Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/34352e3233362e36302e302f32342d3332203d3e20323731323034.roa
File:                     34352e3233362e36302e302f32342d3332203d3e20323731323034.roa (raw, json)
Hash identifier:          tkxBdhmmrIiPacFA+zr4TDJ+Q8UjFK9N6hFvmYHgsyQ=
Subject key identifier:   EB:75:86:09:97:0C:19:20:0D:49:00:26:76:22:D8:CA:84:20:FE:67
Certificate issuer:       /CN=072772F63E62DC06EAED9A555C2C793CEFF59262
Certificate serial:       211838DD73CCD4531C12566FDB685A11C829090B
Authority key identifier: 07:27:72:F6:3E:62:DC:06:EA:ED:9A:55:5C:2C:79:3C:EF:F5:92:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/072772F63E62DC06EAED9A555C2C793CEFF59262.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/34352e3233362e36302e302f32342d3332203d3e20323731323034.roa
Signing time:             Wed 29 Apr 2026 14:00:00 +0000
ROA not before:           Wed 29 Apr 2026 13:55:00 +0000
ROA not after:            Wed 28 Apr 2027 14:00:00 +0000
asID:                     271204
IP address blocks:        45.236.60.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/072772F63E62DC06EAED9A555C2C793CEFF59262.crl
                          rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/072772F63E62DC06EAED9A555C2C793CEFF59262.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/072772F63E62DC06EAED9A555C2C793CEFF59262.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:18:38:dd:73:cc:d4:53:1c:12:56:6f:db:68:5a:11:c8:29:09:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072772F63E62DC06EAED9A555C2C793CEFF59262
        Validity
            Not Before: Apr 29 13:55:00 2026 GMT
            Not After : Apr 28 14:00:00 2027 GMT
        Subject: CN=EB758609970C19200D4900267622D8CA8420FE67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9c:e5:c9:89:04:88:98:c3:57:fe:69:42:fb:
                    c5:3c:fc:0a:22:7e:d2:ba:ad:fb:d7:e7:87:42:2b:
                    9a:b0:b0:d8:f5:4e:e6:11:72:d3:87:2a:bf:d7:a1:
                    4a:85:82:26:d9:1c:e7:aa:3f:7c:06:3a:0b:5d:a6:
                    60:fd:aa:2a:53:25:05:f7:ac:09:8b:3e:b2:18:d0:
                    da:44:ac:1c:ce:7b:5a:86:72:9b:81:7c:19:f3:9e:
                    fa:6a:b5:c2:c3:c3:e3:22:21:96:31:77:2a:56:b6:
                    b6:d2:89:65:7d:b8:2e:7b:fe:60:00:ac:a4:4e:e1:
                    6d:17:4d:e0:1b:44:7c:c7:20:ce:c9:6f:69:ed:a6:
                    5d:19:54:da:ee:76:1d:0f:80:17:7f:11:bf:bc:1f:
                    e2:4e:9d:02:4d:03:c5:86:65:06:c6:d2:01:58:e3:
                    06:b1:61:dc:70:15:6d:45:83:09:b6:14:80:9a:4a:
                    25:f3:17:3d:a2:6b:94:0b:2e:27:df:d8:13:5d:91:
                    1c:d3:2c:bd:0d:f5:4c:29:71:d8:56:ea:8c:f5:6e:
                    f3:dc:e5:cb:c2:d0:f2:ea:89:c8:10:17:e7:75:5d:
                    e5:e0:bc:d6:2b:14:50:90:2d:8d:84:97:7d:ff:a0:
                    ce:6e:10:1e:d2:0a:95:b9:39:b2:0c:0b:7e:fa:c7:
                    b2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:75:86:09:97:0C:19:20:0D:49:00:26:76:22:D8:CA:84:20:FE:67
            X509v3 Authority Key Identifier:
                keyid:07:27:72:F6:3E:62:DC:06:EA:ED:9A:55:5C:2C:79:3C:EF:F5:92:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/072772F63E62DC06EAED9A555C2C793CEFF59262.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/072772F63E62DC06EAED9A555C2C793CEFF59262.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/34352e3233362e36302e302f32342d3332203d3e20323731323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:23:c9:19:5a:c8:22:ab:d2:a2:6e:87:b3:df:46:c8:e6:5e:
         18:12:70:2d:06:05:6a:48:c5:62:90:d3:6a:be:7c:3b:30:97:
         06:4a:fb:39:10:f2:75:04:56:9e:ec:f5:24:43:b3:c2:bf:4d:
         28:9c:c5:de:88:8a:3d:fb:51:39:b6:26:97:15:c2:f5:dd:ef:
         6a:02:4c:a9:9a:57:cc:84:59:4e:b6:8b:ae:43:44:c9:75:50:
         a9:a5:f0:db:ed:60:21:04:80:72:ba:69:a4:5d:56:42:f0:f9:
         54:76:54:15:4c:3c:52:e2:93:dc:60:03:d9:02:d5:20:fb:c7:
         74:c8:44:e1:f5:ff:03:aa:f8:5b:51:86:97:22:4e:f1:fb:ff:
         c4:6a:33:66:c8:6d:ac:29:19:8b:cc:50:da:09:c5:29:98:40:
         1b:d5:13:6a:a5:f3:d8:fc:d1:08:fd:66:c5:27:ea:4f:3c:d1:
         e2:a9:39:d4:26:3b:be:45:9a:0e:8a:71:15:3e:40:2f:6f:d1:
         c9:67:6e:cb:9a:87:7e:cf:95:ee:30:7c:29:4e:ca:73:84:c5:
         c9:de:8d:60:d9:d2:93:75:79:a5:dd:4e:54:99:68:8b:3a:07:
         d0:7c:eb:1d:d1:43:81:68:88:ff:aa:4a:ba:2f:c9:66:b6:44:
         3d:e3:e0:8c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUIRg43XPM1FMcElZv22haEcgpCQswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDcyNzcyRjYzRTYyREMwNkVBRUQ5QTU1NUMyQzc5M0NF
RkY1OTI2MjAeFw0yNjA0MjkxMzU1MDBaFw0yNzA0MjgxNDAwMDBaMDMxMTAvBgNV
BAMTKEVCNzU4NjA5OTcwQzE5MjAwRDQ5MDAyNjc2MjJEOENBODQyMEZFNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgnOXJiQSImMNX/mlC+8U8/Aoi
ftK6rfvX54dCK5qwsNj1TuYRctOHKr/XoUqFgibZHOeqP3wGOgtdpmD9qipTJQX3
rAmLPrIY0NpErBzOe1qGcpuBfBnznvpqtcLDw+MiIZYxdypWtrbSiWV9uC57/mAA
rKRO4W0XTeAbRHzHIM7Jb2ntpl0ZVNrudh0PgBd/Eb+8H+JOnQJNA8WGZQbG0gFY
4waxYdxwFW1Fgwm2FICaSiXzFz2ia5QLLiff2BNdkRzTLL0N9UwpcdhW6oz1bvPc
5cvC0PLqicgQF+d1XeXgvNYrFFCQLY2El33/oM5uEB7SCpW5ObIMC376x7JRAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU63WGCZcMGSANSQAmdiLYyoQg/mcwHwYDVR0j
BBgwFoAUBydy9j5i3Abq7ZpVXCx5PO/1kmIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREFaUEdiM1I5Mm9QSkUybmhxOXBZZmlVRHhNZU1UTTl2a2l0cXRDVjhj
Y2kvMS8wNzI3NzJGNjNFNjJEQzA2RUFFRDlBNTU1QzJDNzkzQ0VGRjU5MjYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA3Mjc3MkY2M0U2MkRDMDZF
QUVEOUE1NTVDMkM3OTNDRUZGNTkyNjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RBWlBHYjNSOTJvUEpFMm5ocTlwWWZpVUR4TWVNVE05dmtpdHF0Q1Y4Y2NpLzEv
MzQzNTJlMzIzMzM2MmUzNjMwMmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzIzNzMx
MzIzMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALew8MA0GCSqGSIb3DQEBCwUAA4IBAQCFI8kZWsgi
q9Kiboez30bI5l4YEnAtBgVqSMVikNNqvnw7MJcGSvs5EPJ1BFae7PUkQ7PCv00o
nMXeiIo9+1E5tiaXFcL13e9qAkypmlfMhFlOtouuQ0TJdVCppfDb7WAhBIByummk
XVZC8PlUdlQVTDxS4pPcYAPZAtUg+8d0yETh9f8DqvhbUYaXIk7x+//EajNmyG2s
KRmLzFDaCcUpmEAb1RNqpfPY/NEI/WbFJ+pPPNHiqTnUJju+RZoOinEVPkAvb9HJ
Z27Lmod+z5XuMHwpTspzhMXJ3o1g2dKTdXml3U5UmWiLOgfQfOsd0UOBaIj/qkq6
L8lmtkQ94+CM
-----END CERTIFICATE-----
Generated at Wed May 13 21:36:00 2026 by rpki-client