Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/34352e3233372e37332e302f32342d3332203d3e203631353931.roa
File:                     34352e3233372e37332e302f32342d3332203d3e203631353931.roa (raw, json)
Hash identifier:          M2AFQcGxO1pnzgmddmUKOvAPa3jnfhLwe8mYV5wZkgY=
Subject key identifier:   49:1D:4B:01:D7:82:CD:56:DC:A8:F1:E9:26:10:4E:EC:9C:FB:E2:C4
Certificate issuer:       /CN=14490FD591932776F2F5F6CFB3C5431550A04F62
Certificate serial:       1EF66CA0B3F9F756E88C10A5608716F0912F6965
Authority key identifier: 14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/34352e3233372e37332e302f32342d3332203d3e203631353931.roa
Signing time:             Mon 15 Jun 2026 21:00:00 +0000
ROA not before:           Mon 15 Jun 2026 20:55:00 +0000
ROA not after:            Mon 14 Jun 2027 21:00:00 +0000
asID:                     61591
IP address blocks:        45.237.73.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl
                          rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:f6:6c:a0:b3:f9:f7:56:e8:8c:10:a5:60:87:16:f0:91:2f:69:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14490FD591932776F2F5F6CFB3C5431550A04F62
        Validity
            Not Before: Jun 15 20:55:00 2026 GMT
            Not After : Jun 14 21:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bb:6e:cb:8a:83:59:ac:b9:a4:89:16:ea:4d:
                    95:3e:ec:6e:00:f6:47:10:d4:05:23:ae:14:5a:29:
                    73:b4:37:2f:54:71:60:c8:bd:05:85:dc:9b:f2:81:
                    09:ab:af:3a:36:eb:d9:8e:b8:38:6d:b9:36:0f:1a:
                    c6:85:c7:fb:4c:68:2a:43:f6:48:72:92:12:a5:d2:
                    b8:df:56:4f:20:b1:ac:b4:a6:5a:b5:55:7f:89:47:
                    f8:8e:a1:0f:00:32:51:b0:9e:9b:9b:a9:77:9d:d8:
                    27:40:dc:a6:7f:fa:ec:fd:78:2e:57:05:71:b9:0f:
                    62:01:56:aa:40:71:0c:02:01:76:7c:0b:12:b1:01:
                    7b:25:9b:f2:37:7b:b4:0e:ee:73:71:46:08:8c:d2:
                    b5:8e:09:09:65:3b:df:f4:28:e6:23:70:01:14:1a:
                    8a:1e:38:c6:dd:93:66:c9:af:97:a4:bf:b3:74:bc:
                    b7:e5:ca:a9:7a:f9:88:49:1a:e8:d0:7b:37:59:b4:
                    78:45:8b:2e:a7:be:71:22:14:ff:99:20:10:eb:15:
                    80:c8:f1:17:31:03:93:ec:03:83:3e:c8:ce:5e:5f:
                    fa:29:21:50:60:60:51:07:08:41:09:12:59:71:eb:
                    f3:96:9b:47:c7:c2:33:26:6f:72:35:ae:0b:0b:38:
                    dc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:1D:4B:01:D7:82:CD:56:DC:A8:F1:E9:26:10:4E:EC:9C:FB:E2:C4
            X509v3 Authority Key Identifier:
                keyid:14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/34352e3233372e37332e302f32342d3332203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:45:54:d4:75:6d:dd:bd:0c:35:8c:96:e0:c1:03:26:59:1a:
         9f:31:ce:e7:69:0a:e7:0d:e5:de:14:b3:b6:cb:61:95:d7:32:
         fa:b9:d0:ff:72:b9:1e:de:b3:fd:fe:92:cf:83:73:6f:7e:e6:
         5a:a1:44:a3:8f:d2:3d:22:8d:52:59:d4:8c:f2:d3:9d:9e:be:
         76:3a:99:d2:c6:2d:62:40:bd:43:0a:7e:83:89:07:b3:d4:4a:
