Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231322e302f32342d3234203d3e20323637333733.roa
File:                     34352e3233342e3231322e302f32342d3234203d3e20323637333733.roa (raw, json)
Hash identifier:          66UTDHyS+o15o1DHofusYW90OVLhm4399N8Tex9s0yQ=
Subject key identifier:   08:09:44:99:7A:F2:10:3F:E2:92:26:99:E9:39:AC:E9:95:C0:85:A7
Certificate issuer:       /CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
Certificate serial:       23C59140AF8CBA5ACB833ECF5CA22033DC8FC500
Authority key identifier: 67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231322e302f32342d3234203d3e20323637333733.roa
Signing time:             Thu 26 Mar 2026 19:33:13 +0000
ROA not before:           Thu 26 Mar 2026 19:28:13 +0000
ROA not after:            Thu 25 Mar 2027 19:33:13 +0000
asID:                     267373
IP address blocks:        45.234.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl
                          rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 21:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c5:91:40:af:8c:ba:5a:cb:83:3e:cf:5c:a2:20:33:dc:8f:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
        Validity
            Not Before: Mar 26 19:28:13 2026 GMT
            Not After : Mar 25 19:33:13 2027 GMT
        Subject: CN=080944997AF2103FE2922699E939ACE995C085A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6d:42:46:2a:b2:9f:c2:91:29:50:f5:f7:b7:
                    42:d0:4c:6f:b8:42:e4:9c:5b:d9:6f:9b:ed:b8:90:
                    ea:11:88:e3:51:13:5e:67:ed:96:c0:e1:aa:4f:f3:
                    c2:d5:35:ec:a1:b8:4b:45:a5:9d:02:f7:d8:37:01:
                    1e:a0:8b:4a:77:2b:1c:17:28:1d:06:f4:18:9c:b1:
                    69:4a:c0:49:d9:01:c9:d6:40:cd:f1:23:47:42:e5:
                    f7:17:2c:7f:ed:b1:05:85:3e:6e:75:df:17:7c:c0:
                    fd:9b:0c:c2:c2:67:b5:d1:66:1b:24:f8:ee:bd:73:
                    89:14:2d:0e:8a:5b:d5:10:dc:5a:da:26:62:4d:73:
                    d9:e0:3a:ae:af:ab:fd:b4:b4:00:e0:e1:64:77:46:
                    a7:44:9a:6d:94:db:fe:d2:9c:7a:37:04:88:3d:86:
                    06:75:7a:76:74:f4:5b:5e:c0:22:c5:af:9c:a6:84:
                    6d:e2:03:9f:f2:18:ba:32:15:e8:a2:df:90:c5:e0:
                    ab:15:9c:31:15:48:b2:aa:81:94:e3:2b:39:15:a5:
                    24:6a:8a:f2:60:0c:ef:87:22:80:a4:6f:e4:74:f2:
                    7d:a4:d6:f5:42:46:8d:da:a1:96:e6:12:8e:6f:99:
                    fe:9b:1e:60:e7:80:1b:f8:5e:10:c7:f9:ef:10:5a:
                    7c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:09:44:99:7A:F2:10:3F:E2:92:26:99:E9:39:AC:E9:95:C0:85:A7
            X509v3 Authority Key Identifier:
                keyid:67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231322e302f32342d3234203d3e20323637333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:51:cf:de:e0:0c:5d:0a:67:b1:44:df:ee:9d:8d:4f:82:3a:
         f7:d1:20:2e:a7:bf:f7:7e:82:4e:02:ec:74:a2:81:f6:d9:a2:
         2a:f5:4c:8d:11:76:e2:0e:6e:0d:2b:39:7a:cf:e3:d2:8b:69:
         02:8e:14:2b:19:c2:45:70:af:54:53:eb:81:f7:bc:28:94:f5:
         ab:7b:16:7d:fc:40:20:95:a4:02:1d:94:cc:cc:a4:93:09:cc:
         d0:34:10:02:09:c8:ad:e7:50:ac:1b:4c:c7:a9:0d:c2:ac:0e:
         41:66:bb:4a:bc:b9:98:c8:8a:93:63:26:a8:38:a8:67:cd:a4:
         28:dd:7b:36:21:f6:c0:f1:70:b0:10:a2:3b:8f:15:ac:f1:e0:
         f5:9c:87:56:5b:af:15:37:d0:5b:31:2a:a0:9b:20:65:98:76:
         a4:6c:9f:ff:d2:62:9c:67:91:d1:82:61:e0:16:d9:59:4b:d2:
         66:36:72:bd:a3:36:41:0f:26:08:e9:c9:27:f8:07:3a:eb:df:
         2d:5a:7e:ab:74:16:81:1b:88:d2:d5:54:05:56:06:f7:c6:c9:
         bb:eb:1e:09:0d:ad:23:c6:18:96:c3:1d:18:1a:8d:1e:3c:b1:
         2d:70:43:d6:94:bd:ed:d4:2e:52:38:a4:f0:da:04:cc:aa:1e:
         c9:ab:b2:73
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUI8WRQK+MulrLgz7PXKIgM9yPxQAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjdFMzkwQkUzRTIyMTRDNEZCQkFERDA5MUM1NUVFQkFF
NjcxRDg4MjAeFw0yNjAzMjYxOTI4MTNaFw0yNzAzMjUxOTMzMTNaMDMxMTAvBgNV
BAMTKDA4MDk0NDk5N0FGMjEwM0ZFMjkyMjY5OUU5MzlBQ0U5OTVDMDg1QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCCbUJGKrKfwpEpUPX3t0LQTG+4
QuScW9lvm+24kOoRiONRE15n7ZbA4apP88LVNeyhuEtFpZ0C99g3AR6gi0p3KxwX
KB0G9BicsWlKwEnZAcnWQM3xI0dC5fcXLH/tsQWFPm513xd8wP2bDMLCZ7XRZhsk
+O69c4kULQ6KW9UQ3FraJmJNc9ngOq6vq/20tADg4WR3RqdEmm2U2/7SnHo3BIg9
hgZ1enZ09FtewCLFr5ymhG3iA5/yGLoyFeii35DF4KsVnDEVSLKqgZTjKzkVpSRq
ivJgDO+HIoCkb+R08n2k1vVCRo3aoZbmEo5vmf6bHmDngBv4XhDH+e8QWnxpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUCAlEmXryED/ikiaZ6Tms6ZXAhacwHwYDVR0j
BBgwFoAUZ+OQvj4iFMT7ut0JHFXuuuZx2IIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnBQZmZEclFNWHdEaXBYRmFiWEY5M3VuS1VLOXczZmFac3lZTGF1WWpW
d2svMC82N0UzOTBCRTNFMjIxNEM0RkJCQUREMDkxQzU1RUVCQUU2NzFEODgyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY3RTM5MEJFM0UyMjE0QzRG
QkJBREQwOTFDNTVFRUJBRTY3MUQ4ODIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJwUGZmRHJRTVh3RGlwWEZhYlhGOTN1bktVSzl3M2ZhWnN5WUxhdVlqVndrLzAv
MzQzNTJlMzIzMzM0MmUzMjMxMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczMzM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt6tQwDQYJKoZIhvcNAQELBQADggEBAI1Rz97g
DF0KZ7FE3+6djU+COvfRIC6nv/d+gk4C7HSigfbZoir1TI0RduIObg0rOXrP49KL
aQKOFCsZwkVwr1RT64H3vCiU9at7Fn38QCCVpAIdlMzMpJMJzNA0EAIJyK3nUKwb
TMepDcKsDkFmu0q8uZjIipNjJqg4qGfNpCjdezYh9sDxcLAQojuPFazx4PWch1Zb
rxU30FsxKqCbIGWYdqRsn//SYpxnkdGCYeAW2VlL0mY2cr2jNkEPJgjpySf4Bzrr
3y1afqt0FoEbiNLVVAVWBvfGybvrHgkNrSPGGJbDHRgajR48sS1wQ9aUve3ULlI4
pPDaBMyqHsmrsnM=
-----END CERTIFICATE-----
Generated at Fri Mar 27 05:44:10 2026 by rpki-client