Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/34352e3232382e38362e302f32342d3234203d3e20323637303637.roa
File:                     34352e3232382e38362e302f32342d3234203d3e20323637303637.roa (raw, json)
Hash identifier:          Cn5yrvD75J9jDfn6VMzNYN1IDz90SWtata6Nmqc6YmM=
Subject key identifier:   5D:29:41:14:58:89:42:03:71:31:79:B6:60:1D:5D:87:BF:13:2B:AA
Certificate issuer:       /CN=BB8F3BB4D3D0AE152636A002762B7803860CCA49
Certificate serial:       73A6EF7ED21317990488ACD0A4FFCF05DB7EFB5B
Authority key identifier: BB:8F:3B:B4:D3:D0:AE:15:26:36:A0:02:76:2B:78:03:86:0C:CA:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB8F3BB4D3D0AE152636A002762B7803860CCA49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/34352e3232382e38362e302f32342d3234203d3e20323637303637.roa
Signing time:             Mon 01 Jun 2026 13:03:58 +0000
ROA not before:           Mon 01 Jun 2026 12:58:58 +0000
ROA not after:            Mon 31 May 2027 13:03:58 +0000
asID:                     267067
IP address blocks:        45.228.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/BB8F3BB4D3D0AE152636A002762B7803860CCA49.crl
                          rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/BB8F3BB4D3D0AE152636A002762B7803860CCA49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB8F3BB4D3D0AE152636A002762B7803860CCA49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 21:08:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:a6:ef:7e:d2:13:17:99:04:88:ac:d0:a4:ff:cf:05:db:7e:fb:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB8F3BB4D3D0AE152636A002762B7803860CCA49
        Validity
            Not Before: Jun  1 12:58:58 2026 GMT
            Not After : May 31 13:03:58 2027 GMT
        Subject: CN=5D29411458894203713179B6601D5D87BF132BAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:71:97:46:48:8d:eb:31:32:aa:61:93:56:3e:
                    e4:1e:2c:5d:a2:4d:e2:ea:e2:b2:fe:ec:45:3b:dc:
                    b0:65:ca:a6:cd:e0:b2:ac:21:83:e0:2b:40:1c:d6:
                    76:67:9e:98:06:c8:52:67:48:25:c4:9c:89:ce:e4:
                    67:16:5c:52:35:31:74:3c:94:2c:18:f3:d0:1a:12:
                    b0:c2:72:d7:d1:c0:64:c9:d3:a2:e9:17:fa:cb:7f:
                    11:86:ea:17:bc:40:ff:aa:ca:c0:2d:28:a9:4b:1f:
                    01:75:58:c6:6a:02:48:0a:e5:bf:d5:51:d2:62:ff:
                    05:f4:0d:53:24:16:84:fe:37:ef:5a:b1:f6:6b:a2:
                    e6:ae:23:bd:e5:de:ae:89:a2:9c:25:fd:a2:b1:2a:
                    00:92:ff:c0:c5:57:59:0e:da:92:86:fe:38:06:4b:
                    36:b2:9c:c9:cf:bb:d8:fd:6a:81:c8:91:70:80:8d:
                    88:b6:93:18:57:9b:11:9e:91:fa:02:ef:42:d8:d4:
                    cf:c0:aa:65:b3:6e:76:5e:3e:15:bb:83:ba:66:f8:
                    15:3b:05:a4:70:a8:c7:36:f6:c9:f3:17:9f:6c:65:
                    31:a3:b3:71:a4:de:5f:2a:8a:67:53:55:63:dd:7d:
                    44:86:bb:77:db:15:ce:5d:6f:19:fc:2c:90:cf:a6:
                    12:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:29:41:14:58:89:42:03:71:31:79:B6:60:1D:5D:87:BF:13:2B:AA
            X509v3 Authority Key Identifier:
                keyid:BB:8F:3B:B4:D3:D0:AE:15:26:36:A0:02:76:2B:78:03:86:0C:CA:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/BB8F3BB4D3D0AE152636A002762B7803860CCA49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB8F3BB4D3D0AE152636A002762B7803860CCA49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/34352e3232382e38362e302f32342d3234203d3e20323637303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:e9:9c:e4:0e:ad:ed:8b:f3:7c:b1:bf:82:c0:9e:c4:c8:3f:
         d0:86:bc:20:6a:0d:2b:5b:fd:7c:b3:12:38:80:2d:fd:2e:38:
         1e:cf:40:4a:49:6a:f5:9c:8c:ba:9a:e5:3b:49:fd:bc:ef:80:
         7f:60:c3:c7:dc:f5:d9:6e:31:16:cb:b3:b8:f4:6c:59:44:3f:
         26:55:1f:06:20:79:64:d8:60:b5:b1:8d:62:90:d2:35:e9:31:
         de:4e:81:d9:c1:dd:1f:80:30:84:2c:15:c7:ca:d2:d5:5f:1b:
         11:8c:30:8f:44:d3:7f:c8:89:3f:e5:30:c4:8a:70:21:b6:f2:
         b6:41:0b:84:50:3f:40:36:5a:7b:c4:a5:5b:47:82:c8:d6:15:
         8c:b9:54:b9:49:43:d0:00:56:28:ac:20:41:ee:17:e3:e1:2c:
         bc:55:94:73:5d:48:41:8c:f6:d4:c2:2e:f4:69:8a:11:28:40:
         bf:14:cb:d7:b7:ba:75:eb:75:24:34:a6:02:48:9e:01:4e:1c:
         0d:d4:8c:73:8d:ca:3c:28:61:fa:9d:93:57:fe:58:31:71:59:
         95:54:5e:7a:2a:d7:0c:42:1d:16:69:fc:ab:70:b4:cd:4a:f7:
         a9:b9:df:de:90:19:37:bc:96:45:03:df:c9:14:fc:88:70:77:
         14:52:72:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:03:06 2026 by rpki-client