Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/932y4LNeNTjz62TqFVizhW86XdpQ5AX9rvYvp2E6YKWy/0/34352e372e3139302e302f32332d3233203d3e20323636353935.roa
File:                     34352e372e3139302e302f32332d3233203d3e20323636353935.roa (raw, json)
Hash identifier:          0nAAH4Agdt+9ZMGPdu6nvh8SzV4Jkll5JPQrtg4VPCQ=
Subject key identifier:   25:5C:36:E2:81:17:70:16:62:D3:42:40:D1:A3:9B:62:10:14:DE:9F
Certificate issuer:       /CN=D4EBD516EDA5695A312080AA7A8A1FD3DC9CC18A
Certificate serial:       4A51A7E69F4AC3142D30EE33D49ED5EC536F8984
Authority key identifier: D4:EB:D5:16:ED:A5:69:5A:31:20:80:AA:7A:8A:1F:D3:DC:9C:C1:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4EBD516EDA5695A312080AA7A8A1FD3DC9CC18A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/932y4LNeNTjz62TqFVizhW86XdpQ5AX9rvYvp2E6YKWy/0/34352e372e3139302e302f32332d3233203d3e20323636353935.roa
Signing time:             Wed 13 May 2026 19:22:08 +0000
ROA not before:           Wed 13 May 2026 19:17:08 +0000
ROA not after:            Wed 12 May 2027 19:22:08 +0000
asID:                     266595
IP address blocks:        45.7.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/932y4LNeNTjz62TqFVizhW86XdpQ5AX9rvYvp2E6YKWy/0/D4EBD516EDA5695A312080AA7A8A1FD3DC9CC18A.crl
                          rsync://rpki-repo.registro.br/repo/932y4LNeNTjz62TqFVizhW86XdpQ5AX9rvYvp2E6YKWy/0/D4EBD516EDA5695A312080AA7A8A1FD3DC9CC18A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4EBD516EDA5695A312080AA7A8A1FD3DC9CC18A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 12:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:51:a7:e6:9f:4a:c3:14:2d:30:ee:33:d4:9e:d5:ec:53:6f:89:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4EBD516EDA5695A312080AA7A8A1FD3DC9CC18A
        Validity
            Not Before: May 13 19:17:08 2026 GMT
            Not After : May 12 19:22:08 2027 GMT
        Subject: CN=255C36E28117701662D34240D1A39B621014DE9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:59:de:a2:b8:76:96:1f:4b:7e:6e:d0:77:4e:
                    33:a3:4a:76:1b:92:d8:73:8a:11:2e:55:d1:80:07:
                    91:c4:e0:4d:6c:5c:63:7e:9b:2b:96:19:06:02:1f:
                    f6:8c:5c:3c:f4:fb:82:f2:a3:22:a5:ac:69:8f:c3:
                    17:4b:ee:d5:be:fa:f1:4e:72:8e:ab:62:36:91:1f:
                    5f:7a:8c:c7:67:38:d5:2b:0e:2e:77:2c:a2:c5:ff:
                    80:02:d4:cd:68:33:f6:ce:b4:73:22:0c:5d:21:35:
                    ef:04:9b:77:35:99:c2:0a:ee:30:e5:95:3e:42:c2:
                    f1:89:c3:9f:d3:b9:31:75:ba:e2:13:5c:3d:ae:a9:
                    cb:3a:ae:f5:56:94:8a:9e:a4:f5:e9:07:06:0e:96:
                    a8:fc:6d:51:8c:8e:6b:d5:fb:f6:83:68:2d:df:40:
                    c9:2a:70:68:d7:29:4e:6d:1b:57:2f:e8:95:0a:5d:
                    51:35:4c:2e:a2:ef:1d:09:1c:db:22:1d:1b:fe:34:
                    b2:89:35:6f:76:b4:26:cb:9e:ae:ec:46:5f:10:bc:
                    ee:64:dc:37:89:0f:5f:59:9e:ba:05:09:53:bc:17:
                    14:0e:b3:8e:7a:39:60:b0:87:c6:e1:37:13:48:17:
                    e8:ac:1c:ba:1a:99:67:96:08:e7:57:36:a3:9a:91:
                    10:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5C:36:E2:81:17:70:16:62:D3:42:40:D1:A3:9B:62:10:14:DE:9F
            X509v3 Authority Key Identifier:
