Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/3137302e3233332e33342e302f32342d3234203d3e20323635303836.roa
File:                     3137302e3233332e33342e302f32342d3234203d3e20323635303836.roa (raw, json)
Hash identifier:          upDfkwIONLk48wpcJcDZM51SWl9EH/UInLZt5Jh9pE0=
Subject key identifier:   D3:42:51:EB:7B:FE:77:B9:55:E1:3C:DD:B1:44:CF:34:0D:21:61:57
Certificate issuer:       /CN=ED9181D45C38C1C772F95EC8E8333102FB083EDC
Certificate serial:       3C0082F525634975D94F04FDF84CAB39F7C88199
Authority key identifier: ED:91:81:D4:5C:38:C1:C7:72:F9:5E:C8:E8:33:31:02:FB:08:3E:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED9181D45C38C1C772F95EC8E8333102FB083EDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/3137302e3233332e33342e302f32342d3234203d3e20323635303836.roa
Signing time:             Sun 03 May 2026 16:21:49 +0000
ROA not before:           Sun 03 May 2026 16:16:49 +0000
ROA not after:            Sun 02 May 2027 16:21:49 +0000
asID:                     265086
IP address blocks:        170.233.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/ED9181D45C38C1C772F95EC8E8333102FB083EDC.crl
                          rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/ED9181D45C38C1C772F95EC8E8333102FB083EDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED9181D45C38C1C772F95EC8E8333102FB083EDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:00:82:f5:25:63:49:75:d9:4f:04:fd:f8:4c:ab:39:f7:c8:81:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED9181D45C38C1C772F95EC8E8333102FB083EDC
        Validity
            Not Before: May  3 16:16:49 2026 GMT
            Not After : May  2 16:21:49 2027 GMT
        Subject: CN=D34251EB7BFE77B955E13CDDB144CF340D216157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:81:30:03:eb:69:78:f9:9e:f7:e0:5b:09:9c:
                    12:24:03:e5:ed:89:7a:fc:2b:6d:b2:b4:4c:8e:9d:
                    3a:d4:c6:54:b7:4b:eb:cd:ec:fe:55:ba:37:fb:3b:
                    cb:67:bd:e2:41:2c:e5:6c:74:74:dd:e8:6c:cd:a4:
                    3a:c2:6c:bb:aa:2b:3a:e6:49:d3:9e:5c:af:38:31:
                    2c:1c:b6:30:f2:22:ec:47:f0:1f:fe:13:b4:4b:4a:
                    5d:19:33:8e:f0:29:00:65:b6:db:59:2a:dc:02:bf:
                    62:c5:10:06:41:cf:09:7d:5c:47:dd:f3:dc:c6:2c:
                    ce:c2:ce:37:03:7c:e0:94:9a:7b:f6:3a:19:f0:b1:
                    7f:a8:27:68:23:6c:c9:2d:96:73:9a:e4:2b:78:db:
                    6a:d5:63:f9:ef:8f:fa:51:71:50:14:78:e9:09:77:
                    51:04:82:ad:ce:dc:74:8b:46:46:52:9a:94:ee:21:
                    7d:6d:d0:5b:be:db:f1:40:75:4d:6d:7a:87:c1:9c:
                    ff:98:e6:7e:90:89:f8:4c:ff:8a:35:a3:70:bf:10:
                    a9:37:fe:e8:74:8a:70:3c:de:28:bf:c6:91:21:c5:
                    19:86:d5:c8:e2:cf:6e:66:08:8e:27:58:41:9c:c6:
                    80:0e:22:87:d5:ab:1c:20:7a:13:56:0d:50:60:a3:
                    a8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:42:51:EB:7B:FE:77:B9:55:E1:3C:DD:B1:44:CF:34:0D:21:61:57
            X509v3 Authority Key Identifier:
