Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/34352e36352e3232302e302f32322d3234203d3e20323033.roa
File:                     34352e36352e3232302e302f32322d3234203d3e20323033.roa (raw, json)
Hash identifier:          ODwpg/AII/qEY0p8rU+CB9MxFm8G5fBI4yy2+swt01c=
Subject key identifier:   1F:B6:24:7A:94:80:8D:25:AA:AE:70:E5:46:9F:EA:4C:67:34:C5:78
Certificate issuer:       /CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D
Certificate serial:       39B562FDEF440774D033EF3C54C3F2D2EC79D8AC
Authority key identifier: AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/34352e36352e3232302e302f32322d3234203d3e20323033.roa
Signing time:             Thu 05 Feb 2026 04:23:05 +0000
ROA not before:           Thu 05 Feb 2026 04:18:05 +0000
ROA not after:            Thu 04 Feb 2027 04:23:05 +0000
asID:                     203
IP address blocks:        45.65.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl
                          rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 06:08:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:b5:62:fd:ef:44:07:74:d0:33:ef:3c:54:c3:f2:d2:ec:79:d8:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D
        Validity
            Not Before: Feb  5 04:18:05 2026 GMT
            Not After : Feb  4 04:23:05 2027 GMT
        Subject: CN=1FB6247A94808D25AAAE70E5469FEA4C6734C578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:31:eb:05:43:aa:b3:38:a6:84:8a:db:8f:ba:
                    6e:ee:20:a9:42:ee:17:89:e4:6b:17:c0:fe:d8:e5:
                    28:72:b6:bf:df:8d:2d:d1:df:bd:a7:c5:6a:79:7a:
                    f7:e1:93:28:9f:3f:95:b8:fc:da:71:9c:35:e4:cf:
                    c1:48:c0:6e:34:f9:6e:12:c1:69:5f:0d:da:05:38:
                    98:65:8d:be:90:ea:88:25:ad:8e:7a:aa:fd:22:a8:
                    be:db:5b:20:e3:ee:7c:e0:ec:4e:33:b7:c9:61:fa:
                    67:60:e7:82:28:25:9c:e0:29:11:aa:55:26:ff:ee:
                    86:44:5c:cc:73:a1:55:6c:63:ca:59:5c:35:f7:2d:
                    76:f9:94:56:c4:1d:2c:e1:37:f6:83:f7:78:03:fa:
                    4d:aa:4c:d0:63:79:a9:99:00:51:50:bf:f4:27:25:
                    05:78:d4:71:14:8b:e1:a8:a6:59:0c:3c:e7:96:54:
                    da:df:bb:c1:54:bb:05:b5:04:af:4b:9c:3c:19:0c:
                    51:a1:45:2b:cb:86:f6:45:bb:5a:cb:59:80:d7:af:
                    13:ed:e3:be:5e:b7:c9:a2:5a:fb:39:f2:9c:d5:f6:
                    0a:6c:e1:ef:be:5e:3c:cb:f9:1a:4e:b1:2a:d3:c9:
                    94:ae:aa:37:b5:05:d8:16:91:c1:12:b7:48:23:14:
                    a3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B6:24:7A:94:80:8D:25:AA:AE:70:E5:46:9F:EA:4C:67:34:C5:78
            X509v3 Authority Key Identifier:
                keyid:AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/34352e36352e3232302e302f32322d3234203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:63:fc:92:8b:73:ef:2f:03:ba:bb:dc:a5:7d:e8:c6:f6:7f:
         a1:e0:92:3a:13:37:43:1f:62:26:2c:af:56:59:a8:b3:23:2f:
         c7:e5:57:85:44:37:b0:07:64:a2:58:d6:5d:22:f6:ae:e1:b1:
         3c:e8:46:b4:c6:7b:33:8b:b2:6a:6b:ee:ed:41:cb:4f:16:37:
         2a:27:85:ed:26:d8:50:5e:08:aa:88:d9:e9:0f:48:ae:80:d5:
         fd:5b:ee:16:5a:da:a1:85:3d:ca:98:73:a8:be:ee:d6:d1:f4:
         67:55:3d:a3:30:e3:ff:6c:75:8f:4d:82:44:6a:45:05:b7:d6:
         72:75:06:c9:c9:4c:a2:5e:87:ea:90:e3:d2:2a:fe:af:e6:a4:
         01:d6:a9:6c:bb:50:16:01:db:d3:88:1d:ce:dd:e7:5c:65:fe:
         ec:13:f3:57:e4:da:0c:1c:c2:c1:e5:ad:a3:5e:e0:35:41:98:
         14:e2:b2:33:59:c6:25:75:8e:9b:cd:ea:1a:d1:da:d9:9b:91:
         3e:f9:47:df:fc:56:c8:e4:86:30:63:61:b5:c0:a2:88:c1:6f:
         2a:de:94:15:1e:db:a4:97:e6:d8:2d:95:3c:5d:17:8f:e9:b3:
         73:d5:31:39:46:74:61:cc:96:12:dd:3e:82:8e:55:f9:0f:49:
         0a:ec:13:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:26:32 2026 by rpki-client