Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/34352e3233362e3230342e302f32322d3232203d3e20323638323435.roa
File:                     34352e3233362e3230342e302f32322d3232203d3e20323638323435.roa (raw, json)
Hash identifier:          JVItFV+lIcVSUReNEeTarUErv4mS1dVjoCe80ASHw6s=
Subject key identifier:   5C:FA:19:35:C8:DE:AF:CF:53:4F:71:CD:E7:3F:74:61:BC:43:D9:C0
Certificate issuer:       /CN=68381282EE8DA4C004BD63329B8F39CB17F85C0C
Certificate serial:       3F2349A779382C0191200FBA8DD463CB3126D869
Authority key identifier: 68:38:12:82:EE:8D:A4:C0:04:BD:63:32:9B:8F:39:CB:17:F8:5C:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68381282EE8DA4C004BD63329B8F39CB17F85C0C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/34352e3233362e3230342e302f32322d3232203d3e20323638323435.roa
Signing time:             Mon 02 Mar 2026 19:15:57 +0000
ROA not before:           Mon 02 Mar 2026 19:10:57 +0000
ROA not after:            Mon 01 Mar 2027 19:15:57 +0000
asID:                     268245
IP address blocks:        45.236.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/68381282EE8DA4C004BD63329B8F39CB17F85C0C.crl
                          rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/68381282EE8DA4C004BD63329B8F39CB17F85C0C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68381282EE8DA4C004BD63329B8F39CB17F85C0C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 09:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:23:49:a7:79:38:2c:01:91:20:0f:ba:8d:d4:63:cb:31:26:d8:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68381282EE8DA4C004BD63329B8F39CB17F85C0C
        Validity
            Not Before: Mar  2 19:10:57 2026 GMT
            Not After : Mar  1 19:15:57 2027 GMT
        Subject: CN=5CFA1935C8DEAFCF534F71CDE73F7461BC43D9C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3f:19:7f:3f:0a:5b:ed:3f:c7:2e:2c:7f:99:
                    2f:32:b0:45:4c:0e:0e:bf:9e:1a:63:2c:12:2d:ac:
                    f5:f3:81:08:4a:a7:4c:e6:cf:6e:08:21:c0:d9:ba:
                    d6:b0:92:a7:31:dd:0f:e4:9c:b0:33:87:ce:32:a8:
                    cb:51:b7:1e:5f:bb:15:4d:0f:15:17:b5:e3:1c:18:
                    ba:e4:7b:e5:5a:74:52:95:3c:f9:d4:9c:31:ff:aa:
                    30:4f:82:21:0e:50:4e:2b:e5:02:e7:ed:31:ea:56:
                    6a:68:d5:08:6a:60:a9:d6:73:f8:91:e1:ef:b6:d9:
                    d5:2e:8b:84:a2:86:ba:50:1c:8c:64:e0:71:e8:22:
                    9a:74:b5:27:56:d3:0e:56:75:9d:d5:54:21:f9:b2:
                    76:70:fc:0d:4c:71:e7:db:fd:8f:7f:37:24:fe:2c:
                    44:21:76:d7:0a:72:6c:37:c1:c2:1b:6c:a9:6e:52:
                    f7:f5:a4:50:9d:0b:7e:99:47:ea:bc:b6:f1:78:c6:
                    53:2d:92:48:31:45:c4:82:b9:75:24:c8:22:e3:e3:
                    6e:38:8e:47:90:e3:f1:17:b9:ce:82:44:2c:9d:bd:
                    e3:46:0c:c8:b2:36:f8:e2:d3:44:9f:55:e5:3a:83:
                    61:b8:8f:af:f9:b2:a1:03:52:e0:ec:73:d9:10:09:
                    37:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:FA:19:35:C8:DE:AF:CF:53:4F:71:CD:E7:3F:74:61:BC:43:D9:C0
            X509v3 Authority Key Identifier:
