Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231322e302f32332d3233203d3e20323637333733.roa
File:                     34352e3233342e3231322e302f32332d3233203d3e20323637333733.roa (raw, json)
Hash identifier:          lnXQHPKU/X7ASQFPj2LdVXj2+mFZ9dfeS5ybOkm2zfE=
Subject key identifier:   81:B0:25:87:A2:7A:51:2A:72:76:39:7C:22:11:3A:CF:CB:AC:AC:A4
Certificate issuer:       /CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
Certificate serial:       1AA5B39A78C091E2BCEF78AAA84DB5690474F672
Authority key identifier: 67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231322e302f32332d3233203d3e20323637333733.roa
Signing time:             Thu 26 Mar 2026 19:33:11 +0000
ROA not before:           Thu 26 Mar 2026 19:28:11 +0000
ROA not after:            Thu 25 Mar 2027 19:33:11 +0000
asID:                     267373
IP address blocks:        45.234.212.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl
                          rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 21:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:a5:b3:9a:78:c0:91:e2:bc:ef:78:aa:a8:4d:b5:69:04:74:f6:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
        Validity
            Not Before: Mar 26 19:28:11 2026 GMT
            Not After : Mar 25 19:33:11 2027 GMT
        Subject: CN=81B02587A27A512A7276397C22113ACFCBACACA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e4:a4:a0:95:f2:24:fb:5a:7a:ac:a1:f4:2f:
                    f5:02:8d:f5:d2:2a:04:41:9e:ac:db:65:b8:f0:22:
                    c9:3b:22:ca:ad:1b:54:cc:21:55:12:e4:34:a3:e2:
                    67:09:9d:4d:bd:39:59:82:dc:35:5d:7c:05:21:2e:
                    01:d9:7b:80:3b:8e:d3:01:5a:1e:ee:4b:ce:cf:a7:
                    51:3a:cd:58:da:7a:e5:ff:87:8a:34:d5:14:27:59:
                    f8:ec:9a:a1:0b:b8:0b:42:2b:09:26:35:75:89:f2:
                    ab:ff:cb:a8:e1:50:2e:55:a4:3d:68:35:35:05:a5:
                    67:02:86:dd:9b:4b:75:57:de:77:d9:12:3d:d9:9c:
                    dd:3f:19:06:6e:82:d0:0c:da:26:fb:02:77:18:3a:
                    20:86:10:39:b1:b2:a6:12:31:bf:16:18:68:9c:e0:
                    e7:b5:b1:94:65:a5:9c:2a:a3:f3:5c:e8:3d:8e:00:
                    19:32:86:61:d9:75:da:44:f2:e4:2c:6f:e9:aa:08:
                    3b:40:c4:56:38:25:cd:d5:fe:7b:00:22:68:65:35:
                    d5:7c:ec:09:f2:69:10:d8:65:45:16:ba:97:ab:89:
                    b5:75:1e:47:5c:0b:ac:bf:58:e8:1d:6d:02:b1:84:
                    08:fe:12:6d:38:6f:78:e5:17:5b:c0:95:26:3e:aa:
                    1a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B0:25:87:A2:7A:51:2A:72:76:39:7C:22:11:3A:CF:CB:AC:AC:A4
            X509v3 Authority Key Identifier:
