Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/MaFE7tA1drSy7BaD5s6NGKyfHrFhUpwLFXfR5ZaQvGh/0/34352e3233362e312e302f32342d3234203d3e20323638323135.roa
File:                     34352e3233362e312e302f32342d3234203d3e20323638323135.roa (raw, json)
Hash identifier:          pcoRimrn4EIsUu9FqiYa3yxDrCFKsWN+JeobZ/JHwa8=
Subject key identifier:   93:EA:DB:2D:8A:4F:F1:BC:08:3C:D9:96:04:2F:DF:7C:FC:B6:B1:E2
Certificate issuer:       /CN=777F5EB1AB6BF554B838F847ED60E71F6A109C4F
Certificate serial:       284CF62C701892CF666BD540B41E214E7FA41B86
Authority key identifier: 77:7F:5E:B1:AB:6B:F5:54:B8:38:F8:47:ED:60:E7:1F:6A:10:9C:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777F5EB1AB6BF554B838F847ED60E71F6A109C4F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/MaFE7tA1drSy7BaD5s6NGKyfHrFhUpwLFXfR5ZaQvGh/0/34352e3233362e312e302f32342d3234203d3e20323638323135.roa
Signing time:             Tue 05 May 2026 17:00:26 +0000
ROA not before:           Tue 05 May 2026 16:55:26 +0000
ROA not after:            Tue 04 May 2027 17:00:26 +0000
asID:                     268215
IP address blocks:        45.236.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/MaFE7tA1drSy7BaD5s6NGKyfHrFhUpwLFXfR5ZaQvGh/0/777F5EB1AB6BF554B838F847ED60E71F6A109C4F.crl
                          rsync://rpki-repo.registro.br/repo/MaFE7tA1drSy7BaD5s6NGKyfHrFhUpwLFXfR5ZaQvGh/0/777F5EB1AB6BF554B838F847ED60E71F6A109C4F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777F5EB1AB6BF554B838F847ED60E71F6A109C4F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 11:13:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:4c:f6:2c:70:18:92:cf:66:6b:d5:40:b4:1e:21:4e:7f:a4:1b:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=777F5EB1AB6BF554B838F847ED60E71F6A109C4F
        Validity
            Not Before: May  5 16:55:26 2026 GMT
            Not After : May  4 17:00:26 2027 GMT
        Subject: CN=93EADB2D8A4FF1BC083CD996042FDF7CFCB6B1E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e4:2f:ea:18:23:b1:dc:1c:01:06:3c:f0:0b:
                    a0:f5:92:b2:c1:ee:84:4a:e5:ec:dd:9c:8b:43:94:
                    7c:06:55:9c:28:ac:e4:7f:71:d7:98:a7:83:3b:d3:
                    d1:b8:5c:1e:ec:78:36:26:6d:50:9a:19:06:94:b6:
                    6c:b7:43:9a:24:b8:09:6e:4b:92:e9:25:26:4d:c3:
                    90:71:d9:ab:a9:41:10:ec:b1:e2:62:a6:71:0e:fe:
                    d9:1e:7d:dd:ba:b9:d4:f4:96:44:aa:97:6b:b1:c6:
                    82:bd:20:22:0c:33:f1:c7:7b:23:fe:4c:da:5f:6e:
                    87:ce:b3:d2:8e:34:5e:90:e4:1b:fc:87:5a:4c:59:
                    b0:8e:e3:36:9a:ad:3f:31:c4:90:93:e1:3c:2c:d9:
                    86:8b:37:29:48:fe:07:9c:d3:48:4f:99:6c:60:73:
                    d9:a3:3d:0f:c5:71:8e:4e:47:44:9d:a3:ed:72:57:
                    82:9a:b0:2b:64:2c:1a:8d:6b:fc:d4:42:31:5b:84:
                    b5:7d:12:8f:9f:21:5f:22:dc:12:75:fc:ab:6d:a5:
                    ff:21:bf:ae:7c:e5:ce:c2:0c:0d:ee:fc:31:ae:0c:
                    3e:84:f4:5a:c2:46:a2:41:0e:90:11:4a:16:d5:fb:
                    ab:ee:01:d8:1f:e0:b6:fb:05:ee:1e:7e:cf:40:ad:
                    04:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:EA:DB:2D:8A:4F:F1:BC:08:3C:D9:96:04:2F:DF:7C:FC:B6:B1:E2
            X509v3 Authority Key Identifier:
