Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/34352e3233382e3234302e302f32322d3236203d3e20323638333634.roa
File:                     34352e3233382e3234302e302f32322d3236203d3e20323638333634.roa (raw, json)
Hash identifier:          ngZX5GEie8EInI/31uYab1oVVRCa1VT7KT7UCc2qEco=
Subject key identifier:   2E:9F:DA:E5:31:5D:73:2F:46:00:60:45:2D:45:51:D8:5A:76:91:AC
Certificate issuer:       /CN=F348AB796A84D47D293E1A4CC85A1D3B3A6C2A43
Certificate serial:       3E94901D2C47F83F84F268EC6FD941A75BE077B9
Authority key identifier: F3:48:AB:79:6A:84:D4:7D:29:3E:1A:4C:C8:5A:1D:3B:3A:6C:2A:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F348AB796A84D47D293E1A4CC85A1D3B3A6C2A43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/34352e3233382e3234302e302f32322d3236203d3e20323638333634.roa
Signing time:             Tue 19 May 2026 18:16:12 +0000
ROA not before:           Tue 19 May 2026 18:11:12 +0000
ROA not after:            Tue 18 May 2027 18:16:12 +0000
asID:                     268364
IP address blocks:        45.238.240.0/22 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/F348AB796A84D47D293E1A4CC85A1D3B3A6C2A43.crl
                          rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/F348AB796A84D47D293E1A4CC85A1D3B3A6C2A43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F348AB796A84D47D293E1A4CC85A1D3B3A6C2A43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 08:55:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:94:90:1d:2c:47:f8:3f:84:f2:68:ec:6f:d9:41:a7:5b:e0:77:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F348AB796A84D47D293E1A4CC85A1D3B3A6C2A43
        Validity
            Not Before: May 19 18:11:12 2026 GMT
            Not After : May 18 18:16:12 2027 GMT
        Subject: CN=2E9FDAE5315D732F460060452D4551D85A7691AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7e:75:86:d8:7d:35:d7:87:9d:f4:fa:4d:f2:
                    dd:7c:b2:dc:f7:68:1d:84:59:3d:1d:36:28:27:79:
                    c7:b6:be:8e:05:fa:7f:bd:46:5b:b7:56:e6:9a:c7:
                    f9:83:e7:cd:2c:26:3f:b4:fd:10:d4:22:ea:8f:4b:
                    5e:06:33:21:fd:6a:b3:64:50:73:1d:fc:21:2d:5c:
                    f8:45:a0:cf:17:ef:b0:89:b9:69:eb:ca:b5:3a:f4:
                    25:8e:2f:3c:68:a0:84:09:64:ad:c9:27:6c:85:68:
                    f2:bc:87:6f:12:e4:d6:48:fe:13:da:30:0c:c7:c5:
                    34:bb:8c:53:dd:64:f3:22:c2:47:82:10:39:57:f2:
                    00:86:13:e9:61:af:65:d0:0b:bd:9a:6b:56:71:72:
                    6f:0b:43:df:29:09:5d:e2:f9:3b:d8:f2:d1:f8:1f:
                    5f:57:f2:cc:f1:38:74:61:d3:94:c1:91:1b:b8:8a:
                    60:47:22:ae:04:83:49:a0:a2:b6:09:ae:c8:b1:d3:
                    e0:94:2f:9d:92:49:3e:99:78:7e:9d:6c:3d:ef:26:
                    c2:d0:f2:05:02:95:60:60:4a:60:c3:9c:89:5e:27:
                    8f:59:58:08:2d:ae:30:bd:33:85:58:20:04:b2:4f:
                    94:d3:0f:5c:c7:71:92:05:61:f2:e5:91:e2:91:86:
                    c6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:9F:DA:E5:31:5D:73:2F:46:00:60:45:2D:45:51:D8:5A:76:91:AC
            X509v3 Authority Key Identifier:
                keyid:F3:48:AB:79:6A:84:D4:7D:29:3E:1A:4C:C8:5A:1D:3B:3A:6C:2A:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/F348AB796A84D47D293E1A4CC85A1D3B3A6C2A43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F348AB796A84D47D293E1A4CC85A1D3B3A6C2A43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/34352e3233382e3234302e302f32322d3236203d3e20323638333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:79:12:f6:85:7c:b1:19:a3:94:bf:f1:1f:48:94:aa:51:9c:
         ec:2d:f4:a9:db:4b:44:c6:d0:0b:ea:70:b0:11:f8:c1:80:1a:
         00:bc:74:63:4c:f8:1d:74:b5:42:c7:84:e0:68:ae:dd:ca:23:
         d9:38:3b:ef:94:4f:1d:f7:42:41:cd:ec:8c:7c:a0:2b:f8:e3:
         54:dc:87:81:dd:71:4b:b8:23:6d:b4:36:42:3b:a8:f9:aa:e5:
         45:7b:f2:aa:15:d6:b5:c8:c7:75:26:51:68:1c:58:c3:d1:e4:
         d7:74:6d:90:c1:93:40:d6:a2:d5:42:e0:1d:f0:6f:08:3d:11:
         f3:93:c0:4d:49:57:2b:d7:5e:58:33:b8:b9:72:5a:0e:4e:70:
         9d:20:ad:e3:80:f3:4f:40:c9:e7:88:57:0f:5f:6b:42:d1:14:
         eb:91:38:12:8c:0f:54:50:9e:a6:10:49:68:8b:bb:4a:68:81:
         0d:b7:9d:00:2d:c7:f9:ee:2c:d2:32:8e:87:95:ff:45:f0:e5:
         88:8f:5e:b4:38:0f:df:f7:d1:6b:d2:e0:4d:eb:3a:ab:ff:cf:
         e6:cd:b8:dc:40:2d:f8:e7:93:d1:4c:8c:f1:0f:02:68:98:97:
         21:70:d5:39:df:1f:39:f6:09:57:85:6f:53:94:c9:f2:2e:53:
         02:2d:aa:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:25:23 2026 by rpki-client