Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/34352e3137302e37342e302f32332d3233203d3e20323638313533.roa
File:                     34352e3137302e37342e302f32332d3233203d3e20323638313533.roa (raw, json)
Hash identifier:          fhfOOvbNUX1XIXMfl1Lvr6B82hxd6SfjqpCeMrerlFM=
Subject key identifier:   7E:88:52:5F:EC:17:EE:8E:83:F5:73:0F:D5:3D:F8:11:42:4C:0A:7E
Certificate issuer:       /CN=C9252AB23441CBFEC245C4915A2B1DEBF93EAD55
Certificate serial:       3F648DE56013B2119710F7FF1751FEC691B692D4
Authority key identifier: C9:25:2A:B2:34:41:CB:FE:C2:45:C4:91:5A:2B:1D:EB:F9:3E:AD:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9252AB23441CBFEC245C4915A2B1DEBF93EAD55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/34352e3137302e37342e302f32332d3233203d3e20323638313533.roa
Signing time:             Mon 01 Jun 2026 17:37:48 +0000
ROA not before:           Mon 01 Jun 2026 17:32:48 +0000
ROA not after:            Mon 31 May 2027 17:37:48 +0000
asID:                     268153
IP address blocks:        45.170.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/C9252AB23441CBFEC245C4915A2B1DEBF93EAD55.crl
                          rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/C9252AB23441CBFEC245C4915A2B1DEBF93EAD55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9252AB23441CBFEC245C4915A2B1DEBF93EAD55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 Jun 2026 11:18:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:64:8d:e5:60:13:b2:11:97:10:f7:ff:17:51:fe:c6:91:b6:92:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9252AB23441CBFEC245C4915A2B1DEBF93EAD55
        Validity
            Not Before: Jun  1 17:32:48 2026 GMT
            Not After : May 31 17:37:48 2027 GMT
        Subject: CN=7E88525FEC17EE8E83F5730FD53DF811424C0A7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:aa:a5:41:44:8b:2d:6c:da:d2:b2:3f:ce:87:
                    e7:9c:a9:38:65:05:27:26:5d:80:67:e2:6b:43:59:
                    0e:33:5d:4b:bb:5a:a1:43:11:39:13:86:df:fb:f8:
                    2a:9e:8c:d7:68:2f:64:a8:18:58:93:35:55:27:92:
                    ef:82:29:54:5c:f5:69:b2:f2:22:de:dd:43:34:6e:
                    39:cf:a2:d9:f8:3f:4b:88:49:43:f9:f6:8e:84:5d:
                    01:fb:75:cf:6e:62:ae:06:03:2a:12:a3:43:e5:e3:
                    ec:75:ff:5b:06:42:22:2b:4c:61:fa:09:a8:27:66:
                    58:c0:1f:d2:1e:ba:b7:03:a3:e8:7c:3b:e7:a6:1d:
                    bf:42:49:75:b6:83:1a:a3:25:38:88:b5:ed:83:cb:
                    79:ce:c1:f4:2a:75:f4:09:98:6f:9c:d4:8c:ad:cc:
                    7d:96:40:d3:37:b3:b3:ff:fc:d9:c7:9a:66:e0:5b:
                    53:95:2e:7b:2c:13:90:91:4f:7f:4b:16:3a:fd:f3:
                    b0:3e:84:8b:e3:96:c9:5c:ea:bb:e6:f9:71:0d:e7:
                    d0:0f:3d:c9:29:7b:e2:47:32:bf:c0:ec:f9:4d:da:
                    49:c9:4e:af:62:df:17:2e:0c:a2:4a:ea:1b:d5:55:
                    f7:fb:4b:95:7f:de:9d:c0:f0:54:2a:b6:66:12:fa:
                    a3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:88:52:5F:EC:17:EE:8E:83:F5:73:0F:D5:3D:F8:11:42:4C:0A:7E
            X509v3 Authority Key Identifier:
                keyid:C9:25:2A:B2:34:41:CB:FE:C2:45:C4:91:5A:2B:1D:EB:F9:3E:AD:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/C9252AB23441CBFEC245C4915A2B1DEBF93EAD55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9252AB23441CBFEC245C4915A2B1DEBF93EAD55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/34352e3137302e37342e302f32332d3233203d3e20323638313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:b5:f4:9b:71:8e:32:89:ea:74:14:80:4f:be:63:a5:06:77:
         20:31:5c:96:4f:66:ea:5b:75:b6:7d:9f:65:9d:4b:57:53:3c:
         61:df:f4:f8:10:91:d9:c6:30:d7:86:bb:75:9f:0c:15:aa:64:
         41:27:bc:c8:87:fc:cc:e8:52:49:df:95:a9:92:5a:86:6e:0f:
         aa:2f:8e:76:2f:17:8c:8a:0d:76:81:5f:2e:eb:e7:f0:c4:58:
         c5:02:4a:f0:c0:a5:e1:28:0f:35:b8:8d:fb:7a:55:bf:2b:a3:
         5e:ff:3d:1f:f9:b6:67:f2:81:6d:9e:ea:fd:fa:f0:f2:aa:09:
         7e:0c:66:b8:30:cd:7a:32:0a:cd:b9:13:19:f6:6e:a6:8b:8e:
         03:dc:e3:7c:0e:c0:5c:9a:e1:b1:0e:52:48:00:e3:34:df:e1:
         4d:56:32:4e:39:5c:e1:64:29:a2:d5:08:54:9c:43:74:f9:15:
         14:a8:3b:59:af:77:c8:c1:57:4c:e2:d8:69:01:34:27:fe:74:
         ce:54:f1:10:a1:8c:60:4a:8e:bd:f8:ef:81:56:62:62:bf:f5:
         d3:0e:24:f5:9e:dd:b6:e0:ff:56:76:ab:e2:e7:34:6a:16:07:
         3c:4b:f7:aa:64:a6:89:04:3a:6e:6e:e1:06:96:cd:39:a3:5e:
         57:68:a8:58
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUP2SN5WATshGXEPf/F1H+xpG2ktQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzkyNTJBQjIzNDQxQ0JGRUMyNDVDNDkxNUEyQjFERUJG
OTNFQUQ1NTAeFw0yNjA2MDExNzMyNDhaFw0yNzA1MzExNzM3NDhaMDMxMTAvBgNV
BAMTKDdFODg1MjVGRUMxN0VFOEU4M0Y1NzMwRkQ1M0RGODExNDI0QzBBN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXqqVBRIstbNrSsj/Oh+ecqThl
BScmXYBn4mtDWQ4zXUu7WqFDETkTht/7+CqejNdoL2SoGFiTNVUnku+CKVRc9Wmy
8iLe3UM0bjnPotn4P0uISUP59o6EXQH7dc9uYq4GAyoSo0Pl4+x1/1sGQiIrTGH6
CagnZljAH9IeurcDo+h8O+emHb9CSXW2gxqjJTiIte2Dy3nOwfQqdfQJmG+c1Iyt
zH2WQNM3s7P//NnHmmbgW1OVLnssE5CRT39LFjr987A+hIvjlslc6rvm+XEN59AP
Pckpe+JHMr/A7PlN2knJTq9i3xcuDKJK6hvVVff7S5V/3p3A8FQqtmYS+qN1AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUfohSX+wX7o6D9XMP1T34EUJMCn4wHwYDVR0j
BBgwFoAUySUqsjRBy/7CRcSRWisd6/k+rVUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUQ2OG92UU1nS2ZTODVCN1Q1czZLb3dZY3FMMzRVZEh2RWgyY0J6azk4
SzEvMC9DOTI1MkFCMjM0NDFDQkZFQzI0NUM0OTE1QTJCMURFQkY5M0VBRDU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5MjUyQUIyMzQ0MUNCRkVD
MjQ1QzQ5MTVBMkIxREVCRjkzRUFENTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FENjhvdlFNZ0tmUzg1QjdUNXM2S293WWNxTDM0VWRIdkVoMmNCems5OEsxLzAv
MzQzNTJlMzEzNzMwMmUzNzM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM4
MzEzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLapKMA0GCSqGSIb3DQEBCwUAA4IBAQB2tfSbcY4y
iep0FIBPvmOlBncgMVyWT2bqW3W2fZ9lnUtXUzxh3/T4EJHZxjDXhrt1nwwVqmRB
J7zIh/zM6FJJ35WpklqGbg+qL452LxeMig12gV8u6+fwxFjFAkrwwKXhKA81uI37
elW/K6Ne/z0f+bZn8oFtnur9+vDyqgl+DGa4MM16MgrNuRMZ9m6mi44D3ON8DsBc
muGxDlJIAOM03+FNVjJOOVzhZCmi1QhUnEN0+RUUqDtZr3fIwVdM4thpATQn/nTO
VPEQoYxgSo69+O+BVmJiv/XTDiT1nt224P9Wdqvi5zRqFgc8S/eqZKaJBDpubuEG
ls05o15XaKhY
-----END CERTIFICATE-----
Generated at Sat Jun 13 03:38:53 2026 by rpki-client