                keyid:ED:91:81:D4:5C:38:C1:C7:72:F9:5E:C8:E8:33:31:02:FB:08:3E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/ED9181D45C38C1C772F95EC8E8333102FB083EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED9181D45C38C1C772F95EC8E8333102FB083EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/3137302e3233332e33342e302f32342d3234203d3e20323635303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:f3:c3:51:29:6f:fc:28:75:19:80:3d:a1:a2:8b:8a:03:bd:
         12:be:64:22:55:33:ee:ea:99:8f:8e:67:1b:f7:e1:ac:ef:0c:
         00:4c:c0:b2:38:c4:7b:06:ae:ce:dd:55:4a:e6:06:5d:18:1b:
         f0:25:38:3a:e6:51:cb:fc:04:62:98:16:34:47:f7:d6:c8:45:
         d0:9f:44:60:9f:a5:18:65:c2:52:ec:5a:5d:c2:ea:85:72:0e:
         d5:0d:6b:07:a5:a8:da:12:fe:27:8a:78:22:b3:c0:c8:89:d7:
         c7:5a:66:8e:1b:58:d7:f0:0b:3a:d9:59:d8:ec:e3:a4:a1:a3:
         ea:68:1b:6f:d6:fa:d8:6a:aa:13:dd:4d:36:b6:69:b3:89:7a:
         28:91:ab:34:36:f7:39:8a:fa:87:d0:06:8d:87:22:fa:8c:55:
         ee:19:b5:22:67:4e:ab:27:a9:3a:92:7f:ab:fa:91:6a:e1:6a:
         52:de:99:19:98:3f:72:e7:d2:e0:9a:ae:e1:c6:81:a3:12:05:
         e1:a9:65:e0:b2:96:dd:1a:dd:14:8a:f9:d6:85:bb:60:2b:81:
         dc:d1:20:84:1d:e5:04:11:43:24:94:57:c7:95:88:c9:94:2e:
         38:e2:0a:b4:da:8c:43:57:76:e1:2f:d3:25:dd:b5:d5:56:22:
         66:30:2b:90
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUPACC9SVjSXXZTwT9+EyrOffIgZkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUQ5MTgxRDQ1QzM4QzFDNzcyRjk1RUM4RTgzMzMxMDJG
QjA4M0VEQzAeFw0yNjA1MDMxNjE2NDlaFw0yNzA1MDIxNjIxNDlaMDMxMTAvBgNV
BAMTKEQzNDI1MUVCN0JGRTc3Qjk1NUUxM0NEREIxNDRDRjM0MEQyMTYxNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6gTAD62l4+Z734FsJnBIkA+Xt
iXr8K22ytEyOnTrUxlS3S+vN7P5Vujf7O8tnveJBLOVsdHTd6GzNpDrCbLuqKzrm
SdOeXK84MSwctjDyIuxH8B/+E7RLSl0ZM47wKQBltttZKtwCv2LFEAZBzwl9XEfd
89zGLM7CzjcDfOCUmnv2OhnwsX+oJ2gjbMktlnOa5Ct422rVY/nvj/pRcVAUeOkJ
d1EEgq3O3HSLRkZSmpTuIX1t0Fu+2/FAdU1teofBnP+Y5n6QifhM/4o1o3C/EKk3
/uh0inA83ii/xpEhxRmG1cjiz25mCI4nWEGcxoAOIofVqxwgehNWDVBgo6gpAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU00JR63v+d7lV4TzdsUTPNA0hYVcwHwYDVR0j
BBgwFoAU7ZGB1Fw4wcdy+V7I6DMxAvsIPtwwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9HZ2JwampwM1FoQ3hSQjdjQzJEUGJCSnFiUEZNWlJCUlhxS2dSV1hqQUJE
LzAvRUQ5MTgxRDQ1QzM4QzFDNzcyRjk1RUM4RTgzMzMxMDJGQjA4M0VEQy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FRDkxODFENDVDMzhDMUM3NzJG
OTVFQzhFODMzMzEwMkZCMDgzRURDLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9H
Z2JwampwM1FoQ3hSQjdjQzJEUGJCSnFiUEZNWlJCUlhxS2dSV1hqQUJELzAvMzEz
NzMwMmUzMjMzMzMyZTMzMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzUz
MDM4MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBACq6SIwDQYJKoZIhvcNAQELBQADggEBAD3zw1Epb/wo
dRmAPaGii4oDvRK+ZCJVM+7qmY+OZxv34azvDABMwLI4xHsGrs7dVUrmBl0YG/Al
ODrmUcv8BGKYFjRH99bIRdCfRGCfpRhlwlLsWl3C6oVyDtUNawelqNoS/ieKeCKz
wMiJ18daZo4bWNfwCzrZWdjs46Sho+poG2/W+thqqhPdTTa2abOJeiiRqzQ29zmK
+ofQBo2HIvqMVe4ZtSJnTqsnqTqSf6v6kWrhalLemRmYP3Ln0uCaruHGgaMSBeGp
ZeCylt0a3RSK+daFu2ArgdzRIIQd5QQRQySUV8eViMmULjjiCrTajENXduEv0yXd
tdVWImYwK5A=
-----END CERTIFICATE-----
Generated at Wed May 13 16:06:42 2026 by rpki-client