Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/3139302e38392e3131302e302f32342d3234203d3e20323730333732.roa
File:                     3139302e38392e3131302e302f32342d3234203d3e20323730333732.roa (raw, json)
Hash identifier:          /rRZ508t3xo5pscEii/6MiFNrfdv5cL1SHkzu0f1Ucg=
Subject key identifier:   37:71:A3:2E:CD:1E:57:2A:E4:46:CB:6E:D6:2A:02:90:D9:AB:9D:CF
Certificate issuer:       /CN=2D695A483EAFCB1CC24C8720C0D3BBE303F42446
Certificate serial:       237C5EA5CC21079677192367CA918A9706846F4B
Authority key identifier: 2D:69:5A:48:3E:AF:CB:1C:C2:4C:87:20:C0:D3:BB:E3:03:F4:24:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D695A483EAFCB1CC24C8720C0D3BBE303F42446.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/3139302e38392e3131302e302f32342d3234203d3e20323730333732.roa
Signing time:             Thu 28 May 2026 12:23:46 +0000
ROA not before:           Thu 28 May 2026 12:18:46 +0000
ROA not after:            Thu 27 May 2027 12:23:46 +0000
asID:                     270372
IP address blocks:        190.89.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/2D695A483EAFCB1CC24C8720C0D3BBE303F42446.crl
                          rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/2D695A483EAFCB1CC24C8720C0D3BBE303F42446.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D695A483EAFCB1CC24C8720C0D3BBE303F42446.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 02:59:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:7c:5e:a5:cc:21:07:96:77:19:23:67:ca:91:8a:97:06:84:6f:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D695A483EAFCB1CC24C8720C0D3BBE303F42446
        Validity
            Not Before: May 28 12:18:46 2026 GMT
            Not After : May 27 12:23:46 2027 GMT
        Subject: CN=3771A32ECD1E572AE446CB6ED62A0290D9AB9DCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:41:6e:d5:4b:da:39:d0:80:a6:c6:2a:aa:4e:
                    3f:9a:07:42:ca:b9:c0:6e:50:b8:d3:98:12:6e:3e:
                    d8:0a:0c:89:c8:dd:f4:8c:99:d3:f8:d5:60:32:b9:
                    36:dc:8b:95:1a:69:e2:8a:d1:7d:54:66:ee:a7:31:
                    c5:96:17:e5:f4:84:5a:18:c2:47:4c:96:e2:fc:b6:
                    ce:5f:33:41:b9:d1:37:41:43:c9:c7:21:73:a7:1c:
                    eb:b6:2d:65:af:4e:88:61:9f:66:af:90:20:ef:b6:
                    cb:0b:e8:17:cb:dd:ef:be:45:25:da:55:9e:ae:af:
                    45:87:2f:40:3e:b7:7b:15:29:24:27:6e:7e:1b:47:
                    fd:89:1a:49:f8:c7:ea:52:df:60:6c:56:4d:f4:c6:
                    cf:8a:d6:98:91:ae:3d:00:1b:52:71:7a:7a:84:42:
                    e2:83:7a:f7:b1:f7:59:15:64:92:cf:0a:ec:db:ff:
                    2e:0e:4a:c1:a8:91:30:ee:28:42:1e:fa:db:be:78:
                    a5:09:df:28:56:1b:c4:6b:78:2b:e2:9e:ef:71:26:
                    24:11:b6:4a:1e:3d:6c:f2:3a:65:5c:33:85:09:e7:
                    ea:4c:f2:ab:9a:be:93:ef:9e:8d:ca:94:b4:3e:d1:
                    db:84:b1:14:1a:03:3c:82:6d:dd:79:eb:44:2d:78:
                    99:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:71:A3:2E:CD:1E:57:2A:E4:46:CB:6E:D6:2A:02:90:D9:AB:9D:CF
            X509v3 Authority Key Identifier:
                keyid:2D:69:5A:48:3E:AF:CB:1C:C2:4C:87:20:C0:D3:BB:E3:03:F4:24:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/2D695A483EAFCB1CC24C8720C0D3BBE303F42446.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D695A483EAFCB1CC24C8720C0D3BBE303F42446.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/3139302e38392e3131302e302f32342d3234203d3e20323730333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:51:5a:ed:7d:24:30:8b:bc:3f:a1:70:07:d1:0f:90:6d:c3:
         b1:21:b1:9a:cb:1d:62:56:d1:ae:08:02:1f:08:f2:36:ac:3e:
         2e:1a:89:9d:80:25:7f:8c:56:bf:1f:a0:59:9d:9c:4c:e1:df:
         cc:ec:fa:74:60:ae:10:3e:ff:c0:5b:14:a0:e1:49:3f:73:b5:
         cf:85:b5:51:01:c8:95:4c:08:eb:35:5e:09:24:80:79:66:9d:
         60:88:12:3f:45:c1:53:80:a2:f0:2a:16:f7:2d:43:af:68:72:
         f8:33:61:52:6c:c0:23:69:50:a4:01:b5:fe:31:f7:0a:a9:80:
         03:ef:d3:05:04:f7:91:b2:2d:32:92:f4:13:8f:52:cb:9d:de:
         da:2e:3e:c4:f9:6d:25:c8:55:a6:97:92:3d:21:18:1a:55:d0:
         63:e6:e8:48:a7:b6:31:a0:99:86:47:86:b9:56:47:f7:1c:ca:
         16:a7:6b:1f:69:49:b6:42:3d:c0:72:a3:a0:15:9c:8c:5f:9b:
         66:93:f3:ac:48:a2:bd:fd:fe:65:f2:3c:aa:a8:b6:7d:39:f9:
         1e:2f:a2:26:1c:34:84:be:2b:b2:d6:c8:9f:02:00:6f:cb:b0:
         a5:07:01:07:8b:52:75:f2:9f:13:55:c1:4b:d5:87:57:b7:bf:
         94:a3:d4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:46:38 2026 by rpki-client