                keyid:77:7F:5E:B1:AB:6B:F5:54:B8:38:F8:47:ED:60:E7:1F:6A:10:9C:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/MaFE7tA1drSy7BaD5s6NGKyfHrFhUpwLFXfR5ZaQvGh/0/777F5EB1AB6BF554B838F847ED60E71F6A109C4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777F5EB1AB6BF554B838F847ED60E71F6A109C4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/MaFE7tA1drSy7BaD5s6NGKyfHrFhUpwLFXfR5ZaQvGh/0/34352e3233362e312e302f32342d3234203d3e20323638323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:bc:9b:c3:c9:6a:b2:0d:9b:fe:7b:ff:d9:3d:3a:0f:9c:87:
         62:37:3b:76:4c:0b:cb:55:35:43:ff:17:4b:2d:11:cd:86:bd:
         a0:a6:e9:93:8f:95:b3:de:32:30:e8:26:12:7e:3a:8f:09:4b:
         e1:d5:49:5b:99:62:33:2f:75:b7:db:d3:4b:70:1a:a1:b5:a3:
         0c:b5:1a:cd:2b:a1:5c:59:45:98:98:b8:8a:1a:be:80:8c:6f:
         f7:6c:3a:c9:d5:67:03:41:37:26:8b:2d:a0:7a:ae:eb:2b:ad:
         6e:70:1b:1e:b8:7b:c3:06:c5:83:43:07:e0:e1:86:d4:10:2d:
         1b:8f:8e:18:b5:62:ea:ee:f4:cd:98:28:7a:e9:70:42:4a:e0:
         6b:f5:c1:dc:5a:d7:fc:00:63:ef:7b:cf:22:35:07:a4:09:96:
         1e:e5:80:b4:d3:46:f0:4e:c7:45:eb:9b:8a:56:57:f1:49:f0:
         47:9b:05:af:35:57:43:ea:53:dc:91:c7:66:99:2c:a2:39:cb:
         af:8e:52:88:e0:b0:5d:e6:76:db:10:b8:a7:b7:f6:0f:d0:ca:
         43:42:9c:0c:82:be:16:31:01:0b:c0:60:80:56:31:7a:f0:66:
         08:c6:0f:ea:4b:c2:67:10:73:59:b5:7b:98:85:c8:7d:af:38:
         7a:43:58:c0
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUKEz2LHAYks9ma9VAtB4hTn+kG4YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzc3RjVFQjFBQjZCRjU1NEI4MzhGODQ3RUQ2MEU3MUY2
QTEwOUM0RjAeFw0yNjA1MDUxNjU1MjZaFw0yNzA1MDQxNzAwMjZaMDMxMTAvBgNV
BAMTKDkzRUFEQjJEOEE0RkYxQkMwODNDRDk5NjA0MkZERjdDRkNCNkIxRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS5C/qGCOx3BwBBjzwC6D1krLB
7oRK5ezdnItDlHwGVZworOR/cdeYp4M709G4XB7seDYmbVCaGQaUtmy3Q5okuAlu
S5LpJSZNw5Bx2aupQRDsseJipnEO/tkefd26udT0lkSql2uxxoK9ICIMM/HHeyP+
TNpfbofOs9KONF6Q5Bv8h1pMWbCO4zaarT8xxJCT4Tws2YaLNylI/gec00hPmWxg
c9mjPQ/FcY5OR0Sdo+1yV4KasCtkLBqNa/zUQjFbhLV9Eo+fIV8i3BJ1/Kttpf8h
v6585c7CDA3u/DGuDD6E9FrCRqJBDpARShbV+6vuAdgf4Lb7Be4efs9ArQQVAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUk+rbLYpP8bwIPNmWBC/ffPy2seIwHwYDVR0j
BBgwFoAUd39esatr9VS4OPhH7WDnH2oQnE8wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9NYUZFN3RBMWRyU3k3QmFENXM2TkdLeWZIckZoVXB3TEZYZlI1WmFRdkdo
LzAvNzc3RjVFQjFBQjZCRjU1NEI4MzhGODQ3RUQ2MEU3MUY2QTEwOUM0Ri5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS83NzdGNUVCMUFCNkJGNTU0Qjgz
OEY4NDdFRDYwRTcxRjZBMTA5QzRGLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYG
CCsGAQUFBzALhoGJcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9N
YUZFN3RBMWRyU3k3QmFENXM2TkdLeWZIckZoVXB3TEZYZlI1WmFRdkdoLzAvMzQz
NTJlMzIzMzM2MmUzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzODMyMzEz
NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC3sATANBgkqhkiG9w0BAQsFAAOCAQEAG7ybw8lqsg2b/nv/
2T06D5yHYjc7dkwLy1U1Q/8XSy0RzYa9oKbpk4+Vs94yMOgmEn46jwlL4dVJW5li
My91t9vTS3AaobWjDLUazSuhXFlFmJi4ihq+gIxv92w6ydVnA0E3JostoHqu6yut
bnAbHrh7wwbFg0MH4OGG1BAtG4+OGLVi6u70zZgoeulwQkrga/XB3FrX/ABj73vP
IjUHpAmWHuWAtNNG8E7HReubilZX8UnwR5sFrzVXQ+pT3JHHZpksojnLr45SiOCw
XeZ22xC4p7f2D9DKQ0KcDIK+FjEBC8BggFYxevBmCMYP6kvCZxBzWbV7mIXIfa84
ekNYwA==
-----END CERTIFICATE-----
Generated at Wed May 13 15:42:10 2026 by rpki-client