Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e302f32342d3234203d3e20323637323536.roa
File:                     34352e3233322e35302e302f32342d3234203d3e20323637323536.roa (raw, json)
Hash identifier:          YtHW+ZCl+dB66anQo57YPm2RlPsMEqbGnDett8dF+UI=
Subject key identifier:   9C:96:DA:25:BD:E8:B4:AF:49:73:07:A7:E7:4E:6E:A2:AF:3E:4A:75
Certificate issuer:       /CN=93B81388D9F01BB3ADD678C7DD82C64A03F69013
Certificate serial:       3FE41163B5D9544C1CC3EBC22D1BCC69C91401C6
Authority key identifier: 93:B8:13:88:D9:F0:1B:B3:AD:D6:78:C7:DD:82:C6:4A:03:F6:90:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93B81388D9F01BB3ADD678C7DD82C64A03F69013.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e302f32342d3234203d3e20323637323536.roa
Signing time:             Mon 16 Mar 2026 19:14:49 +0000
ROA not before:           Mon 16 Mar 2026 19:09:49 +0000
ROA not after:            Mon 15 Mar 2027 19:14:49 +0000
asID:                     267256
IP address blocks:        45.232.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/93B81388D9F01BB3ADD678C7DD82C64A03F69013.crl
                          rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/93B81388D9F01BB3ADD678C7DD82C64A03F69013.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93B81388D9F01BB3ADD678C7DD82C64A03F69013.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 01:42:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:e4:11:63:b5:d9:54:4c:1c:c3:eb:c2:2d:1b:cc:69:c9:14:01:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93B81388D9F01BB3ADD678C7DD82C64A03F69013
        Validity
            Not Before: Mar 16 19:09:49 2026 GMT
            Not After : Mar 15 19:14:49 2027 GMT
        Subject: CN=9C96DA25BDE8B4AF497307A7E74E6EA2AF3E4A75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1d:05:7d:25:dc:d7:ff:33:f9:14:00:75:24:
                    81:b5:eb:07:45:56:b4:01:ee:79:fe:3b:51:3f:5b:
                    86:d0:6a:e8:87:7d:c2:b1:5e:55:32:b2:6b:f4:f5:
                    40:ee:7e:4d:16:3e:c2:d6:5d:c6:ff:7d:83:5a:6e:
                    b8:5f:c0:19:7c:49:46:59:3e:f4:b2:48:eb:4c:dc:
                    f4:8f:8c:e9:a5:3d:08:7b:59:cb:16:7e:d1:0a:81:
                    46:95:6a:e2:76:3c:d7:f2:b3:02:15:22:bc:03:f0:
                    f0:ef:70:f0:d2:84:e3:ee:6f:c6:d0:42:56:9f:9c:
                    90:bf:38:5d:d9:16:9c:35:c9:70:7c:aa:4f:35:e4:
                    e6:53:69:cc:1a:62:a2:da:1b:d5:75:00:a1:22:84:
                    b2:5e:c8:e5:2b:2d:f5:4c:3e:76:70:21:d4:34:8a:
                    86:82:72:9c:35:fc:34:2a:95:c7:a5:e3:e4:ac:93:
                    d1:28:05:3b:a2:45:1a:49:db:3b:87:a5:c0:0a:95:
                    e9:b9:2d:fb:b5:cb:03:0a:62:49:e7:4c:42:e6:d7:
                    5f:c5:f0:58:c9:be:cb:5d:b9:eb:34:5b:b6:45:35:
                    ef:2f:9d:83:28:0f:9d:c0:f0:87:40:55:dd:81:1e:
                    a9:a7:95:18:61:12:4f:22:39:75:31:4a:69:db:ac:
                    0e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:96:DA:25:BD:E8:B4:AF:49:73:07:A7:E7:4E:6E:A2:AF:3E:4A:75
            X509v3 Authority Key Identifier:
                keyid:93:B8:13:88:D9:F0:1B:B3:AD:D6:78:C7:DD:82:C6:4A:03:F6:90:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/93B81388D9F01BB3ADD678C7DD82C64A03F69013.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93B81388D9F01BB3ADD678C7DD82C64A03F69013.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e302f32342d3234203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:30:95:52:82:a6:51:47:93:e3:7c:2a:ea:64:42:73:57:73:
         36:93:9c:6b:6f:ea:f1:70:ec:27:04:c3:a7:69:ce:12:b8:12:
         76:66:9b:e5:91:4f:25:4e:33:f6:96:14:67:a2:bc:fb:fd:7f:
         3a:88:18:78:90:84:02:39:07:ef:6e:b3:2a:53:0b:2f:08:33:
         8f:47:18:e0:3b:cc:63:a0:e3:69:61:9d:33:27:31:8d:8d:04:
         38:05:78:19:c5:dd:db:78:3c:0c:60:da:6e:c6:7f:eb:d2:ab:
         ff:ce:ac:65:f8:ac:5b:6d:2e:94:c6:ea:d6:dc:2e:20:2b:35:
         66:23:8f:47:cb:67:41:41:ae:37:30:29:da:8f:13:55:dd:23:
         13:db:34:c1:38:d6:a0:4b:b2:47:11:ac:bd:60:d9:e9:50:44:
         59:2b:3e:7b:8b:95:7e:ca:4b:b0:96:dd:b3:bf:0c:16:35:24:
         c9:98:2a:45:0e:cc:20:e0:e3:8e:27:d4:ed:ca:23:86:78:58:
         ae:e0:d2:f6:01:5c:b2:31:19:38:2d:56:5d:ba:97:79:e5:75:
         c3:99:b1:23:1c:62:d8:42:ec:6e:b7:10:02:ba:20:ce:34:c6:
         8a:a3:76:3c:f3:0a:46:97:57:f0:a5:41:eb:be:18:86:63:d1:
         c9:b8:05:96
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUP+QRY7XZVEwcw+vCLRvMackUAcYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTNCODEzODhEOUYwMUJCM0FERDY3OEM3REQ4MkM2NEEw
M0Y2OTAxMzAeFw0yNjAzMTYxOTA5NDlaFw0yNzAzMTUxOTE0NDlaMDMxMTAvBgNV
BAMTKDlDOTZEQTI1QkRFOEI0QUY0OTczMDdBN0U3NEU2RUEyQUYzRTRBNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPHQV9JdzX/zP5FAB1JIG16wdF
VrQB7nn+O1E/W4bQauiHfcKxXlUysmv09UDufk0WPsLWXcb/fYNabrhfwBl8SUZZ
PvSySOtM3PSPjOmlPQh7WcsWftEKgUaVauJ2PNfyswIVIrwD8PDvcPDShOPub8bQ
QlafnJC/OF3ZFpw1yXB8qk815OZTacwaYqLaG9V1AKEihLJeyOUrLfVMPnZwIdQ0
ioaCcpw1/DQqlcel4+Ssk9EoBTuiRRpJ2zuHpcAKlem5Lfu1ywMKYknnTELm11/F
8FjJvstdues0W7ZFNe8vnYMoD53A8IdAVd2BHqmnlRhhEk8iOXUxSmnbrA6lAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUnJbaJb3otK9Jcwen505uoq8+SnUwHwYDVR0j
BBgwFoAUk7gTiNnwG7Ot1njH3YLGSgP2kBMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzVlSzRoOEhreUxUNDlIRGkxY1BjZGh1NnNDWHE0QjVQb3FEWjRQbVpr
bmgvMC85M0I4MTM4OEQ5RjAxQkIzQURENjc4QzdERDgyQzY0QTAzRjY5MDEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzQjgxMzg4RDlGMDFCQjNB
REQ2NzhDN0REODJDNjRBMDNGNjkwMTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM1ZUs0aDhIa3lMVDQ5SERpMWNQY2RodTZzQ1hxNEI1UG9xRFo0UG1aa25oLzAv
MzQzNTJlMzIzMzMyMmUzNTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzIzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALegyMA0GCSqGSIb3DQEBCwUAA4IBAQBeMJVSgqZR
R5PjfCrqZEJzV3M2k5xrb+rxcOwnBMOnac4SuBJ2ZpvlkU8lTjP2lhRnorz7/X86
iBh4kIQCOQfvbrMqUwsvCDOPRxjgO8xjoONpYZ0zJzGNjQQ4BXgZxd3beDwMYNpu
xn/r0qv/zqxl+KxbbS6UxurW3C4gKzVmI49Hy2dBQa43MCnajxNV3SMT2zTBONag
S7JHEay9YNnpUERZKz57i5V+ykuwlt2zvwwWNSTJmCpFDswg4OOOJ9TtyiOGeFiu
4NL2AVyyMRk4LVZdupd55XXDmbEjHGLYQuxutxACuiDONMaKo3Y88wpGl1fwpUHr
vhiGY9HJuAWW
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:05:36 2026 by rpki-client