Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF2kErQHoug6HW6uA93ybFi7ffiXrpfuD95a4pK2Bqap/0/34352e3137362e3137322e302f32322d3234203d3e20323638393438.roa
File:                     34352e3137362e3137322e302f32322d3234203d3e20323638393438.roa (raw, json)
Hash identifier:          yG/1ftgyvxI0GykApacDwv2jcfNBC+j9AD2Z37nX0qY=
Subject key identifier:   B7:69:49:37:A0:1A:CD:62:D1:E9:F4:93:CB:99:29:1A:69:38:09:A1
Certificate issuer:       /CN=9A094D6CE58550BA512453F1C558ECFD72D4AD71
Certificate serial:       5C882F87C9205AA5521DCE0EBEE7A6A2C1178C67
Authority key identifier: 9A:09:4D:6C:E5:85:50:BA:51:24:53:F1:C5:58:EC:FD:72:D4:AD:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A094D6CE58550BA512453F1C558ECFD72D4AD71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF2kErQHoug6HW6uA93ybFi7ffiXrpfuD95a4pK2Bqap/0/34352e3137362e3137322e302f32322d3234203d3e20323638393438.roa
Signing time:             Tue 19 May 2026 16:01:44 +0000
ROA not before:           Tue 19 May 2026 15:56:44 +0000
ROA not after:            Tue 18 May 2027 16:01:44 +0000
asID:                     268948
IP address blocks:        45.176.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HF2kErQHoug6HW6uA93ybFi7ffiXrpfuD95a4pK2Bqap/0/9A094D6CE58550BA512453F1C558ECFD72D4AD71.crl
                          rsync://rpki-repo.registro.br/repo/HF2kErQHoug6HW6uA93ybFi7ffiXrpfuD95a4pK2Bqap/0/9A094D6CE58550BA512453F1C558ECFD72D4AD71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A094D6CE58550BA512453F1C558ECFD72D4AD71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 19:06:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:88:2f:87:c9:20:5a:a5:52:1d:ce:0e:be:e7:a6:a2:c1:17:8c:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A094D6CE58550BA512453F1C558ECFD72D4AD71
        Validity
            Not Before: May 19 15:56:44 2026 GMT
            Not After : May 18 16:01:44 2027 GMT
        Subject: CN=B7694937A01ACD62D1E9F493CB99291A693809A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:66:f4:7a:a4:45:58:ca:d8:58:44:cc:c9:7b:
                    4e:76:a0:38:76:05:62:36:55:63:18:50:66:2d:51:
                    8b:5f:c9:18:e7:52:47:11:c0:f3:bc:e6:aa:50:1c:
                    f4:09:99:3f:1f:46:d9:c7:e4:97:e0:01:09:ee:ea:
                    ca:a9:99:4c:30:ab:35:31:8c:f9:82:1a:95:4b:6e:
                    72:f0:f7:cf:74:d4:f5:59:72:fb:88:8a:22:19:3a:
                    e9:9a:82:6b:f9:cf:7e:f4:e9:0c:bf:c2:79:4f:e7:
                    40:83:19:dd:79:9e:4c:c8:a4:fa:75:cb:62:96:e5:
                    c6:08:0d:91:4e:95:5f:89:6a:d6:b0:c7:e5:2b:2e:
                    90:6f:c2:54:e5:84:d0:9b:9c:f8:64:e0:91:30:08:
                    e9:c5:59:86:83:6e:15:3b:cf:42:95:e1:2d:33:58:
                    d1:fb:a2:95:4c:3b:a3:f4:d2:44:d9:e9:f5:05:ac:
                    e2:20:eb:fc:3e:34:3c:bd:86:fe:d1:eb:f8:ce:60:
                    67:7b:e7:c5:a4:9e:78:4f:f1:a0:bd:ca:b6:ea:53:
                    b7:d3:45:50:8b:37:26:25:86:60:d4:2b:4a:4c:68:
                    3c:c0:fa:53:1b:0b:78:74:0b:cd:ec:9e:67:20:f0:
                    d5:98:54:32:41:a1:c6:2c:8d:8e:6a:81:46:6e:f0:
                    92:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:69:49:37:A0:1A:CD:62:D1:E9:F4:93:CB:99:29:1A:69:38:09:A1
            X509v3 Authority Key Identifier:
                keyid:9A:09:4D:6C:E5:85:50:BA:51:24:53:F1:C5:58:EC:FD:72:D4:AD:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF2kErQHoug6HW6uA93ybFi7ffiXrpfuD95a4pK2Bqap/0/9A094D6CE58550BA512453F1C558ECFD72D4AD71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A094D6CE58550BA512453F1C558ECFD72D4AD71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF2kErQHoug6HW6uA93ybFi7ffiXrpfuD95a4pK2Bqap/0/34352e3137362e3137322e302f32322d3234203d3e20323638393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c3:1a:54:25:89:f1:8c:41:f1:3e:59:bb:c2:e2:6f:b9:85:d9:
         13:43:18:0d:49:93:4a:cd:b6:f0:a4:bd:06:cf:89:3b:a9:f6:
         16:1a:dc:d4:66:f1:54:cd:b6:93:67:f1:b0:ea:bf:ef:3c:83:
         74:20:23:e4:2e:f0:10:97:ed:3e:2c:1d:3c:f0:cb:b5:54:f2:
         aa:f1:68:f6:e3:b4:62:fb:53:2e:2a:ec:57:d2:21:95:c0:a3:
         a0:db:bf:c8:b0:ef:cd:97:0f:79:5d:1d:fe:c8:63:17:b6:fa:
         b9:b4:42:9e:2b:3e:7e:75:3c:1b:2d:d3:3d:dc:fb:e3:e0:f4:
         15:60:4d:bb:e6:8f:1f:f5:5e:68:3a:34:60:cb:63:46:4a:98:
         69:26:13:a6:b8:8f:f6:73:2c:1f:45:54:38:28:9d:b3:a4:fc:
         e7:63:c6:12:75:6a:fb:7f:8f:1b:b6:60:76:94:04:66:50:e9:
         93:df:e7:ce:26:1e:71:29:28:77:f8:e4:1a:a1:7b:89:bd:5b:
         16:22:df:d8:ad:76:a8:93:3d:eb:53:fb:45:45:91:39:d6:7a:
         eb:3a:d3:08:49:0b:7a:c0:cb:fa:73:7c:ce:fd:89:e0:81:d0:
         4a:f6:12:05:07:34:26:b6:f6:55:8f:1d:d4:61:97:62:5b:0e:
         2c:41:be:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:38:35 2026 by rpki-client