Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/34352e3138372e3136382e302f32322d3332203d3e20323639343733.roa
File:                     34352e3138372e3136382e302f32322d3332203d3e20323639343733.roa (raw, json)
Hash identifier:          CX7pOtLpQNg7OYVaVQqq/MQO/ujeSsvrTaqHjtogrYs=
Subject key identifier:   5A:13:BB:D5:C7:C7:F0:68:DD:B6:BE:DE:90:0A:55:79:FA:B5:62:8F
Certificate issuer:       /CN=BAA91B8729924B4E8155B81952688BEC004DD0B7
Certificate serial:       2F8ACFC69FADBDA79551FD751D95518FB2BF52D8
Authority key identifier: BA:A9:1B:87:29:92:4B:4E:81:55:B8:19:52:68:8B:EC:00:4D:D0:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/34352e3138372e3136382e302f32322d3332203d3e20323639343733.roa
Signing time:             Wed 12 Aug 2026 20:12:44 +0000
ROA not before:           Wed 12 Aug 2026 20:07:44 +0000
ROA not after:            Wed 11 Aug 2027 20:12:44 +0000
asID:                     269473
IP address blocks:        45.187.168.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.crl
                          rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 09:23:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:8a:cf:c6:9f:ad:bd:a7:95:51:fd:75:1d:95:51:8f:b2:bf:52:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAA91B8729924B4E8155B81952688BEC004DD0B7
        Validity
            Not Before: Aug 12 20:07:44 2026 GMT
            Not After : Aug 11 20:12:44 2027 GMT
        Subject: CN=5A13BBD5C7C7F068DDB6BEDE900A5579FAB5628F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:56:a8:b9:0a:83:69:6f:7f:cd:21:9a:cd:43:
                    01:5a:41:68:4f:df:dd:c7:14:48:21:53:71:2f:bb:
                    77:ed:b4:01:5c:aa:75:92:10:f8:4a:f0:ae:1a:a6:
                    a7:69:5b:55:d4:94:7c:be:61:b7:08:22:82:4d:11:
                    79:4c:2f:5f:c7:d3:e1:12:45:c1:0d:cc:c6:4c:6e:
                    27:ea:97:4b:da:02:6d:a9:f6:66:46:0b:e1:43:77:
                    df:57:67:18:6a:ee:8d:48:bb:8a:77:31:9d:65:68:
                    25:c6:eb:0c:52:6e:2b:95:24:f1:63:90:0d:9b:cb:
                    d9:08:ea:0f:64:2a:f1:ce:3b:e1:b9:a8:8c:4d:2e:
                    93:2e:9a:b7:66:a0:9d:9f:31:77:09:f7:4c:4b:3f:
                    a9:81:6b:59:a9:a2:b6:88:94:54:a8:c4:d0:98:2d:
                    18:1b:95:66:5b:82:22:b7:d4:ac:bf:cf:c1:05:1f:
                    2a:25:99:cb:4e:0f:07:45:1f:13:d7:6d:af:a1:73:
                    a5:9a:b9:c7:f3:8e:51:f4:64:66:1a:44:8c:94:41:
                    50:17:21:3c:c0:90:c1:c6:0a:85:30:14:22:d6:de:
                    0d:0e:0a:b6:84:91:6d:43:74:e1:c9:3b:86:28:3e:
                    09:37:71:f1:c0:2b:db:f7:82:fc:65:b3:81:9f:19:
                    4f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:13:BB:D5:C7:C7:F0:68:DD:B6:BE:DE:90:0A:55:79:FA:B5:62:8F
            X509v3 Authority Key Identifier:
                keyid:BA:A9:1B:87:29:92:4B:4E:81:55:B8:19:52:68:8B:EC:00:4D:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/34352e3138372e3136382e302f32322d3332203d3e20323639343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:da:b5:3d:3f:a9:1b:88:50:8a:53:bc:0b:35:f3:4a:e1:a8:
         0f:d8:19:45:e0:16:18:38:2b:63:27:f4:2c:17:e2:dd:35:f9:
         8b:03:b2:ec:c0:ff:11:73:3f:95:b1:ac:24:50:8f:4c:77:85:
         40:96:ef:7b:08:00:46:6c:26:f8:d9:88:b4:83:23:9e:55:b7:
         9a:9a:61:53:28:76:7e:5e:bb:d1:af:36:58:32:a2:0c:01:8b:
         c6:56:c7:f9:c0:ef:5a:e8:67:07:36:a2:e2:f3:3e:1b:62:b4:
         45:79:27:10:7a:b8:03:c5:43:14:9e:3d:30:b1:63:34:a9:d7:
         08:78:be:e9:e6:f7:68:14:7f:f3:52:ac:37:7a:11:47:34:4d:
         06:6a:ce:54:e8:3b:b0:4a:7d:16:62:f6:a5:15:a6:f6:12:eb:
         f7:bc:70:8c:f4:78:a7:7c:8e:39:78:43:8a:2a:d8:0c:f3:9f:
         ff:a9:0f:1c:0a:d0:69:73:a1:58:63:50:60:b6:23:a5:85:b9:
         42:25:2a:76:1f:88:c1:a8:87:84:44:21:16:6e:45:5b:20:28:
         a1:98:85:60:3b:1e:18:24:fa:1d:f2:f3:f1:d2:08:bf:ec:5c:
         54:70:e3:fe:a0:2d:59:b3:0d:70:a6:34:1d:e8:bd:f8:8b:fc:
         71:c4:9d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 07:36:36 2026 by rpki-client