Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmzbZnt8Re1keSMcGk1CMrdhn12oyxWnGowmc1dBuvkf/0/34352e3138322e342e302f32322d3232203d3e20323639323038.roa
File:                     34352e3138322e342e302f32322d3232203d3e20323639323038.roa (raw, json)
Hash identifier:          PNnh4wXZfWWSzfRW6d1m+WcPQuhIwMSmMTEZmGpjG8k=
Subject key identifier:   10:75:A6:5F:47:69:78:E0:29:6D:F6:6F:EA:49:33:C9:AA:78:82:0A
Certificate issuer:       /CN=322F1293C82AD118D20FD93532D37FDC318491DD
Certificate serial:       38B56AC5BB247797831A2C098F758EE617069AB2
Authority key identifier: 32:2F:12:93:C8:2A:D1:18:D2:0F:D9:35:32:D3:7F:DC:31:84:91:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/322F1293C82AD118D20FD93532D37FDC318491DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmzbZnt8Re1keSMcGk1CMrdhn12oyxWnGowmc1dBuvkf/0/34352e3138322e342e302f32322d3232203d3e20323639323038.roa
Signing time:             Fri 24 Jul 2026 07:08:34 +0000
ROA not before:           Fri 24 Jul 2026 07:03:34 +0000
ROA not after:            Fri 23 Jul 2027 07:08:34 +0000
asID:                     269208
IP address blocks:        45.182.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HmzbZnt8Re1keSMcGk1CMrdhn12oyxWnGowmc1dBuvkf/0/322F1293C82AD118D20FD93532D37FDC318491DD.crl
                          rsync://rpki-repo.registro.br/repo/HmzbZnt8Re1keSMcGk1CMrdhn12oyxWnGowmc1dBuvkf/0/322F1293C82AD118D20FD93532D37FDC318491DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/322F1293C82AD118D20FD93532D37FDC318491DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Jul 2026 22:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b5:6a:c5:bb:24:77:97:83:1a:2c:09:8f:75:8e:e6:17:06:9a:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=322F1293C82AD118D20FD93532D37FDC318491DD
        Validity
            Not Before: Jul 24 07:03:34 2026 GMT
            Not After : Jul 23 07:08:34 2027 GMT
        Subject: CN=1075A65F476978E0296DF66FEA4933C9AA78820A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:30:12:c1:05:31:51:85:57:60:8d:24:41:c7:
                    21:8c:ce:5f:8b:c5:4c:37:53:1c:09:5f:98:d1:8e:
                    5f:02:f4:03:05:b1:12:06:60:43:1f:0f:73:3b:93:
                    68:b4:c6:44:72:59:f7:bf:de:bb:4e:61:6c:ec:9c:
                    17:2b:e9:dc:08:79:fd:8f:19:3d:1d:0f:fc:89:7a:
                    23:91:43:97:a7:75:9a:c6:00:06:37:bb:92:19:a2:
                    8d:04:12:91:b5:1d:b6:9c:7a:91:ab:07:a7:5d:82:
                    44:6c:04:7c:66:52:38:9d:f3:1f:77:e6:8e:29:3a:
                    1b:a7:16:24:5d:c7:99:a9:75:7e:e4:a4:69:18:f8:
                    e4:83:91:54:7a:83:db:12:b9:94:3c:a1:37:98:ac:
                    76:9e:f8:7d:05:7a:c6:50:a7:04:f5:9a:62:d7:47:
                    35:de:50:c1:f9:8c:c8:a7:e5:8c:0e:48:96:ba:cf:
                    47:77:01:58:fe:ab:91:62:ae:fe:eb:d9:9a:de:d0:
                    1e:82:be:5a:3b:bd:85:d6:3a:c3:94:e9:84:77:2e:
                    2e:e1:44:5d:ba:a8:c8:4e:4d:35:a1:08:1c:f2:ef:
                    88:cf:ed:d2:2c:03:60:5e:e4:f8:95:d1:1c:ec:2d:
                    51:f7:4e:a6:4b:6e:70:c4:16:02:3b:d0:25:f8:f0:
                    b7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:75:A6:5F:47:69:78:E0:29:6D:F6:6F:EA:49:33:C9:AA:78:82:0A
            X509v3 Authority Key Identifier:
                keyid:32:2F:12:93:C8:2A:D1:18:D2:0F:D9:35:32:D3:7F:DC:31:84:91:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmzbZnt8Re1keSMcGk1CMrdhn12oyxWnGowmc1dBuvkf/0/322F1293C82AD118D20FD93532D37FDC318491DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/322F1293C82AD118D20FD93532D37FDC318491DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmzbZnt8Re1keSMcGk1CMrdhn12oyxWnGowmc1dBuvkf/0/34352e3138322e342e302f32322d3232203d3e20323639323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:23:de:27:15:eb:c1:56:99:2a:3e:54:65:ad:41:5f:c1:a9:
         b0:6b:0c:1c:14:b9:4b:c1:a2:21:91:a0:e9:0b:46:43:17:d4:
         8f:45:63:2a:db:a1:e6:5c:b7:3f:c7:de:78:2c:75:60:3d:4e:
         40:a7:5a:d4:6f:4f:0a:91:76:5c:04:25:78:e8:6a:14:70:41:
         97:4b:7e:07:a0:30:36:da:11:da:02:9e:80:56:c1:0d:ec:c0:
         68:17:e2:92:77:71:9b:3e:0f:42:f4:f4:12:79:07:25:8f:b7:
         9f:ef:8e:f8:f9:0f:cd:b4:9d:be:ac:da:96:7d:1b:00:73:c4:
         e8:7c:6a:5f:a0:b5:62:5b:64:26:5f:dd:ef:6e:3a:fe:ac:a1:
         cb:04:a0:3e:20:91:49:79:fe:0c:9f:77:3a:e0:a3:c9:5f:40:
         eb:7d:57:59:3e:88:b1:e7:7b:00:79:e6:c8:e4:82:1f:2a:01:
         21:8c:de:30:59:1c:0a:11:b1:7f:40:db:9b:bc:4b:33:2b:ff:
         60:da:e9:3a:87:81:d8:0c:51:83:fb:62:da:da:32:bd:71:dc:
         c4:e7:3f:ef:e6:b5:ab:2c:48:95:78:78:a1:83:37:34:e8:f1:
         74:8f:64:c9:6a:4d:49:45:f1:3d:8b:e1:05:45:f5:63:94:ea:
         eb:07:ce:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:52:02 2026 by rpki-client