                keyid:67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231322e302f32332d3233203d3e20323637333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:ae:4c:1f:fe:54:f0:d2:bb:fd:12:25:4f:ef:e0:03:b3:4f:
         4c:92:db:48:0c:6b:97:de:77:59:f6:14:98:21:79:c3:0e:b2:
         e2:db:69:14:ff:1a:06:a7:d9:e4:42:03:a5:da:14:50:8a:79:
         96:2c:23:83:3a:a6:11:10:7f:a7:b9:e0:d0:5c:43:0c:07:36:
         b6:45:c8:9a:75:0c:c8:00:54:b6:12:53:f5:34:29:67:9c:c6:
         87:1b:ab:a1:d2:d1:b9:7c:85:e3:78:9d:86:ab:d4:53:04:96:
         f3:d8:9c:79:b2:9c:f5:0f:30:a0:d5:bb:4b:01:0c:ad:09:61:
         54:0f:2f:e2:ad:96:01:29:13:22:c4:8c:36:34:f3:4c:be:a9:
         47:c4:57:68:a1:d3:11:c4:0e:86:52:f4:16:dd:1e:c3:e0:30:
         9b:c4:6b:58:cd:bc:b2:93:10:6f:9a:3c:20:b3:f9:23:2a:a7:
         b9:a4:b9:70:2e:e7:b4:e7:59:a2:04:56:57:f9:45:89:2f:4c:
         c4:63:7d:32:c5:0a:22:5d:40:81:0c:a5:26:62:60:ef:f0:e0:
         05:45:73:c3:4a:bb:82:93:bf:0f:7f:6b:e9:db:9a:a0:85:f2:
         99:ad:d6:04:7d:81:5b:55:43:b6:31:c5:32:ce:ee:b2:c2:47:
         fd:36:7e:00
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGqWzmnjAkeK873iqqE21aQR09nIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjdFMzkwQkUzRTIyMTRDNEZCQkFERDA5MUM1NUVFQkFF
NjcxRDg4MjAeFw0yNjAzMjYxOTI4MTFaFw0yNzAzMjUxOTMzMTFaMDMxMTAvBgNV
BAMTKDgxQjAyNTg3QTI3QTUxMkE3Mjc2Mzk3QzIyMTEzQUNGQ0JBQ0FDQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT5KSglfIk+1p6rKH0L/UCjfXS
KgRBnqzbZbjwIsk7IsqtG1TMIVUS5DSj4mcJnU29OVmC3DVdfAUhLgHZe4A7jtMB
Wh7uS87Pp1E6zVjaeuX/h4o01RQnWfjsmqELuAtCKwkmNXWJ8qv/y6jhUC5VpD1o
NTUFpWcCht2bS3VX3nfZEj3ZnN0/GQZugtAM2ib7AncYOiCGEDmxsqYSMb8WGGic
4Oe1sZRlpZwqo/Nc6D2OABkyhmHZddpE8uQsb+mqCDtAxFY4Jc3V/nsAImhlNdV8
7AnyaRDYZUUWuperibV1HkdcC6y/WOgdbQKxhAj+Em04b3jlF1vAlSY+qhqRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUgbAlh6J6USpydjl8IhE6z8usrKQwHwYDVR0j
BBgwFoAUZ+OQvj4iFMT7ut0JHFXuuuZx2IIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnBQZmZEclFNWHdEaXBYRmFiWEY5M3VuS1VLOXczZmFac3lZTGF1WWpW
d2svMC82N0UzOTBCRTNFMjIxNEM0RkJCQUREMDkxQzU1RUVCQUU2NzFEODgyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY3RTM5MEJFM0UyMjE0QzRG
QkJBREQwOTFDNTVFRUJBRTY3MUQ4ODIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJwUGZmRHJRTVh3RGlwWEZhYlhGOTN1bktVSzl3M2ZhWnN5WUxhdVlqVndrLzAv
MzQzNTJlMzIzMzM0MmUzMjMxMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzczMzM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt6tQwDQYJKoZIhvcNAQELBQADggEBAC+uTB/+
VPDSu/0SJU/v4AOzT0yS20gMa5fed1n2FJghecMOsuLbaRT/Ggan2eRCA6XaFFCK
eZYsI4M6phEQf6e54NBcQwwHNrZFyJp1DMgAVLYSU/U0KWecxocbq6HS0bl8heN4
nYar1FMElvPYnHmynPUPMKDVu0sBDK0JYVQPL+KtlgEpEyLEjDY080y+qUfEV2ih
0xHEDoZS9BbdHsPgMJvEa1jNvLKTEG+aPCCz+SMqp7mkuXAu57TnWaIEVlf5RYkv
TMRjfTLFCiJdQIEMpSZiYO/w4AVFc8NKu4KTvw9/a+nbmqCF8pmt1gR9gVtVQ7Yx
xTLO7rLCR/02fgA=
-----END CERTIFICATE-----
Generated at Fri Mar 27 07:10:33 2026 by rpki-client