Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/34352e3137372e37362e302f32322d3332203d3e20323638393736.roa
File:                     34352e3137372e37362e302f32322d3332203d3e20323638393736.roa (raw, json)
Hash identifier:          eRZi2gioEXoapSlTEPun3VpJH5q/kspOmSdCl7mTofE=
Subject key identifier:   A3:7B:0B:8B:21:07:21:29:4A:87:99:2D:60:C7:F0:89:73:DE:C7:A2
Certificate issuer:       /CN=81693D2B616AFC0CE814A28BA2622B591A667447
Certificate serial:       01DD4E61EFAA99563622213395FCE1C5C3D1629D
Authority key identifier: 81:69:3D:2B:61:6A:FC:0C:E8:14:A2:8B:A2:62:2B:59:1A:66:74:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81693D2B616AFC0CE814A28BA2622B591A667447.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/34352e3137372e37362e302f32322d3332203d3e20323638393736.roa
Signing time:             Mon 06 Apr 2026 17:58:17 +0000
ROA not before:           Mon 06 Apr 2026 17:53:17 +0000
ROA not after:            Mon 05 Apr 2027 17:58:17 +0000
asID:                     268976
IP address blocks:        45.177.76.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/81693D2B616AFC0CE814A28BA2622B591A667447.crl
                          rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/81693D2B616AFC0CE814A28BA2622B591A667447.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81693D2B616AFC0CE814A28BA2622B591A667447.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 Apr 2026 07:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:dd:4e:61:ef:aa:99:56:36:22:21:33:95:fc:e1:c5:c3:d1:62:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81693D2B616AFC0CE814A28BA2622B591A667447
        Validity
            Not Before: Apr  6 17:53:17 2026 GMT
            Not After : Apr  5 17:58:17 2027 GMT
        Subject: CN=A37B0B8B210721294A87992D60C7F08973DEC7A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4d:84:04:c8:c1:fb:d8:97:61:1c:76:eb:f9:
                    dd:d6:af:3f:81:c1:de:58:23:a7:28:7b:ad:99:a7:
                    aa:d2:64:cc:6f:3a:76:34:f6:cc:24:c4:e8:2e:ec:
                    55:5d:30:37:2c:78:5b:cc:70:7a:21:59:d0:f1:98:
                    be:66:45:3c:9e:39:76:9f:a7:38:49:f5:b5:68:fc:
                    6b:0e:73:6f:99:a5:c0:45:7d:c8:1a:23:53:4c:7e:
                    d7:70:4d:d4:4f:c5:78:59:b7:26:5c:be:1d:31:de:
                    77:00:ee:b7:82:f3:de:83:cb:01:24:ea:85:4b:94:
                    89:76:e6:b1:35:f6:2a:d0:7f:e5:c1:1a:35:b3:c3:
                    95:40:d1:b8:21:76:9f:c3:d2:3a:23:d1:54:59:ce:
                    cb:27:62:db:a9:c9:ae:b3:be:0d:d9:7a:30:da:3f:
                    ff:75:8f:b1:50:02:db:c9:f7:1f:c1:9f:c7:a8:8f:
                    c1:9a:1d:4d:e9:30:48:b2:4d:7e:32:4e:ff:71:93:
                    f5:63:b6:13:3b:cc:72:c4:47:40:cc:6f:4c:b9:52:
                    4d:19:d5:03:73:b4:79:67:eb:24:41:45:6a:e2:65:
                    ba:3c:47:a4:ab:b2:1f:07:c3:d9:90:81:8a:9b:74:
                    2c:03:d1:91:17:65:df:3f:df:e0:97:80:39:d3:bd:
                    17:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7B:0B:8B:21:07:21:29:4A:87:99:2D:60:C7:F0:89:73:DE:C7:A2
            X509v3 Authority Key Identifier:
                keyid:81:69:3D:2B:61:6A:FC:0C:E8:14:A2:8B:A2:62:2B:59:1A:66:74:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/81693D2B616AFC0CE814A28BA2622B591A667447.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81693D2B616AFC0CE814A28BA2622B591A667447.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/34352e3137372e37362e302f32322d3332203d3e20323638393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:d7:f6:83:2d:e2:b4:ba:91:81:6b:26:4f:46:2a:03:7b:f5:
         5c:ec:91:2f:9a:c6:bb:80:57:86:48:ce:58:0e:40:ad:89:e6:
         d9:02:7a:a5:07:d2:8f:d3:37:74:84:9d:90:24:c6:f7:40:50:
         bd:21:dc:0f:9f:10:17:71:78:71:8b:5e:96:27:fa:28:6c:a8:
         b3:5d:eb:f8:a7:f9:81:0c:53:3f:c6:6b:a5:16:90:71:c6:c8:
         2c:7b:55:a6:df:39:97:5b:36:ce:24:c3:d5:39:ea:11:b6:94:
         b1:c4:17:8f:c4:1f:86:5e:e1:d1:8f:87:d9:4b:a0:57:47:6e:
         b5:a4:69:a3:ce:5c:7a:bc:fc:97:86:64:0a:ad:6a:02:a3:fd:
         fd:53:06:4e:ac:bc:ee:23:5a:04:d5:36:7a:3d:0f:21:0e:f8:
         c0:93:2c:0b:75:8f:08:dc:3a:eb:55:51:b3:3d:0a:24:eb:30:
         7d:37:dc:83:ef:ab:93:49:02:d8:80:a9:31:17:b4:7e:fa:99:
         fe:27:da:06:f9:26:e7:8e:70:4a:15:01:16:30:a2:1a:bb:d5:
         c2:f6:a7:ff:ac:12:d7:97:1c:91:15:51:b7:c0:b7:7f:75:6a:
         2f:cb:bd:33:e8:2c:dc:e3:d8:bb:c5:70:ab:02:68:85:29:1e:
         f4:30:1d:5c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUAd1OYe+qmVY2IiEzlfzhxcPRYp0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE2OTNEMkI2MTZBRkMwQ0U4MTRBMjhCQTI2MjJCNTkx
QTY2NzQ0NzAeFw0yNjA0MDYxNzUzMTdaFw0yNzA0MDUxNzU4MTdaMDMxMTAvBgNV
BAMTKEEzN0IwQjhCMjEwNzIxMjk0QTg3OTkyRDYwQzdGMDg5NzNERUM3QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3TYQEyMH72JdhHHbr+d3Wrz+B
wd5YI6coe62Zp6rSZMxvOnY09swkxOgu7FVdMDcseFvMcHohWdDxmL5mRTyeOXaf
pzhJ9bVo/GsOc2+ZpcBFfcgaI1NMftdwTdRPxXhZtyZcvh0x3ncA7reC896DywEk
6oVLlIl25rE19irQf+XBGjWzw5VA0bghdp/D0joj0VRZzssnYtupya6zvg3ZejDa
P/91j7FQAtvJ9x/Bn8eoj8GaHU3pMEiyTX4yTv9xk/VjthM7zHLER0DMb0y5Uk0Z
1QNztHln6yRBRWriZbo8R6Srsh8Hw9mQgYqbdCwD0ZEXZd8/3+CXgDnTvRe3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUo3sLiyEHISlKh5ktYMfwiXPex6IwHwYDVR0j
BBgwFoAUgWk9K2Fq/AzoFKKLomIrWRpmdEcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1dFQUZOS1lERkpSdWtuZW1QWTk1clZSYWJSNzZ5V1pxVFhVSjN5NkFk
N1QvMC84MTY5M0QyQjYxNkFGQzBDRTgxNEEyOEJBMjYyMkI1OTFBNjY3NDQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgxNjkzRDJCNjE2QUZDMENF
ODE0QTI4QkEyNjIyQjU5MUE2Njc0NDcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNXRUFGTktZREZKUnVrbmVtUFk5NXJWUmFiUjc2eVdacVRYVUozeTZBZDdULzAv
MzQzNTJlMzEzNzM3MmUzNzM2MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzkzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLbFMMA0GCSqGSIb3DQEBCwUAA4IBAQBV1/aDLeK0
upGBayZPRioDe/Vc7JEvmsa7gFeGSM5YDkCtiebZAnqlB9KP0zd0hJ2QJMb3QFC9
IdwPnxAXcXhxi16WJ/oobKizXev4p/mBDFM/xmulFpBxxsgse1Wm3zmXWzbOJMPV
OeoRtpSxxBePxB+GXuHRj4fZS6BXR261pGmjzlx6vPyXhmQKrWoCo/39UwZOrLzu
I1oE1TZ6PQ8hDvjAkywLdY8I3DrrVVGzPQok6zB9N9yD76uTSQLYgKkxF7R++pn+
J9oG+SbnjnBKFQEWMKIau9XC9qf/rBLXlxyRFVG3wLd/dWovy70z6Czc49i7xXCr
AmiFKR70MB1c
-----END CERTIFICATE-----
Generated at Sat Apr 11 09:19:56 2026 by rpki-client