Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/34352e3137312e3132332e302f32342d3234203d3e20323638383736.roa
File:                     34352e3137312e3132332e302f32342d3234203d3e20323638383736.roa (raw, json)
Hash identifier:          NUnhDfcXv6bMSNduF3R1zDAYFppDc07E+3l9bbG91x8=
Subject key identifier:   F7:A4:65:58:D1:5F:B6:36:F2:A3:E8:4C:DA:26:CA:5D:EA:32:1D:AD
Certificate issuer:       /CN=ABF43A2BFC57C3BE105182E1FDDD779364A5A2CA
Certificate serial:       0754BA9C52DE9DC83FBB04C04A9B3B7D8942C51F
Authority key identifier: AB:F4:3A:2B:FC:57:C3:BE:10:51:82:E1:FD:DD:77:93:64:A5:A2:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABF43A2BFC57C3BE105182E1FDDD779364A5A2CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/34352e3137312e3132332e302f32342d3234203d3e20323638383736.roa
Signing time:             Thu 18 Jun 2026 14:31:38 +0000
ROA not before:           Thu 18 Jun 2026 14:26:38 +0000
ROA not after:            Thu 17 Jun 2027 14:31:38 +0000
asID:                     268876
IP address blocks:        45.171.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/ABF43A2BFC57C3BE105182E1FDDD779364A5A2CA.crl
                          rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/ABF43A2BFC57C3BE105182E1FDDD779364A5A2CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABF43A2BFC57C3BE105182E1FDDD779364A5A2CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 06:43:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:54:ba:9c:52:de:9d:c8:3f:bb:04:c0:4a:9b:3b:7d:89:42:c5:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABF43A2BFC57C3BE105182E1FDDD779364A5A2CA
        Validity
            Not Before: Jun 18 14:26:38 2026 GMT
            Not After : Jun 17 14:31:38 2027 GMT
        Subject: CN=F7A46558D15FB636F2A3E84CDA26CA5DEA321DAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:97:b8:ac:e6:b5:22:48:69:a4:25:fd:25:21:
                    22:16:62:b3:d7:2c:35:3e:e2:10:f3:fb:4b:c6:f2:
                    1c:46:56:69:b3:5d:1a:02:0a:80:81:62:9f:a8:74:
                    bd:47:10:1b:6e:92:48:fd:32:32:30:d0:12:d2:89:
                    d5:26:4c:df:a9:de:24:22:47:87:66:ca:81:04:bc:
                    7a:d4:02:43:f1:75:50:8f:92:e6:6b:35:99:4b:b3:
                    1a:95:d6:f0:c6:c7:14:e9:73:bc:61:b1:0a:75:e7:
                    4e:29:58:6c:7e:d0:d9:f3:3d:67:53:ad:e5:b8:97:
                    aa:65:ac:86:ca:9e:f4:cb:72:14:c9:25:19:03:a4:
                    91:49:d2:8f:39:1d:b0:52:60:65:eb:f0:6e:60:58:
                    a5:cc:e6:cc:36:f2:e8:38:26:bd:18:8a:1e:91:63:
                    f2:3c:c6:cf:85:06:38:79:ac:c2:b0:8a:a3:3f:a2:
                    4d:c2:96:5c:f1:08:62:cb:c5:61:19:e6:82:a9:f7:
                    c0:1e:40:77:d0:b5:f0:d7:ed:92:df:eb:2e:98:fd:
                    49:51:7b:78:44:dd:c4:bb:78:ac:59:2a:e5:31:82:
                    2d:c6:35:84:98:a5:da:8a:58:e6:7d:9f:39:c5:c7:
                    c5:88:2d:d3:db:8b:46:30:94:06:0b:21:f9:66:99:
                    d7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A4:65:58:D1:5F:B6:36:F2:A3:E8:4C:DA:26:CA:5D:EA:32:1D:AD
            X509v3 Authority Key Identifier:
                keyid:AB:F4:3A:2B:FC:57:C3:BE:10:51:82:E1:FD:DD:77:93:64:A5:A2:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/ABF43A2BFC57C3BE105182E1FDDD779364A5A2CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABF43A2BFC57C3BE105182E1FDDD779364A5A2CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/34352e3137312e3132332e302f32342d3234203d3e20323638383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:cf:0f:77:8f:ac:1b:12:2b:00:95:44:4b:e3:a5:71:7e:14:
         d9:b2:c9:f0:37:ec:35:bd:c2:23:3b:a8:ab:ec:d8:ad:b6:16:
         94:75:c9:c5:70:ae:81:b5:ba:f9:09:87:63:ec:31:4b:12:df:
         3b:e0:1d:77:67:72:49:10:a6:52:66:6b:a9:0f:ae:cf:29:0c:
         40:1b:d6:35:fb:b1:ca:cd:32:bf:fa:e5:bd:70:f2:39:f8:66:
         2a:0e:dc:dd:f6:72:09:8e:a9:d4:88:fb:3a:a2:66:82:f2:38:
         a9:eb:36:7b:9a:02:18:d8:4d:80:18:49:c7:ee:e3:f3:f3:12:
         6c:ca:97:46:df:51:84:70:e0:af:71:aa:81:40:0b:fa:fe:06:
         b0:39:44:f4:b1:52:c8:13:16:6b:c6:ea:ed:eb:a2:45:de:07:
         95:c5:27:28:4a:3e:77:be:2c:fb:e4:d7:92:a0:97:15:ee:44:
         3c:95:79:ab:32:51:27:cb:ed:e8:f6:1b:83:fa:a8:f3:c0:3c:
         11:59:2b:15:20:6f:9e:fe:e1:6a:b0:46:18:84:b8:39:85:24:
         05:b4:b3:cc:57:84:1c:89:76:d3:b0:ff:b2:fe:1a:5e:15:d2:
         bf:7e:58:39:cd:61:e2:ec:de:14:71:0e:8c:d3:57:17:4f:dd:
         3d:4b:15:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 20:15:32 2026 by rpki-client