         c0:9e:50:24:d7:ff:6a:a2:8a:ce:9b:79:5a:5b:1f:82:e5:41:
         cf:6b:3b:ce:eb:fe:c9:74:19:7a:4a:83:23:15:c2:a5:e2:35:
         58:f5:4a:8f:10:cd:0e:7e:4b:19:fe:b1:de:61:f3:17:df:6b:
         71:a1:9c:59:91:69:b6:9f:ca:37:67:1c:b2:2a:f3:67:89:e8:
         e7:c2:d3:da:9e:f1:17:c0:49:7c:53:57:b4:ed:4b:e7:ca:9a:
         b8:f4:52:52:07:27:6b:ab:3a:c2:f5:be:31:7a:f9:34:58:f8:
         20:89:83:39:69:fe:5c:f5:45:59:99:11:3a:18:78:94:84:2a:
         22:4e:50:e9:58:57:92:a7:b4:b8:e9:e8:65:1a:7d:75:fb:05:
         e1:42:00:33:c4:74:a9:9f:9f:9d:a0:9b:e1:ae:a9:2b:ee:5d:
         31:84:df:24
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUHvZsoLP591bojBClYIcW8JEvaWUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ0OTBGRDU5MTkzMjc3NkYyRjVGNkNGQjNDNTQzMTU1
MEEwNEY2MjAeFw0yNjA2MTUyMDU1MDBaFw0yNzA2MTQyMTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzhCQjZFQ0I4QTgzNTlBQ0I5
QTQ4OTE2RUE0RDk1M0VFQzZFMDBGNjQ3MTBENDA1MjNBRTE0NUEyOTczQjQzNzJG
NTQ3MTYwQzhCRDA1ODVEQzlCRjI4MTA5QUJBRjNBMzZFQkQ5OEVCODM4NkRCOTM2
MEYxQUM2ODVDN0ZCNEM2ODJBNDNGNjQ4NzI5MjEyQTVEMkI4REY1NjRGMjBCMUFD
QjRBNjVBQjU1NTdGODk0N0Y4OEVBMTBGMDAzMjUxQjA5RTlCOUJBOTc3OUREODI3
NDBEQ0E2N0ZGQUVDRkQ3ODJFNTcwNTcxQjkwRjYyMDE1NkFBNDA3MTBDMDIwMTc2
N0MwQjEyQjEwMTdCMjU5QkYyMzc3QkI0MEVFRTczNzE0NjA4OENEMkI1OEUwOTA5
NjUzQkRGRjQyOEU2MjM3MDAxMTQxQThBMUUzOEM2REQ5MzY2QzlBRjk3QTRCRkIz
NzRCQ0I3RTVDQUE5N0FGOTg4NDkxQUU4RDA3QjM3NTlCNDc4NDU4QjJFQTdCRTcx
MjIxNEZGOTkyMDEwRUIxNTgwQzhGMTE3MzEwMzkzRUMwMzgzM0VDOENFNUU1RkZB
MjkyMTUwNjA2MDUxMDcwODQxMDkxMjU5NzFFQkYzOTY5QjQ3QzdDMjMzMjY2Rjcy
MzVBRTBCMEIzOERDRTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyLtuy4qDWay5pIkW6k2VPuxuAPZHENQFI64UWilztDcvVHFgyL0F
hdyb8oEJq686NuvZjrg4bbk2DxrGhcf7TGgqQ/ZIcpISpdK431ZPILGstKZatVV/
iUf4jqEPADJRsJ6bm6l3ndgnQNymf/rs/XguVwVxuQ9iAVaqQHEMAgF2fAsSsQF7
JZvyN3u0Du5zcUYIjNK1jgkJZTvf9CjmI3ABFBqKHjjG3ZNmya+XpL+zdLy35cqp
evmISRro0Hs3WbR4RYsup75xIhT/mSAQ6xWAyPEXMQOT7AODPsjOXl/6KSFQYGBR
BwhBCRJZcevzlptHx8IzJm9yNa4LCzjc4QIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FEkdSwHXgs1W3Kjx6SYQTuyc++LEMB8GA1UdIwQYMBaAFBRJD9WRkyd28vX2z7PF
QxVQoE9iMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNFTlBEMkhld1E3NjRx
dFpOV3ZaNnRXeTd1TkJTelJrTlRNSmRqMThSYVBkLzEvMTQ0OTBGRDU5MTkzMjc3
NkYyRjVGNkNGQjNDNTQzMTU1MEEwNEY2Mi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNDQ5MEZENTkxOTMyNzc2RjJGNUY2Q0ZCM0M1NDMxNTUwQTA0
RjYyLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zRU5QRDJIZXdRNzY0cXRaTld2
WjZ0V3k3dU5CU3pSa05UTUpkajE4UmFQZC8xLzM0MzUyZTMyMzMzNzJlMzczMzJl
MzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM2MzEzNTM5MzEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAt7Ukw
DQYJKoZIhvcNAQELBQADggEBAHNFVNR1bd29DDWMluDBAyZZGp8xzudpCucN5d4U
s7bLYZXXMvq50P9yuR7es/3+ks+Dc29+5lqhRKOP0j0ijVJZ1Izy052evnY6mdLG
LWJAvUMKfoOJB7PUSsCeUCTX/2qiis6beVpbH4LlQc9rO87r/sl0GXpKgyMVwqXi
NVj1So8QzQ5+Sxn+sd5h8xffa3GhnFmRabafyjdnHLIq82eJ6OfC09qe8RfASXxT
V7TtS+fKmrj0UlIHJ2urOsL1vjF6+TRY+CCJgzlp/lz1RVmZEToYeJSEKiJOUOlY
V5KntLjp6GUafXX7BeFCADPEdKmfn52gm+GuqSvuXTGE3yQ=
-----END CERTIFICATE-----
Generated at Wed Jul 8 19:59:38 2026 by rpki-client