Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HBifz2PrzRuD4GfUmUzJw1mohZowWLcuKpaooi8QxkV2/0/34352e3138382e3137362e302f32322d3332203d3e20323639353335.roa
File:                     34352e3138382e3137362e302f32322d3332203d3e20323639353335.roa (raw, json)
Hash identifier:          tYPdIZHhbE6qDdunLOUQKurSLmmKF892uSdWFJMlL/4=
Subject key identifier:   49:77:36:FF:8B:F6:E9:6A:90:47:24:E4:48:25:32:11:B0:B1:68:A1
Certificate issuer:       /CN=ED21D10C23C2376429733090A859B9263A7A9ADC
Certificate serial:       4AE43C342CB4DAF6654DE686B186CFE7E42156E1
Authority key identifier: ED:21:D1:0C:23:C2:37:64:29:73:30:90:A8:59:B9:26:3A:7A:9A:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED21D10C23C2376429733090A859B9263A7A9ADC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HBifz2PrzRuD4GfUmUzJw1mohZowWLcuKpaooi8QxkV2/0/34352e3138382e3137362e302f32322d3332203d3e20323639353335.roa
Signing time:             Wed 17 Jun 2026 18:02:30 +0000
ROA not before:           Wed 17 Jun 2026 17:57:30 +0000
ROA not after:            Wed 16 Jun 2027 18:02:30 +0000
asID:                     269535
IP address blocks:        45.188.176.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HBifz2PrzRuD4GfUmUzJw1mohZowWLcuKpaooi8QxkV2/0/ED21D10C23C2376429733090A859B9263A7A9ADC.crl
                          rsync://rpki-repo.registro.br/repo/HBifz2PrzRuD4GfUmUzJw1mohZowWLcuKpaooi8QxkV2/0/ED21D10C23C2376429733090A859B9263A7A9ADC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED21D10C23C2376429733090A859B9263A7A9ADC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 27 Jun 2026 22:35:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e4:3c:34:2c:b4:da:f6:65:4d:e6:86:b1:86:cf:e7:e4:21:56:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED21D10C23C2376429733090A859B9263A7A9ADC
        Validity
            Not Before: Jun 17 17:57:30 2026 GMT
            Not After : Jun 16 18:02:30 2027 GMT
        Subject: CN=497736FF8BF6E96A904724E448253211B0B168A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:78:49:46:b8:ab:a1:23:e5:2a:ac:92:6d:e9:
                    48:7e:69:69:af:3d:a0:57:5c:87:22:37:d5:1d:56:
                    2c:60:12:3a:8d:2c:42:20:f2:6e:fb:da:9b:63:ea:
                    6c:a2:ea:c3:e0:0d:09:54:71:16:8f:13:0b:81:52:
                    a2:2a:de:1c:86:57:82:97:e7:aa:e6:19:a0:c1:da:
                    74:82:3c:19:bb:8d:02:bc:6b:f9:eb:fb:5a:b9:5a:
                    14:9d:18:34:3f:24:90:76:e1:f7:64:53:d5:13:c3:
                    9d:54:b4:ab:ff:b3:2e:27:84:16:2b:65:d4:57:80:
                    f3:1b:60:31:03:01:82:90:02:5b:bc:fa:7f:b6:9c:
                    97:ae:42:b8:53:fc:68:1e:e1:fb:96:10:31:d6:1d:
                    7a:c1:d2:af:86:09:82:c9:94:9a:fc:ff:89:08:56:
                    e8:f7:37:c4:f7:f6:e3:89:7f:b7:f9:8b:27:f9:4b:
                    bb:66:a1:cd:3c:e3:74:90:c8:77:ae:03:1f:ed:94:
                    84:1f:ce:70:a0:8b:51:dc:d7:4b:49:93:01:25:b4:
                    e4:7b:5a:e1:e9:d5:82:ae:f9:7d:f1:8b:89:72:ba:
                    a3:7b:d0:9d:9c:d6:68:47:4d:a1:6a:ed:c2:8d:f1:
                    74:52:15:3e:5b:11:66:d3:d1:e1:df:f2:40:86:a8:
                    80:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:77:36:FF:8B:F6:E9:6A:90:47:24:E4:48:25:32:11:B0:B1:68:A1
            X509v3 Authority Key Identifier:
                keyid:ED:21:D1:0C:23:C2:37:64:29:73:30:90:A8:59:B9:26:3A:7A:9A:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HBifz2PrzRuD4GfUmUzJw1mohZowWLcuKpaooi8QxkV2/0/ED21D10C23C2376429733090A859B9263A7A9ADC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED21D10C23C2376429733090A859B9263A7A9ADC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HBifz2PrzRuD4GfUmUzJw1mohZowWLcuKpaooi8QxkV2/0/34352e3138382e3137362e302f32322d3332203d3e20323639353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:af:20:b6:f1:8f:c5:53:ba:f7:e9:22:b3:36:cf:f1:6e:9b:
         83:c4:89:36:75:81:18:e2:2e:1b:58:8e:87:5d:95:6e:0c:32:
         a9:dc:38:9c:3a:90:c8:83:43:68:5a:86:ff:90:fb:8b:0b:fa:
         cb:43:60:a9:6f:c8:a5:32:4c:25:d7:af:b1:93:aa:d2:15:a2:
         e3:8b:79:e0:03:42:ba:66:db:e8:fc:b4:c6:0a:0c:3e:c0:e1:
         3d:50:cd:84:97:e9:71:c6:67:8e:55:5c:59:33:39:36:16:48:
         e9:a9:50:bd:68:cc:86:9e:f5:14:51:8a:90:26:a3:47:4f:07:
         21:0b:9e:5e:97:0b:63:8e:cd:28:b0:9c:32:ac:e5:96:37:80:
         47:dc:8e:66:66:39:ed:2f:79:ab:e2:6e:7f:4b:53:3b:3b:7d:
         41:76:e1:f6:d0:4a:21:b0:31:fc:13:2f:c1:3a:f8:1b:5d:f6:
         8a:f8:64:dd:c2:b2:f3:5b:4c:9a:17:f0:99:a6:10:24:0e:9f:
         cc:50:4f:dc:d7:4d:f0:61:ca:57:75:51:ed:f6:79:11:b6:6c:
         cd:01:01:69:97:c6:f5:4a:1c:cb:85:e7:db:ca:45:ec:30:d1:
         fb:8f:6b:4b:14:cc:89:a2:92:09:c8:dc:c9:97:ca:e2:52:a0:
         c2:49:ca:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:30:58 2026 by rpki-client