Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/34352e3137372e35352e302f32342d3234203d3e20323732343336.roa
File:                     34352e3137372e35352e302f32342d3234203d3e20323732343336.roa (raw, json)
Hash identifier:          dKOsmZa4z9qSIgo8yLYx4RqB1oom+RD/Jq0WtEUcQLs=
Subject key identifier:   0F:E8:D4:14:8D:29:7E:2B:4D:C6:CE:7B:10:5E:B8:B2:8A:4D:23:6B
Certificate issuer:       /CN=25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4
Certificate serial:       36AF111F887AFFFE4FAECAE2251527D612228D18
Authority key identifier: 25:B6:4C:4B:D8:E8:30:CE:14:7F:6E:BC:47:19:9B:EA:E7:E6:3B:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/34352e3137372e35352e302f32342d3234203d3e20323732343336.roa
Signing time:             Tue 24 Mar 2026 00:04:39 +0000
ROA not before:           Mon 23 Mar 2026 23:59:39 +0000
ROA not after:            Tue 23 Mar 2027 00:04:39 +0000
asID:                     272436
IP address blocks:        45.177.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.crl
                          rsync://rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 07:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:af:11:1f:88:7a:ff:fe:4f:ae:ca:e2:25:15:27:d6:12:22:8d:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4
        Validity
            Not Before: Mar 23 23:59:39 2026 GMT
            Not After : Mar 23 00:04:39 2027 GMT
        Subject: CN=0FE8D4148D297E2B4DC6CE7B105EB8B28A4D236B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e0:6a:1c:a0:41:66:5e:a7:c0:3c:c4:90:da:
                    4b:2c:d5:1f:9b:22:f3:a9:be:3d:2d:7d:af:d7:f2:
                    f3:85:9a:b8:fa:7b:b7:86:6e:4a:d8:e0:7b:7c:06:
                    9f:6e:39:81:8c:17:86:42:82:1a:f6:16:36:a7:62:
                    8e:05:6a:36:62:41:80:d2:63:d3:68:2d:77:30:6a:
                    6b:af:aa:11:e1:e0:b6:e9:b7:fa:5b:f8:fc:92:34:
                    d0:cd:54:07:9d:95:25:95:a5:24:b1:eb:4f:99:ee:
                    e4:94:cf:3c:10:34:92:6b:d0:b1:fd:f3:e4:25:5f:
                    40:ed:fa:bf:7e:14:fc:a2:fb:48:3e:02:14:58:c4:
                    28:5c:82:81:31:c5:b0:eb:c6:7a:5a:f6:49:a7:ab:
                    ad:e2:b3:96:69:6a:07:90:ad:a2:c1:44:4d:c2:59:
                    ea:5f:fe:e3:b4:40:45:65:f1:5b:31:73:57:b4:6e:
                    5f:72:88:c2:11:59:48:b2:19:1d:78:e7:b2:72:89:
                    0b:3d:0e:87:b8:75:32:49:42:ee:5c:82:88:ba:2d:
                    74:01:de:fd:60:af:cd:ab:f5:3d:80:c2:6b:2f:58:
                    9f:ff:8b:51:84:95:47:1c:5f:c4:e1:c0:b5:18:c3:
                    39:0d:e6:64:54:4e:cc:13:a5:26:75:f3:4c:c8:9a:
                    d1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E8:D4:14:8D:29:7E:2B:4D:C6:CE:7B:10:5E:B8:B2:8A:4D:23:6B
            X509v3 Authority Key Identifier:
                keyid:25:B6:4C:4B:D8:E8:30:CE:14:7F:6E:BC:47:19:9B:EA:E7:E6:3B:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/34352e3137372e35352e302f32342d3234203d3e20323732343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:16:c5:ba:3c:fe:da:37:f5:2d:71:ed:da:d4:d7:d2:fe:95:
         50:3a:3a:1a:4f:40:f7:af:ff:de:69:fa:f8:79:58:06:fb:03:
         2f:74:63:d7:54:e0:e6:03:af:a4:bd:31:61:f7:7f:75:e2:54:
         83:8a:98:6b:e9:7d:ce:a9:ae:e8:10:0a:f7:2a:95:49:f0:7f:
         3b:eb:59:ef:1d:4b:66:8b:82:7e:5b:50:84:61:b0:6d:08:ac:
         db:bb:75:67:22:ce:61:17:db:f3:8e:b1:24:6c:41:c5:a3:7f:
         36:6f:d7:37:5c:0b:e0:ea:34:5e:20:6d:f9:d7:a9:b3:bc:82:
         0f:d5:82:a1:a2:3c:1b:ac:71:77:df:62:50:ab:c8:50:dc:be:
         cf:f4:8e:21:93:42:a2:cf:3b:26:94:7c:6e:34:d1:c8:e5:65:
         93:30:c9:52:e1:50:38:e5:16:91:34:e4:1b:db:42:ab:47:8b:
         4b:e9:bf:ff:27:45:6d:eb:41:1e:4b:0e:aa:32:38:49:16:ca:
         66:42:89:c4:ee:41:59:b2:34:68:3a:5b:12:12:ff:82:ef:8f:
         52:ed:6f:52:a4:4c:0b:d6:50:08:36:74:a5:4e:53:87:71:1e:
         4d:ad:b7:bf:48:5c:66:54:56:c7:0e:9a:97:62:78:a0:69:fc:
         0c:7b:ae:ba
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNq8RH4h6//5PrsriJRUn1hIijRgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVCNjRDNEJEOEU4MzBDRTE0N0Y2RUJDNDcxOTlCRUFF
N0U2M0JCNDAeFw0yNjAzMjMyMzU5MzlaFw0yNzAzMjMwMDA0MzlaMDMxMTAvBgNV
BAMTKDBGRThENDE0OEQyOTdFMkI0REM2Q0U3QjEwNUVCOEIyOEE0RDIzNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT4GocoEFmXqfAPMSQ2kss1R+b
IvOpvj0tfa/X8vOFmrj6e7eGbkrY4Ht8Bp9uOYGMF4ZCghr2FjanYo4FajZiQYDS
Y9NoLXcwamuvqhHh4Lbpt/pb+PySNNDNVAedlSWVpSSx60+Z7uSUzzwQNJJr0LH9
8+QlX0Dt+r9+FPyi+0g+AhRYxChcgoExxbDrxnpa9kmnq63is5ZpageQraLBRE3C
Wepf/uO0QEVl8Vsxc1e0bl9yiMIRWUiyGR1457JyiQs9Doe4dTJJQu5cgoi6LXQB
3v1gr82r9T2AwmsvWJ//i1GElUccX8ThwLUYwzkN5mRUTswTpSZ180zImtHdAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUD+jUFI0pfitNxs57EF64sopNI2swHwYDVR0j
BBgwFoAUJbZMS9joMM4Uf268Rxmb6ufmO7QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjJDSGVoR1V4cGRNaGhQR2czdXdDNngxNk1kZ3I0QjlpaU44SDZkYWJ4
bksvMC8yNUI2NEM0QkQ4RTgzMENFMTQ3RjZFQkM0NzE5OUJFQUU3RTYzQkI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1QjY0QzRCRDhFODMwQ0Ux
NDdGNkVCQzQ3MTk5QkVBRTdFNjNCQjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzIyQ0hlaEdVeHBkTWhoUEdnM3V3QzZ4MTZNZGdyNEI5aWlOOEg2ZGFieG5LLzAv
MzQzNTJlMzEzNzM3MmUzNTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMy
MzQzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALbE3MA0GCSqGSIb3DQEBCwUAA4IBAQA1FsW6PP7a
N/Utce3a1NfS/pVQOjoaT0D3r//eafr4eVgG+wMvdGPXVODmA6+kvTFh93914lSD
iphr6X3Oqa7oEAr3KpVJ8H8761nvHUtmi4J+W1CEYbBtCKzbu3VnIs5hF9vzjrEk
bEHFo382b9c3XAvg6jReIG3516mzvIIP1YKhojwbrHF332JQq8hQ3L7P9I4hk0Ki
zzsmlHxuNNHI5WWTMMlS4VA45RaRNOQb20KrR4tL6b//J0Vt60EeSw6qMjhJFspm
QonE7kFZsjRoOlsSEv+C749S7W9SpEwL1lAINnSlTlOHcR5Nrbe/SFxmVFbHDpqX
YnigafwMe666
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:49:07 2026 by rpki-client