Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/34352e3137322e3133312e302f32342d3234203d3e20323638373730.roa
File:                     34352e3137322e3133312e302f32342d3234203d3e20323638373730.roa (raw, json)
Hash identifier:          yx7ZCu9qBncrjOBv/soRYJ0oly2hQDA/UWnhkdJHMTU=
Subject key identifier:   03:39:9B:41:C4:DE:E7:35:EC:0F:EB:BF:07:DC:62:21:BB:DC:E8:FE
Certificate issuer:       /CN=AA3B743EC7E4F08EBA8C201668D2374C737F8DA7
Certificate serial:       62CE2B04713944CDECD7C1CF8F45F393D75D34E6
Authority key identifier: AA:3B:74:3E:C7:E4:F0:8E:BA:8C:20:16:68:D2:37:4C:73:7F:8D:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/34352e3137322e3133312e302f32342d3234203d3e20323638373730.roa
Signing time:             Thu 21 May 2026 22:41:22 +0000
ROA not before:           Thu 21 May 2026 22:36:22 +0000
ROA not after:            Thu 20 May 2027 22:41:22 +0000
asID:                     268770
IP address blocks:        45.172.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.crl
                          rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 05:20:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ce:2b:04:71:39:44:cd:ec:d7:c1:cf:8f:45:f3:93:d7:5d:34:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA3B743EC7E4F08EBA8C201668D2374C737F8DA7
        Validity
            Not Before: May 21 22:36:22 2026 GMT
            Not After : May 20 22:41:22 2027 GMT
        Subject: CN=03399B41C4DEE735EC0FEBBF07DC6221BBDCE8FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:aa:2a:94:53:4c:5d:21:be:96:2b:03:16:65:
                    24:ab:0b:dc:f0:79:ba:e8:bb:7e:f4:72:cb:38:3e:
                    12:ae:fa:73:c4:2a:6b:ee:e2:1b:64:2e:05:82:97:
                    fc:55:4c:d7:5a:13:ab:db:e8:57:58:e4:14:36:b9:
                    e6:6d:36:46:bf:97:c9:6b:48:26:9a:e3:94:ba:4a:
                    94:ed:6d:0d:3f:1c:91:94:57:f2:40:3f:82:3a:b8:
                    f2:44:19:5a:75:6c:73:1c:68:7a:0d:12:4f:de:a6:
                    f1:f1:1f:c1:16:86:b8:9a:77:e6:84:be:05:cd:d2:
                    7b:2b:03:a8:3d:59:0d:d8:e0:cf:f7:df:c1:1c:ad:
                    a4:0c:53:8c:bf:7d:d5:fb:23:47:35:f5:e2:be:32:
                    d5:44:22:5a:b6:5c:55:cb:08:a4:b6:b3:88:06:c7:
                    8b:61:9a:a4:67:aa:a4:04:ef:d8:1b:5f:3b:27:b5:
                    be:ec:0e:4f:2d:97:21:b2:89:75:d7:7c:37:e9:75:
                    5f:7f:7b:2a:52:44:16:51:72:45:b1:21:76:4e:d0:
                    e5:66:c6:e0:f9:08:cc:9e:b8:08:57:2f:07:1b:20:
                    56:d8:ea:24:c3:97:44:74:66:39:e9:4f:2c:03:55:
                    8c:54:80:a0:55:ac:e2:e8:55:27:f9:c0:0a:e0:92:
                    fc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:39:9B:41:C4:DE:E7:35:EC:0F:EB:BF:07:DC:62:21:BB:DC:E8:FE
            X509v3 Authority Key Identifier:
                keyid:AA:3B:74:3E:C7:E4:F0:8E:BA:8C:20:16:68:D2:37:4C:73:7F:8D:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/34352e3137322e3133312e302f32342d3234203d3e20323638373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:c7:0d:b3:62:dd:26:5a:45:97:7c:e3:31:c6:78:58:37:0c:
         d3:c2:08:e3:5c:0c:83:3e:34:1d:f2:75:a3:bf:70:bd:8f:db:
         99:8e:52:e9:68:2b:4b:a8:5e:0f:8e:3a:a1:ce:7a:22:43:23:
         b3:77:a8:11:d0:ac:b5:34:43:c9:d9:5b:5b:e5:3c:02:99:0a:
         f0:40:21:e9:00:90:aa:a5:58:64:b7:50:63:c4:b1:36:c3:a7:
         61:bc:17:46:22:ae:7e:01:c7:c1:23:fb:41:11:0f:41:b5:f6:
         52:74:aa:cb:9c:1b:9a:b6:77:9e:e5:af:90:81:4f:cf:78:61:
         78:8a:15:82:b0:8c:32:23:54:be:87:7f:bb:99:8b:01:26:4e:
         9a:c4:9f:51:4b:fc:8e:da:a0:aa:21:7f:a2:1d:d3:e5:b3:00:
         d1:7c:7d:fc:04:35:fc:c6:45:b4:b2:11:3f:c7:b0:4b:01:df:
         f9:db:34:7b:01:ce:96:13:d6:99:83:d9:26:db:1f:7c:59:13:
         50:dc:4a:3e:60:41:df:cc:ac:a9:31:b1:97:5c:70:50:c9:44:
         df:25:bf:0c:40:b1:89:3f:22:14:05:8f:e2:3b:ef:1f:7b:b2:
         f2:2e:ad:98:f7:fb:d0:09:c7:71:ba:1f:eb:4e:dc:da:9a:9d:
         2c:b0:61:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 20:15:36 2026 by rpki-client