                keyid:68:38:12:82:EE:8D:A4:C0:04:BD:63:32:9B:8F:39:CB:17:F8:5C:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/68381282EE8DA4C004BD63329B8F39CB17F85C0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68381282EE8DA4C004BD63329B8F39CB17F85C0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/34352e3233362e3230342e302f32322d3232203d3e20323638323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:f3:bb:70:d0:37:4a:b3:d7:ec:c3:25:86:c2:4a:70:ca:9c:
         d2:e2:75:b8:7d:30:f4:d0:2d:58:b7:96:82:25:8c:d1:d3:49:
         55:99:b1:cf:0d:6e:d0:4d:be:19:92:78:7c:64:89:dc:69:2f:
         91:f0:63:f5:5a:b9:69:f4:71:33:47:34:30:4b:b3:7a:18:30:
         a4:c6:4c:76:22:5b:2d:2b:aa:e2:c1:8f:f9:59:6e:1e:f0:8f:
         f0:f9:11:44:a7:5d:00:43:5a:8a:6d:cd:67:81:d8:f8:44:72:
         5c:98:73:ef:b6:6d:c4:3f:da:d9:c6:f5:f7:57:43:d7:6f:c1:
         e3:08:8d:2d:59:d6:c9:26:be:59:a5:34:cc:80:ee:fb:30:57:
         d3:97:fb:72:e1:b9:f5:f6:5a:3a:0d:62:78:dd:bd:57:0b:a0:
         ef:6b:17:90:28:18:fd:98:ad:c8:5c:af:9f:c4:f5:a5:7a:6e:
         52:ac:41:9d:62:2a:d7:c6:6d:d7:da:bf:73:e9:f7:96:6c:76:
         59:22:61:8c:15:d8:31:96:0c:e1:bb:16:8f:10:53:ce:06:16:
         d9:ee:36:a1:69:57:36:6d:75:6f:43:56:ea:dd:99:59:b3:96:
         f0:29:b0:0e:f6:8a:26:a4:fa:55:69:b0:3a:d1:bd:2f:e6:30:
         99:8e:c7:26
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPyNJp3k4LAGRIA+6jdRjyzEm2GkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjgzODEyODJFRThEQTRDMDA0QkQ2MzMyOUI4RjM5Q0Ix
N0Y4NUMwQzAeFw0yNjAzMDIxOTEwNTdaFw0yNzAzMDExOTE1NTdaMDMxMTAvBgNV
BAMTKDVDRkExOTM1QzhERUFGQ0Y1MzRGNzFDREU3M0Y3NDYxQkM0M0Q5QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwPxl/Pwpb7T/HLix/mS8ysEVM
Dg6/nhpjLBItrPXzgQhKp0zmz24IIcDZutawkqcx3Q/knLAzh84yqMtRtx5fuxVN
DxUXteMcGLrke+VadFKVPPnUnDH/qjBPgiEOUE4r5QLn7THqVmpo1QhqYKnWc/iR
4e+22dUui4SihrpQHIxk4HHoIpp0tSdW0w5WdZ3VVCH5snZw/A1Mcefb/Y9/NyT+
LEQhdtcKcmw3wcIbbKluUvf1pFCdC36ZR+q8tvF4xlMtkkgxRcSCuXUkyCLj4244
jkeQ4/EXuc6CRCydveNGDMiyNvji00SfVeU6g2G4j6/5sqEDUuDsc9kQCTeRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUXPoZNcjer89TT3HN5z90YbxD2cAwHwYDVR0j
BBgwFoAUaDgSgu6NpMAEvWMym485yxf4XAwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGd0NGpXTkxhZURHQ21uTHJuNk5LeWNkamQ2ZFZKdFZYOEh1TjhoeVpB
emEvMC82ODM4MTI4MkVFOERBNEMwMDRCRDYzMzI5QjhGMzlDQjE3Rjg1QzBDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4MzgxMjgyRUU4REE0QzAw
NEJENjMzMjlCOEYzOUNCMTdGODVDMEMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hndDRqV05MYWVER0NtbkxybjZOS3ljZGpkNmRWSnRWWDhIdU44aHlaQXphLzAv
MzQzNTJlMzIzMzM2MmUzMjMwMzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzgzMjM0MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt7MwwDQYJKoZIhvcNAQELBQADggEBAETzu3DQ
N0qz1+zDJYbCSnDKnNLidbh9MPTQLVi3loIljNHTSVWZsc8NbtBNvhmSeHxkidxp
L5HwY/VauWn0cTNHNDBLs3oYMKTGTHYiWy0rquLBj/lZbh7wj/D5EUSnXQBDWopt
zWeB2PhEclyYc++2bcQ/2tnG9fdXQ9dvweMIjS1Z1skmvlmlNMyA7vswV9OX+3Lh
ufX2WjoNYnjdvVcLoO9rF5AoGP2Yrchcr5/E9aV6blKsQZ1iKtfGbdfav3Pp95Zs
dlkiYYwV2DGWDOG7Fo8QU84GFtnuNqFpVzZtdW9DVurdmVmzlvApsA72iiak+lVp
sDrRvS/mMJmOxyY=
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:48:59 2026 by rpki-client