Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/34352e3233372e37342e302f32332d3233203d3e203631353931.roa
File:                     34352e3233372e37342e302f32332d3233203d3e203631353931.roa (raw, json)
Hash identifier:          IsOgebmJPk2jcWddE+7KRgcnQpCiyNXpu2THzgoJcaY=
Subject key identifier:   EB:31:02:8D:C9:C3:3B:01:DA:23:B5:7B:BA:99:7F:42:6A:E4:74:BE
Certificate issuer:       /CN=14490FD591932776F2F5F6CFB3C5431550A04F62
Certificate serial:       16FD89438EBD8D508BB1C3D2B7A3EC9110DB2F04
Authority key identifier: 14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/34352e3233372e37342e302f32332d3233203d3e203631353931.roa
Signing time:             Mon 15 Jun 2026 21:00:00 +0000
ROA not before:           Mon 15 Jun 2026 20:55:00 +0000
ROA not after:            Mon 14 Jun 2027 21:00:00 +0000
asID:                     61591
IP address blocks:        45.237.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl
                          rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:fd:89:43:8e:bd:8d:50:8b:b1:c3:d2:b7:a3:ec:91:10:db:2f:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14490FD591932776F2F5F6CFB3C5431550A04F62
        Validity
            Not Before: Jun 15 20:55:00 2026 GMT
            Not After : Jun 14 21:00:00 2027 GMT
        Subject: CN=3082010A0282010100C073EEFE568D9738A6AE541B1D916C95F5F879D8DD3CE62852B17C99A0FAF85D4ABDE7F5FC6D975E691792D49E4ACB654FCF461C6CC575E345FB9B58BBF0605955EACAB1AC41AF5A795C9052638BC69A03EF010F69941FF57E7CB03DAA52CCDE58F8446EA057CB147764BE9EAF2533AB8C9E75EE5E8A01E1E88F1F2099F0900C5E2E4523D663E5E0F915E3F341ED71D9DABBA3D14D0A929E06769F9B4BE592367700B1B699DB6934C76A6A11B2FAB5E591F1CEB69AED201C5F82793B2ECBE5D569419D57C7F5B4B21C7DC164836E174B94FAF035592D985375418861813E5F1DDBE526896BE131E688AA74E7C278D75818213E36F156B5AAB5BFF8FEE4A79F470203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:73:ee:fe:56:8d:97:38:a6:ae:54:1b:1d:91:
                    6c:95:f5:f8:79:d8:dd:3c:e6:28:52:b1:7c:99:a0:
                    fa:f8:5d:4a:bd:e7:f5:fc:6d:97:5e:69:17:92:d4:
                    9e:4a:cb:65:4f:cf:46:1c:6c:c5:75:e3:45:fb:9b:
                    58:bb:f0:60:59:55:ea:ca:b1:ac:41:af:5a:79:5c:
                    90:52:63:8b:c6:9a:03:ef:01:0f:69:94:1f:f5:7e:
                    7c:b0:3d:aa:52:cc:de:58:f8:44:6e:a0:57:cb:14:
                    77:64:be:9e:af:25:33:ab:8c:9e:75:ee:5e:8a:01:
                    e1:e8:8f:1f:20:99:f0:90:0c:5e:2e:45:23:d6:63:
                    e5:e0:f9:15:e3:f3:41:ed:71:d9:da:bb:a3:d1:4d:
                    0a:92:9e:06:76:9f:9b:4b:e5:92:36:77:00:b1:b6:
                    99:db:69:34:c7:6a:6a:11:b2:fa:b5:e5:91:f1:ce:
                    b6:9a:ed:20:1c:5f:82:79:3b:2e:cb:e5:d5:69:41:
                    9d:57:c7:f5:b4:b2:1c:7d:c1:64:83:6e:17:4b:94:
                    fa:f0:35:59:2d:98:53:75:41:88:61:81:3e:5f:1d:
                    db:e5:26:89:6b:e1:31:e6:88:aa:74:e7:c2:78:d7:
                    58:18:21:3e:36:f1:56:b5:aa:b5:bf:f8:fe:e4:a7:
                    9f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:31:02:8D:C9:C3:3B:01:DA:23:B5:7B:BA:99:7F:42:6A:E4:74:BE
            X509v3 Authority Key Identifier:
                keyid:14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/34352e3233372e37342e302f32332d3233203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:f0:ef:d9:09:98:76:4d:66:92:5b:e2:b8:08:cf:42:a8:b4:
         15:b6:fe:29:65:9d:97:16:51:4b:36:78:15:a6:a8:27:c4:d5:
         aa:48:d6:ce:1f:e2:43:4d:07:2c:65:c1:a8:aa:c5:dd:a5:00:
         c5:25:e7:8b:c7:99:16:69:ed:09:fe:2b:66:a1:f8:2f:e7:fd:
         2f:34:30:24:e7:17:12:97:eb:5b:19:07:85:3a:d9:31:97:4f:
         ea:85:2c:a1:9b:2c:de:b3:66:65:14:9b:f5:d7:94:56:4d:c1:
         fe:db:e6:2b:35:eb:9a:42:ef:a5:b7:1b:cc:b2:1f:52:b5:49:
         37:73:ce:94:49:b4:c1:10:58:f3:94:17:08:a4:b2:61:65:b1:
         ee:6d:cb:0f:76:32:4c:26:cf:fe:23:2a:03:08:95:16:6a:f3:
         43:87:fe:61:18:84:65:29:ea:24:5c:a8:a4:0d:60:26:41:30:
         3c:37:67:9c:da:3e:54:51:ea:ea:b9:a3:4d:19:22:73:c9:0a:
         f8:24:e2:6a:d6:07:43:55:41:3f:ce:e3:ee:bf:a7:2c:13:1a:
         89:28:97:14:b0:98:f0:39:18:68:cc:82:1e:a7:ad:da:44:2c:
         0b:98:5f:bc:65:d7:fa:b2:42:8d:1b:e3:ac:18:f7:73:bb:0a:
         3b:33:95:06
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUFv2JQ469jVCLscPSt6PskRDbLwQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ0OTBGRDU5MTkzMjc3NkYyRjVGNkNGQjNDNTQzMTU1
MEEwNEY2MjAeFw0yNjA2MTUyMDU1MDBaFw0yNzA2MTQyMTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzA3M0VFRkU1NjhEOTczOEE2
QUU1NDFCMUQ5MTZDOTVGNUY4NzlEOEREM0NFNjI4NTJCMTdDOTlBMEZBRjg1RDRB
QkRFN0Y1RkM2RDk3NUU2OTE3OTJENDlFNEFDQjY1NEZDRjQ2MUM2Q0M1NzVFMzQ1
RkI5QjU4QkJGMDYwNTk1NUVBQ0FCMUFDNDFBRjVBNzk1QzkwNTI2MzhCQzY5QTAz
RUYwMTBGNjk5NDFGRjU3RTdDQjAzREFBNTJDQ0RFNThGODQ0NkVBMDU3Q0IxNDc3
NjRCRTlFQUYyNTMzQUI4QzlFNzVFRTVFOEEwMUUxRTg4RjFGMjA5OUYwOTAwQzVF
MkU0NTIzRDY2M0U1RTBGOTE1RTNGMzQxRUQ3MUQ5REFCQkEzRDE0RDBBOTI5RTA2
NzY5RjlCNEJFNTkyMzY3NzAwQjFCNjk5REI2OTM0Qzc2QTZBMTFCMkZBQjVFNTkx
RjFDRUI2OUFFRDIwMUM1RjgyNzkzQjJFQ0JFNUQ1Njk0MTlENTdDN0Y1QjRCMjFD
N0RDMTY0ODM2RTE3NEI5NEZBRjAzNTU5MkQ5ODUzNzU0MTg4NjE4MTNFNUYxRERC
RTUyNjg5NkJFMTMxRTY4OEFBNzRFN0MyNzhENzU4MTgyMTNFMzZGMTU2QjVBQUI1
QkZGOEZFRTRBNzlGNDcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwHPu/laNlzimrlQbHZFslfX4edjdPOYoUrF8maD6+F1Kvef1/G2X
XmkXktSeSstlT89GHGzFdeNF+5tYu/BgWVXqyrGsQa9aeVyQUmOLxpoD7wEPaZQf
9X58sD2qUszeWPhEbqBXyxR3ZL6eryUzq4yede5eigHh6I8fIJnwkAxeLkUj1mPl
4PkV4/NB7XHZ2ruj0U0Kkp4Gdp+bS+WSNncAsbaZ22k0x2pqEbL6teWR8c62mu0g
HF+CeTsuy+XVaUGdV8f1tLIcfcFkg24XS5T68DVZLZhTdUGIYYE+Xx3b5SaJa+Ex
5oiqdOfCeNdYGCE+NvFWtaq1v/j+5KefRwIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FOsxAo3JwzsB2iO1e7qZf0Jq5HS+MB8GA1UdIwQYMBaAFBRJD9WRkyd28vX2z7PF
QxVQoE9iMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNFTlBEMkhld1E3NjRx
dFpOV3ZaNnRXeTd1TkJTelJrTlRNSmRqMThSYVBkLzEvMTQ0OTBGRDU5MTkzMjc3
NkYyRjVGNkNGQjNDNTQzMTU1MEEwNEY2Mi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNDQ5MEZENTkxOTMyNzc2RjJGNUY2Q0ZCM0M1NDMxNTUwQTA0
RjYyLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zRU5QRDJIZXdRNzY0cXRaTld2
WjZ0V3k3dU5CU3pSa05UTUpkajE4UmFQZC8xLzM0MzUyZTMyMzMzNzJlMzczNDJl
MzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM2MzEzNTM5MzEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEt7Uow
DQYJKoZIhvcNAQELBQADggEBAAXw79kJmHZNZpJb4rgIz0KotBW2/illnZcWUUs2
eBWmqCfE1apI1s4f4kNNByxlwaiqxd2lAMUl54vHmRZp7Qn+K2ah+C/n/S80MCTn
FxKX61sZB4U62TGXT+qFLKGbLN6zZmUUm/XXlFZNwf7b5is165pC76W3G8yyH1K1
STdzzpRJtMEQWPOUFwiksmFlse5tyw92Mkwmz/4jKgMIlRZq80OH/mEYhGUp6iRc
qKQNYCZBMDw3Z5zaPlRR6uq5o00ZInPJCvgk4mrWB0NVQT/O4+6/pywTGokolxSw
mPA5GGjMgh6nrdpELAuYX7xl1/qyQo0b46wY93O7CjszlQY=
-----END CERTIFICATE-----
Generated at Wed Jul 8 17:08:36 2026 by rpki-client