Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/34352e3233332e3232372e302f32342d3234203d3e20323637333330.roa
File:                     34352e3233332e3232372e302f32342d3234203d3e20323637333330.roa (raw, json)
Hash identifier:          AwEZFQofs5Qi+SWwUMmc0TxzjKK8c08RbMGatZAUANU=
Subject key identifier:   C6:74:41:00:4E:68:04:27:CA:0E:C3:52:12:DE:EE:00:BD:CB:19:85
Certificate issuer:       /CN=0A467B137635F43F91188ECBB9D30961A5B090C1
Certificate serial:       060C53AEE0E0D752EFAD77AAC7D6A92B118C6117
Authority key identifier: 0A:46:7B:13:76:35:F4:3F:91:18:8E:CB:B9:D3:09:61:A5:B0:90:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A467B137635F43F91188ECBB9D30961A5B090C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/34352e3233332e3232372e302f32342d3234203d3e20323637333330.roa
Signing time:             Thu 02 Apr 2026 13:04:05 +0000
ROA not before:           Thu 02 Apr 2026 12:59:05 +0000
ROA not after:            Thu 01 Apr 2027 13:04:05 +0000
asID:                     267330
IP address blocks:        45.233.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/0A467B137635F43F91188ECBB9D30961A5B090C1.crl
                          rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/0A467B137635F43F91188ECBB9D30961A5B090C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A467B137635F43F91188ECBB9D30961A5B090C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 01:40:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:0c:53:ae:e0:e0:d7:52:ef:ad:77:aa:c7:d6:a9:2b:11:8c:61:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A467B137635F43F91188ECBB9D30961A5B090C1
        Validity
            Not Before: Apr  2 12:59:05 2026 GMT
            Not After : Apr  1 13:04:05 2027 GMT
        Subject: CN=C67441004E680427CA0EC35212DEEE00BDCB1985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:87:be:8f:80:47:60:d1:42:ed:b7:3f:78:f9:
                    f6:8a:7f:bd:04:6e:31:cc:9f:18:e7:2f:1a:88:c0:
                    90:67:4e:92:d0:01:b6:74:1a:a8:a6:b3:94:97:ed:
                    98:8b:f3:53:41:f6:0a:89:10:97:3a:00:d9:cb:3b:
                    fb:ec:c5:0e:1c:d0:04:e5:97:26:55:1e:b7:b6:18:
                    ca:8e:5e:3a:19:ab:eb:aa:dd:e4:7b:2b:88:48:3d:
                    db:4b:67:28:62:dd:7b:da:7f:48:81:2b:6c:8d:92:
                    ed:b2:81:7c:76:62:60:c1:30:14:84:a8:fc:21:39:
                    75:86:db:41:8b:80:37:8e:ae:19:de:85:b1:57:1e:
                    ec:4b:ae:70:6f:c8:35:10:5b:56:06:8e:3a:22:f4:
                    6b:f2:42:17:96:bc:8c:f2:99:cc:0b:99:76:1e:07:
                    e2:54:a0:60:9f:74:99:b1:a0:b1:d9:f4:91:7c:87:
                    c0:ab:10:bc:25:b4:99:de:bf:a8:3e:5f:35:b4:58:
                    7a:0d:c7:92:22:92:c6:13:3a:0b:4c:f1:ba:d1:c8:
                    4a:70:58:5b:65:14:0b:8b:1e:cf:5a:d3:8e:be:97:
                    6c:2f:62:51:1a:10:61:5c:89:85:67:c3:44:dd:11:
                    c0:32:ae:13:b2:75:d3:b3:b0:ae:b3:c2:c5:e2:54:
                    bb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:74:41:00:4E:68:04:27:CA:0E:C3:52:12:DE:EE:00:BD:CB:19:85
            X509v3 Authority Key Identifier:
