Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/34352e3137312e3132322e302f32342d3234203d3e20323638383736.roa
File:                     34352e3137312e3132322e302f32342d3234203d3e20323638383736.roa (raw, json)
Hash identifier:          fVbvSOSR9gOjY1Ab0CF0sCA/VpcV4BfkefPP9voawng=
Subject key identifier:   8A:E3:27:BB:95:E0:3F:77:5E:52:C9:7D:9E:6D:B6:5C:BA:E3:E2:4D
Certificate issuer:       /CN=ABF43A2BFC57C3BE105182E1FDDD779364A5A2CA
Certificate serial:       5EEB85195C90E47173E96DB7F5E616188DB1580C
Authority key identifier: AB:F4:3A:2B:FC:57:C3:BE:10:51:82:E1:FD:DD:77:93:64:A5:A2:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABF43A2BFC57C3BE105182E1FDDD779364A5A2CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/34352e3137312e3132322e302f32342d3234203d3e20323638383736.roa
Signing time:             Thu 18 Jun 2026 14:31:38 +0000
ROA not before:           Thu 18 Jun 2026 14:26:38 +0000
ROA not after:            Thu 17 Jun 2027 14:31:38 +0000
asID:                     268876
IP address blocks:        45.171.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/ABF43A2BFC57C3BE105182E1FDDD779364A5A2CA.crl
                          rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/ABF43A2BFC57C3BE105182E1FDDD779364A5A2CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABF43A2BFC57C3BE105182E1FDDD779364A5A2CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 06:43:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:eb:85:19:5c:90:e4:71:73:e9:6d:b7:f5:e6:16:18:8d:b1:58:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABF43A2BFC57C3BE105182E1FDDD779364A5A2CA
        Validity
            Not Before: Jun 18 14:26:38 2026 GMT
            Not After : Jun 17 14:31:38 2027 GMT
        Subject: CN=8AE327BB95E03F775E52C97D9E6DB65CBAE3E24D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e6:bf:0f:ba:cf:42:fb:2e:be:bc:17:b2:5b:
                    05:11:e1:be:18:1d:47:ea:cd:33:fb:97:8a:d9:1d:
                    42:44:7d:e6:71:da:08:42:9d:f5:c2:fe:8f:69:1b:
                    49:9f:3b:a9:ef:7a:ae:9e:d1:89:c6:d9:ed:98:b8:
                    2b:0f:76:ea:e9:93:1a:12:ad:42:81:e1:78:a4:99:
                    37:88:04:27:bc:d4:e5:51:0c:52:fb:6f:da:a8:94:
                    f3:a6:fb:a9:2e:2d:9b:4c:c6:0e:f8:a5:30:aa:61:
                    b2:29:50:e0:ab:79:85:54:46:32:c5:6f:6d:1c:02:
                    de:28:01:da:48:cf:f0:ca:4b:a1:1d:d0:5f:c4:45:
                    9d:83:6c:41:09:7b:e8:65:07:f9:4e:f6:b3:60:95:
                    3f:8f:df:88:37:4e:f8:6d:6f:5c:00:f9:c2:09:b5:
                    87:c2:5c:0b:3c:32:96:07:57:43:4d:ac:5a:39:6d:
                    5a:f6:90:b5:36:d0:a7:6e:90:95:e3:6e:dd:62:58:
                    04:ac:e6:49:48:03:22:9a:1b:b2:09:e1:0d:71:41:
                    78:4a:9a:57:78:43:ba:ea:51:91:d5:78:23:e1:42:
                    1b:9e:3c:82:d3:b2:af:24:5c:e8:e1:84:fb:3b:b6:
                    aa:73:f0:60:76:c0:0a:c9:0b:71:c1:e3:78:c0:dd:
                    b6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E3:27:BB:95:E0:3F:77:5E:52:C9:7D:9E:6D:B6:5C:BA:E3:E2:4D
            X509v3 Authority Key Identifier:
                keyid:AB:F4:3A:2B:FC:57:C3:BE:10:51:82:E1:FD:DD:77:93:64:A5:A2:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/ABF43A2BFC57C3BE105182E1FDDD779364A5A2CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABF43A2BFC57C3BE105182E1FDDD779364A5A2CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/34352e3137312e3132322e302f32342d3234203d3e20323638383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:14:75:d8:e1:e6:4b:af:c1:3c:d0:a2:ca:83:76:de:45:cc:
         23:bf:ac:88:2f:54:50:fe:55:76:d3:c3:0e:2f:33:ac:72:be:
         64:87:80:50:f3:57:77:45:56:1a:31:b3:c5:08:98:bb:18:d5:
         5a:4d:c3:ae:bc:51:86:ea:d1:38:a9:aa:1b:75:7c:2f:b8:d5:
         a5:6f:bb:a1:0d:e4:00:12:b2:b7:e3:4e:91:4d:c9:8b:cc:40:
         06:b7:a1:50:fd:24:ea:dd:02:c2:32:fe:18:41:8f:6d:76:5b:
         cb:63:d8:2d:87:95:55:af:d1:41:d8:5f:d2:90:85:c5:29:aa:
         10:83:54:39:a7:88:67:3a:7e:fd:27:0a:8e:f4:86:74:a4:e7:
         bb:63:ca:98:22:c1:ca:3f:03:bb:2c:88:b6:20:94:ac:5a:69:
         2a:c1:b5:7b:7f:02:08:52:09:f6:82:3c:a5:c9:ec:8e:e4:f2:
         0a:49:c7:47:33:c3:02:33:e3:59:b2:46:a0:b6:7e:da:e3:17:
         72:24:f6:34:85:8b:6f:78:fe:63:7a:7e:9e:49:76:27:b7:55:
         49:6d:1a:1c:94:20:a4:c0:6e:39:ff:bc:08:13:46:84:f3:1a:
         0c:6e:01:87:c0:f6:58:6d:d1:16:88:bf:0c:9e:ef:54:71:10:
         6f:0b:e1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:08:52 2026 by rpki-client