Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/34352e3138312e36352e302f32342d3234203d3e20323639313731.roa
File:                     34352e3138312e36352e302f32342d3234203d3e20323639313731.roa (raw, json)
Hash identifier:          wU/Vav/dcejGaIU/GX6jEORCVm/Ya0AmvSQhXtxjnBU=
Subject key identifier:   48:B5:11:53:47:04:DD:C9:B7:47:84:18:6C:F8:88:53:B1:39:4F:7D
Certificate issuer:       /CN=361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C
Certificate serial:       558DCE19E6F0F14EE894FF71C862EF0DC61D7850
Authority key identifier: 36:1C:4B:6D:73:C6:56:15:DB:AF:B3:E6:05:DF:B7:72:0F:9D:2C:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/34352e3138312e36352e302f32342d3234203d3e20323639313731.roa
Signing time:             Mon 27 Jul 2026 19:35:47 +0000
ROA not before:           Mon 27 Jul 2026 19:30:47 +0000
ROA not after:            Mon 26 Jul 2027 19:35:47 +0000
asID:                     269171
IP address blocks:        45.181.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.crl
                          rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 14:34:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:8d:ce:19:e6:f0:f1:4e:e8:94:ff:71:c8:62:ef:0d:c6:1d:78:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C
        Validity
            Not Before: Jul 27 19:30:47 2026 GMT
            Not After : Jul 26 19:35:47 2027 GMT
        Subject: CN=48B511534704DDC9B74784186CF88853B1394F7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0d:b8:f3:a5:8a:1b:f3:86:7f:a4:f7:d7:b5:
                    4d:33:4a:91:b9:71:cc:d5:26:54:d3:85:7b:15:9f:
                    a5:83:e0:0a:0d:c9:53:a3:f4:38:4e:44:d8:0c:1c:
                    b0:4d:bb:ae:73:b3:fd:dc:99:dd:57:e5:0e:ca:dd:
                    8a:1f:c9:6b:ce:92:d4:a0:0d:63:13:13:15:da:15:
                    ff:c2:4a:7b:c5:32:0b:12:f4:e9:c2:bf:aa:34:9d:
                    de:f6:2a:f1:d7:54:70:00:27:fb:07:41:84:ad:8a:
                    0d:41:84:57:0f:48:d0:ce:d7:a7:30:85:2e:fb:bd:
                    41:38:d9:35:27:7b:f9:b2:2c:e1:5d:a1:2b:5f:34:
                    f8:e4:66:57:48:8a:1d:b8:81:f0:3f:78:5f:fd:6e:
                    c2:9f:c6:76:fc:92:4f:76:61:dc:1d:5a:98:56:83:
                    81:64:ee:07:fb:f2:05:cc:66:88:c8:99:60:a0:38:
                    0c:8d:27:50:91:e4:89:3b:c5:89:89:ee:87:92:0d:
                    40:77:fb:62:b9:89:81:00:b0:8c:bb:2e:a2:7b:01:
                    b2:12:3d:af:89:05:f5:00:cb:1b:39:ac:d0:1c:2e:
                    25:62:c0:2e:31:2a:15:d7:a2:4e:08:bf:a2:c6:ba:
                    dc:67:27:f5:b7:e9:dc:cc:09:9d:ec:bd:c9:3f:71:
                    11:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B5:11:53:47:04:DD:C9:B7:47:84:18:6C:F8:88:53:B1:39:4F:7D
            X509v3 Authority Key Identifier:
                keyid:36:1C:4B:6D:73:C6:56:15:DB:AF:B3:E6:05:DF:B7:72:0F:9D:2C:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/34352e3138312e36352e302f32342d3234203d3e20323639313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:47:f0:47:6e:5f:77:22:c0:27:5f:64:6a:ab:ee:0b:77:ef:
         79:5c:87:ec:40:e8:0f:11:94:00:02:c2:0c:12:62:32:97:c5:
         7a:c3:04:89:66:17:b9:cd:67:0d:d3:85:23:f2:e4:b5:d9:d5:
         90:bb:e6:56:77:b8:bd:f2:ea:80:a7:91:e7:33:a0:15:c4:7a:
         03:f3:8a:07:5a:e7:0e:78:7e:c2:62:86:08:96:4c:ba:ed:31:
         99:f9:02:04:47:6a:26:b1:36:1a:dc:d5:6a:39:73:51:e1:60:
         8d:85:cc:bc:28:f3:d4:de:89:8f:7b:31:a9:64:88:cd:8a:d8:
         2c:93:cb:fb:61:e0:51:0c:92:7d:b5:63:f5:60:64:3b:27:63:
         34:b3:b9:20:86:ff:90:65:c4:b1:10:02:68:8d:7d:bc:59:30:
         7a:83:d3:4e:ac:8e:77:e6:cb:de:2b:11:c5:7d:7e:61:b0:64:
         83:38:e3:e7:76:1b:a1:24:c8:ac:b5:55:83:fa:26:da:98:65:
         1f:0b:81:e3:73:d3:19:f6:c3:5b:00:bd:c0:73:0a:14:35:b7:
         2d:2d:71:c9:78:05:f7:e9:e5:fd:73:d8:88:77:64:8e:7c:e8:
         e5:8c:cf:17:c4:8e:90:f2:52:49:fe:93:31:db:9c:2c:86:71:
         4b:35:2f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 00:22:28 2026 by rpki-client