                keyid:0A:46:7B:13:76:35:F4:3F:91:18:8E:CB:B9:D3:09:61:A5:B0:90:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/0A467B137635F43F91188ECBB9D30961A5B090C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A467B137635F43F91188ECBB9D30961A5B090C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/34352e3233332e3232372e302f32342d3234203d3e20323637333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:13:ff:82:7c:99:cd:e2:cb:e0:cc:4f:6c:15:0d:4f:f2:27:
         b5:eb:17:38:1a:97:88:c5:e5:4d:45:c2:0c:16:c3:6d:a2:eb:
         d9:60:6d:b8:b4:d9:cc:d8:d6:58:5f:27:95:db:93:cc:6c:6f:
         e0:b3:a3:25:03:cd:76:8c:66:01:87:bf:74:42:5c:23:bf:e2:
         cd:7c:a9:60:44:67:4d:35:e8:eb:64:33:bd:df:bd:bc:5f:74:
         80:3a:c7:74:c6:17:0d:e0:bc:93:99:e4:48:ec:a5:54:54:8e:
         b8:5b:77:75:5d:72:f4:4d:a9:14:6a:6d:7a:4a:bf:33:b2:ed:
         c7:78:06:ab:cd:cb:32:7c:aa:61:83:d5:be:90:de:34:b7:2e:
         22:ce:4e:16:81:82:57:27:8f:e8:74:0c:ef:ca:04:44:1b:a8:
         cf:2a:45:25:b9:d4:2e:0c:85:20:dd:96:9c:30:27:f5:85:d9:
         29:ca:5a:2f:32:3c:09:31:2b:99:99:b5:2a:d0:b3:cb:8b:b9:
         53:e7:cc:31:37:ee:ec:5e:d8:da:09:ab:b3:dd:69:15:90:39:
         87:2b:f1:2f:b7:cf:c2:fb:90:b8:18:c8:17:11:c0:d6:8d:a3:
         e2:ef:95:2c:cf:66:d6:e9:64:22:a3:7f:63:74:04:fa:aa:d6:
         e0:c8:c0:41
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBgxTruDg11LvrXeqx9apKxGMYRcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEE0NjdCMTM3NjM1RjQzRjkxMTg4RUNCQjlEMzA5NjFB
NUIwOTBDMTAeFw0yNjA0MDIxMjU5MDVaFw0yNzA0MDExMzA0MDVaMDMxMTAvBgNV
BAMTKEM2NzQ0MTAwNEU2ODA0MjdDQTBFQzM1MjEyREVFRTAwQkRDQjE5ODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbh76PgEdg0ULttz94+faKf70E
bjHMnxjnLxqIwJBnTpLQAbZ0Gqims5SX7ZiL81NB9gqJEJc6ANnLO/vsxQ4c0ATl
lyZVHre2GMqOXjoZq+uq3eR7K4hIPdtLZyhi3Xvaf0iBK2yNku2ygXx2YmDBMBSE
qPwhOXWG20GLgDeOrhnehbFXHuxLrnBvyDUQW1YGjjoi9GvyQheWvIzymcwLmXYe
B+JUoGCfdJmxoLHZ9JF8h8CrELwltJnev6g+XzW0WHoNx5IiksYTOgtM8brRyEpw
WFtlFAuLHs9a046+l2wvYlEaEGFciYVnw0TdEcAyrhOyddOzsK6zwsXiVLv9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUxnRBAE5oBCfKDsNSEt7uAL3LGYUwHwYDVR0j
BBgwFoAUCkZ7E3Y19D+RGI7LudMJYaWwkMEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFExc3ZMYW9vQXpvb0Rua2dwc2ozSjM4Rkx2dXhwa3JFdTZieXdzOFpD
TGgvMC8wQTQ2N0IxMzc2MzVGNDNGOTExODhFQ0JCOUQzMDk2MUE1QjA5MEMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBNDY3QjEzNzYzNUY0M0Y5
MTE4OEVDQkI5RDMwOTYxQTVCMDkwQzEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RRMXN2TGFvb0F6b29EbmtncHNqM0ozOEZMdnV4cGtyRXU2Ynl3czhaQ0xoLzAv
MzQzNTJlMzIzMzMzMmUzMjMyMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczMzMzMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt6eMwDQYJKoZIhvcNAQELBQADggEBAJYT/4J8
mc3iy+DMT2wVDU/yJ7XrFzgal4jF5U1FwgwWw22i69lgbbi02czY1lhfJ5Xbk8xs
b+CzoyUDzXaMZgGHv3RCXCO/4s18qWBEZ0016OtkM73fvbxfdIA6x3TGFw3gvJOZ
5EjspVRUjrhbd3VdcvRNqRRqbXpKvzOy7cd4BqvNyzJ8qmGD1b6Q3jS3LiLOThaB
glcnj+h0DO/KBEQbqM8qRSW51C4MhSDdlpwwJ/WF2SnKWi8yPAkxK5mZtSrQs8uL
uVPnzDE37uxe2NoJq7PdaRWQOYcr8S+3z8L7kLgYyBcRwNaNo+LvlSzPZtbpZCKj
f2N0BPqq1uDIwEE=
-----END CERTIFICATE-----
Generated at Wed Apr 8 06:38:24 2026 by rpki-client