                keyid:D4:EB:D5:16:ED:A5:69:5A:31:20:80:AA:7A:8A:1F:D3:DC:9C:C1:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/932y4LNeNTjz62TqFVizhW86XdpQ5AX9rvYvp2E6YKWy/0/D4EBD516EDA5695A312080AA7A8A1FD3DC9CC18A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4EBD516EDA5695A312080AA7A8A1FD3DC9CC18A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/932y4LNeNTjz62TqFVizhW86XdpQ5AX9rvYvp2E6YKWy/0/34352e372e3139302e302f32332d3233203d3e20323636353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:10:e3:b3:d7:e3:b5:99:47:09:2a:54:9e:3b:de:06:92:16:
         dc:6c:f5:b6:5c:cc:6a:6d:2e:c4:cf:d5:15:6e:b6:ef:1a:f4:
         07:84:a0:0e:fa:a7:b3:2f:24:e3:47:74:56:c9:7b:c5:df:73:
         bf:be:c2:35:04:d8:47:af:b0:94:8a:68:9f:fe:3d:76:02:f6:
         23:20:5d:d2:8b:9b:4f:3b:a6:af:c7:df:23:45:58:fd:cc:44:
         de:b7:26:7e:f4:ab:9d:4a:2a:06:00:68:9b:e2:7e:4c:41:a9:
         f8:9a:ca:c2:1d:c0:c3:bd:51:35:aa:e4:ab:e5:c4:bc:98:47:
         e5:b5:87:09:2f:f3:e6:44:c4:18:ad:16:a9:8f:12:fd:d3:ad:
         a4:56:95:f4:ad:d6:d6:ea:fe:b6:11:17:b7:28:37:78:fe:7e:
         90:55:53:88:54:5d:2a:b0:de:a7:62:18:47:76:03:cc:c8:81:
         23:47:d9:37:48:6f:83:e4:40:78:8c:a6:77:de:21:70:f3:af:
         3b:d0:ab:73:f1:77:a6:b0:7e:5e:4b:de:5f:48:0d:ee:57:bc:
         04:01:e9:f7:ac:84:a3:bf:ab:64:79:49:bd:ad:5d:8a:3e:aa:
         fe:e6:5b:f6:e4:85:00:73:b8:92:5b:c4:23:73:0b:ac:5a:69:
         c5:28:7b:8d
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUSlGn5p9KwxQtMO4z1J7V7FNviYQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDRFQkQ1MTZFREE1Njk1QTMxMjA4MEFBN0E4QTFGRDNE
QzlDQzE4QTAeFw0yNjA1MTMxOTE3MDhaFw0yNzA1MTIxOTIyMDhaMDMxMTAvBgNV
BAMTKDI1NUMzNkUyODExNzcwMTY2MkQzNDI0MEQxQTM5QjYyMTAxNERFOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyWd6iuHaWH0t+btB3TjOjSnYb
kthzihEuVdGAB5HE4E1sXGN+myuWGQYCH/aMXDz0+4LyoyKlrGmPwxdL7tW++vFO
co6rYjaRH196jMdnONUrDi53LKLF/4AC1M1oM/bOtHMiDF0hNe8Em3c1mcIK7jDl
lT5CwvGJw5/TuTF1uuITXD2uqcs6rvVWlIqepPXpBwYOlqj8bVGMjmvV+/aDaC3f
QMkqcGjXKU5tG1cv6JUKXVE1TC6i7x0JHNsiHRv+NLKJNW92tCbLnq7sRl8QvO5k
3DeJD19ZnroFCVO8FxQOs456OWCwh8bhNxNIF+isHLoamWeWCOdXNqOakRABAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUJVw24oEXcBZi00JA0aObYhAU3p8wHwYDVR0j
BBgwFoAU1OvVFu2laVoxIICqeoof09ycwYowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTMyeTRMTmVOVGp6NjJUcUZWaXpoVzg2WGRwUTVBWDlydll2cDJFNllL
V3kvMC9ENEVCRDUxNkVEQTU2OTVBMzEyMDgwQUE3QThBMUZEM0RDOUNDMThBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0RUJENTE2RURBNTY5NUEz
MTIwODBBQTdBOEExRkQzREM5Q0MxOEEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzkzMnk0TE5lTlRqejYyVHFGVml6aFc4NlhkcFE1QVg5cnZZdnAyRTZZS1d5LzAv
MzQzNTJlMzcyZTMxMzkzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzNjM1
MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAS0HvjANBgkqhkiG9w0BAQsFAAOCAQEAmRDjs9fjtZlH
CSpUnjveBpIW3Gz1tlzMam0uxM/VFW627xr0B4SgDvqnsy8k40d0Vsl7xd9zv77C
NQTYR6+wlIpon/49dgL2IyBd0oubTzumr8ffI0VY/cxE3rcmfvSrnUoqBgBom+J+
TEGp+JrKwh3Aw71RNarkq+XEvJhH5bWHCS/z5kTEGK0WqY8S/dOtpFaV9K3W1ur+
thEXtyg3eP5+kFVTiFRdKrDep2IYR3YDzMiBI0fZN0hvg+RAeIymd94hcPOvO9Cr
c/F3prB+XkveX0gN7le8BAHp96yEo7+rZHlJva1dij6q/uZb9uSFAHO4klvEI3ML
rFppxSh7jQ==
-----END CERTIFICATE-----
Generated at Sun May 24 14:06:30 2026 by rpki-client