Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/34352e3138362e3232392e302f32342d3234203d3e20323639343339.roa
File:                     34352e3138362e3232392e302f32342d3234203d3e20323639343339.roa (raw, json)
Hash identifier:          RbzhEAf5AwajxzQdm/UqYnRSK98Ts5W05r4T4Z2cXZ8=
Subject key identifier:   70:0F:A2:F4:19:26:98:73:23:4D:91:F1:E6:37:D4:1C:E8:6F:FB:96
Certificate issuer:       /CN=BEB7ABC8A5BB5D6CB2F64389AF775B0A36A4C308
Certificate serial:       475C59E36C974FA57BC4F6F7D3503E4F591CA5D3
Authority key identifier: BE:B7:AB:C8:A5:BB:5D:6C:B2:F6:43:89:AF:77:5B:0A:36:A4:C3:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEB7ABC8A5BB5D6CB2F64389AF775B0A36A4C308.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/34352e3138362e3232392e302f32342d3234203d3e20323639343339.roa
Signing time:             Sat 20 Jun 2026 16:31:48 +0000
ROA not before:           Sat 20 Jun 2026 16:26:48 +0000
ROA not after:            Sat 19 Jun 2027 16:31:48 +0000
asID:                     269439
IP address blocks:        45.186.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/BEB7ABC8A5BB5D6CB2F64389AF775B0A36A4C308.crl
                          rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/BEB7ABC8A5BB5D6CB2F64389AF775B0A36A4C308.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEB7ABC8A5BB5D6CB2F64389AF775B0A36A4C308.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 30 Jun 2026 01:11:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:5c:59:e3:6c:97:4f:a5:7b:c4:f6:f7:d3:50:3e:4f:59:1c:a5:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEB7ABC8A5BB5D6CB2F64389AF775B0A36A4C308
        Validity
            Not Before: Jun 20 16:26:48 2026 GMT
            Not After : Jun 19 16:31:48 2027 GMT
        Subject: CN=700FA2F419269873234D91F1E637D41CE86FFB96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e7:5a:93:05:61:54:c8:50:3a:13:d0:00:d4:
                    e0:19:43:d6:c9:ff:65:09:15:0b:1a:52:aa:53:64:
                    0a:86:d8:ff:06:92:b2:34:fc:68:aa:fe:9d:fb:24:
                    aa:a7:f2:35:92:05:ab:2b:6c:22:35:7f:08:88:ef:
                    87:de:e1:7a:4f:7a:6c:fb:d7:e6:49:a7:21:f0:08:
                    68:1b:e5:09:90:3f:bd:7f:a6:1f:b5:00:da:14:90:
                    aa:c9:5e:1f:92:d3:b6:16:0b:a1:36:3d:31:9c:59:
                    50:14:9d:29:ed:b8:58:88:05:97:ac:ac:ab:09:83:
                    2c:c5:79:8b:0f:06:57:f3:f7:c4:ca:4d:87:71:0c:
                    f2:6b:35:e9:41:22:72:ee:fc:4a:5a:cc:27:03:9b:
                    88:c4:c6:e9:f3:35:af:d8:09:0d:bd:12:1e:d0:df:
                    00:32:4b:82:9e:d8:ed:96:fc:f0:48:f2:1a:87:a2:
                    a2:cf:f5:6e:4f:aa:da:df:76:f2:da:02:b2:a0:42:
                    55:5d:1f:48:97:00:41:2c:b5:18:d1:1d:5c:d8:bd:
                    f0:a0:07:72:20:5d:c2:19:2b:c9:27:3b:41:48:80:
                    8c:69:75:19:d1:b0:b3:c1:b7:89:70:1b:d5:08:9b:
                    58:81:b0:dd:1f:3d:ae:d6:9b:11:53:d2:91:04:2b:
                    b7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:0F:A2:F4:19:26:98:73:23:4D:91:F1:E6:37:D4:1C:E8:6F:FB:96
            X509v3 Authority Key Identifier:
                keyid:BE:B7:AB:C8:A5:BB:5D:6C:B2:F6:43:89:AF:77:5B:0A:36:A4:C3:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/BEB7ABC8A5BB5D6CB2F64389AF775B0A36A4C308.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEB7ABC8A5BB5D6CB2F64389AF775B0A36A4C308.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/34352e3138362e3232392e302f32342d3234203d3e20323639343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:76:62:67:ae:f8:0d:6f:31:09:00:88:8c:a7:bf:92:72:94:
         6b:30:eb:d8:4e:76:b2:34:35:01:04:47:62:c6:2c:0d:7d:c7:
         68:ac:f4:bd:0d:1f:f4:fe:2e:98:c5:0f:9c:0d:62:1e:be:d9:
         31:10:19:57:aa:1f:3d:71:2a:8d:39:31:b7:ad:b1:c9:05:3f:
         7b:d0:60:77:a1:bd:6a:6d:a0:08:6f:62:4e:16:c7:17:06:69:
         25:c0:3a:8e:cb:81:52:fd:40:af:a4:95:ea:0c:f3:95:28:93:
         27:bc:df:9b:cc:21:27:87:51:9b:79:32:8c:69:b7:2a:41:27:
         26:23:14:0d:2e:8b:9c:04:07:dc:a6:bd:a8:6d:08:ff:83:e0:
         4d:0e:62:3c:b5:5a:70:ea:75:b6:e1:44:74:cb:7a:2d:74:ab:
         3f:8a:51:3d:cc:af:b1:29:58:0a:77:5a:b6:b9:aa:bd:81:5b:
         e6:27:44:4c:eb:ff:1a:70:ca:79:fe:44:23:cd:89:44:c8:60:
         a5:a4:49:03:6b:ed:3a:24:5d:ea:67:74:19:b1:e4:db:31:a3:
         81:af:28:85:a4:48:65:69:b5:87:1e:84:b1:fe:ba:3d:b4:8b:
         bf:f1:e7:37:04:fe:46:66:da:fe:9d:1f:da:e8:81:24:af:ac:
         6e:59:48:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:40:05 2026 by rpki-client