Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/34352e3137302e39362e302f32322d3332203d3e20323638313537.roa
File:                     34352e3137302e39362e302f32322d3332203d3e20323638313537.roa (raw, json)
Hash identifier:          yCiJD0NTtZdtCH8uGss+fRK9E8/BfSDUtu/OSaky+fY=
Subject key identifier:   B6:8F:08:E1:8E:4D:55:07:B1:7C:A5:59:07:67:1A:8A:D1:D8:0F:EF
Certificate issuer:       /CN=6BE9CBB41F11221415B2B5ABE2E4ECF313C2E3E8
Certificate serial:       7909AA67B3EFD622D82F594411DA9B292FAEAF72
Authority key identifier: 6B:E9:CB:B4:1F:11:22:14:15:B2:B5:AB:E2:E4:EC:F3:13:C2:E3:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BE9CBB41F11221415B2B5ABE2E4ECF313C2E3E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/34352e3137302e39362e302f32322d3332203d3e20323638313537.roa
Signing time:             Mon 02 Mar 2026 15:50:56 +0000
ROA not before:           Mon 02 Mar 2026 15:45:56 +0000
ROA not after:            Mon 01 Mar 2027 15:50:56 +0000
asID:                     268157
IP address blocks:        45.170.96.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/6BE9CBB41F11221415B2B5ABE2E4ECF313C2E3E8.crl
                          rsync://rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/6BE9CBB41F11221415B2B5ABE2E4ECF313C2E3E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BE9CBB41F11221415B2B5ABE2E4ECF313C2E3E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 18:07:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:09:aa:67:b3:ef:d6:22:d8:2f:59:44:11:da:9b:29:2f:ae:af:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BE9CBB41F11221415B2B5ABE2E4ECF313C2E3E8
        Validity
            Not Before: Mar  2 15:45:56 2026 GMT
            Not After : Mar  1 15:50:56 2027 GMT
        Subject: CN=B68F08E18E4D5507B17CA55907671A8AD1D80FEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8b:a9:28:d9:02:9c:1e:23:ff:d5:34:35:ad:
                    24:b8:f1:78:a5:e4:f8:22:48:24:85:32:e1:02:66:
                    6a:24:8e:0e:9a:f0:60:a8:c1:5a:51:20:e2:3e:82:
                    7e:23:e5:59:07:47:1d:a4:2e:10:ef:9b:21:fe:0a:
                    f1:06:8f:3a:b8:cd:d9:79:d9:a3:71:e8:a6:0e:08:
                    fb:ab:58:ee:58:83:b7:7d:93:c2:dd:e1:89:08:b9:
                    79:2c:55:bf:b8:9c:28:ff:35:1a:62:34:cc:0c:36:
                    f7:06:a3:0b:f3:71:d3:f3:10:ff:88:b2:0a:4c:8d:
                    94:b2:6d:68:74:62:e8:04:d6:ee:af:77:fb:74:6f:
                    e5:2d:43:16:63:2f:31:28:4d:f6:b8:08:2b:0d:bd:
                    d3:99:34:ed:48:5f:57:a0:13:57:3f:28:6a:04:ef:
                    8e:1f:d4:d6:35:fb:48:8e:01:f8:4e:41:43:d2:7b:
                    f8:a5:b7:7d:5e:84:c7:3e:db:df:82:d1:e2:73:25:
                    e1:56:29:56:1e:f3:ce:ad:3b:8a:c3:c9:7b:86:98:
                    fd:e5:25:49:1c:33:53:74:be:a3:52:b2:91:6b:2a:
                    0e:07:65:ae:c8:b2:57:a1:09:f3:b7:75:c5:82:64:
                    18:99:63:27:41:55:85:ac:07:e5:45:db:87:57:c0:
                    e8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:8F:08:E1:8E:4D:55:07:B1:7C:A5:59:07:67:1A:8A:D1:D8:0F:EF
            X509v3 Authority Key Identifier:
                keyid:6B:E9:CB:B4:1F:11:22:14:15:B2:B5:AB:E2:E4:EC:F3:13:C2:E3:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/6BE9CBB41F11221415B2B5ABE2E4ECF313C2E3E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BE9CBB41F11221415B2B5ABE2E4ECF313C2E3E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/34352e3137302e39362e302f32322d3332203d3e20323638313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:d0:cd:f8:b4:28:37:6e:0a:5d:66:55:6c:7c:f4:61:e0:c7:
         8b:df:d4:1f:79:1d:c4:66:51:ef:bf:4b:15:f6:10:d3:98:18:
         99:45:03:37:b9:78:9f:4f:26:0b:55:c9:ba:8c:e6:be:fc:dd:
         11:d9:ff:95:e4:b3:a9:52:a0:c4:3c:b5:46:9d:11:5b:6e:e5:
         20:de:78:47:ff:b2:62:2a:75:72:8f:96:a3:1f:ee:81:50:99:
         1e:0a:a3:70:83:06:f2:ed:83:43:39:17:25:33:7b:2d:b3:e2:
         a6:96:90:18:40:1d:b8:68:8f:8f:c8:73:fc:a9:17:b6:e6:b4:
         01:2c:af:a4:cb:6e:b1:78:81:8f:dc:75:4f:e2:f1:fd:ea:9c:
         17:52:4d:c4:27:99:e8:27:2d:da:73:b6:40:a6:bc:25:c4:c4:
         29:30:24:31:4b:79:6c:10:27:f0:6f:3f:35:69:37:35:6e:8c:
         4b:a8:c1:66:22:dd:c3:26:66:25:99:ec:49:25:18:1e:99:c1:
         a7:9e:2c:e6:7e:cd:d0:36:cc:84:f3:83:11:68:06:df:ea:7b:
         99:31:91:7d:62:39:9f:0f:79:be:45:ad:83:6f:0f:5c:6c:4d:
         e6:83:11:f1:0e:d2:dc:31:de:b8:2a:22:4d:40:c6:67:f9:7a:
         7e:72:16:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:13:22 2026 by rpki-client