf:89:36:5f:d8:67:9e:e0:83:
                    9c:e6:88:38:a2:2d:61:28:31:a3:6b:a8:ee:cb:81:
                    91:81:d2:d0:ae:f7:58:31:f7:49:50:0e:b8:cc:b8:
                    2d:d4:00:c0:77:ec:96:4b:5f:29:50:a4:69:1a:87:
                    fe:fe:42:8c:75:04:b9:75:82:d5:36:89:8c:7a:1f:
                    61:b0:0e:ae:85:93:d8:63:e4:f0:20:ca:ae:fc:8a:
                    e4:09:38:f1:ad:2f:6c:ba:20:39:95:75:02:08:56:
                    3e:db:ed:45:57:ae:bf:59:65:96:2c:73:de:c4:d3:
                    60:30:2b:6f:8b:24:d2:e2:93:e3:95:85:0b:d1:1b:
                    c5:43:5a:88:b6:dc:23:62:85:47:ec:c5:52:c7:bc:
                    20:96:67:f0:78:67:64:c0:6e:bc:c6:58:f5:61:66:
                    ba:b5:6a:c2:bd:b9:b3:44:5e:5c:fb:f9:69:d5:e1:
                    3d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:83:AB:D8:36:49:1A:DF:1B:F6:3F:EC:13:62:C1:F4:32:9B:8D:00
            X509v3 Authority Key Identifier:
                keyid:C3:83:9D:88:2A:45:2B:7A:B8:56:7F:58:28:69:19:DB:7C:73:54:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/C3839D882A452B7AB8567F58286919DB7C73545F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3839D882A452B7AB8567F58286919DB7C73545F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/34352e3138362e3131382e302f32332d3233203d3e20323639343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:1c:65:29:1b:dc:e0:19:fb:72:2b:56:70:4b:ef:84:43:e9:
         e5:8d:28:83:52:16:1b:af:1b:db:65:2e:ab:56:b2:50:07:48:
         8e:39:ef:c4:11:11:48:09:b9:f2:41:66:4f:c3:ae:eb:2b:bf:
         c8:3f:9c:14:5c:97:cd:55:f3:07:87:99:d5:41:ef:3b:91:84:
         b4:1d:9f:e0:b6:26:04:0e:7d:1b:1c:8a:0b:da:cd:4e:aa:f0:
         1c:74:16:76:56:3f:01:a9:52:0d:f6:0a:70:bd:72:58:6f:5c:
         42:2f:95:72:70:1f:aa:60:9d:0a:d7:f2:e3:f8:5d:fc:a0:3c:
         36:0a:8d:97:50:18:a7:26:9f:57:00:31:22:bd:8f:4f:82:00:
         fd:d7:38:66:8d:3d:57:a0:cf:12:c0:eb:20:fc:d1:3e:a9:26:
         9e:0d:01:9d:e0:a6:0b:27:1b:3b:80:35:5a:34:29:74:a6:78:
         48:ec:51:c4:5b:6a:fc:55:18:1b:30:9d:d6:bd:6e:0b:98:54:
         b9:73:57:3f:f0:b9:28:77:84:7b:08:16:40:4e:39:aa:a2:76:
         e7:c6:1e:13:82:69:c8:cc:e6:b1:a9:9b:ba:6f:20:8d:8b:a2:
         6b:ee:99:ae:79:9f:65:61:92:df:5d:3c:0f:79:1f:ad:bf:72:
         7d:b6:06:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:48:56 2026 by rpki-client