Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QUc4oD4aNborng5G3kuB1umDUeCErLBAPMoGygqEzPB/0/34352e37302e39322e302f32332d3233203d3e20323637363136.roa
File:                     34352e37302e39322e302f32332d3233203d3e20323637363136.roa (raw, json)
Hash identifier:          R+ecnsRR+zvoDKE/C9QJODe1oW3sCOgJa96J5Wt7Jvs=
Subject key identifier:   85:CC:E5:C0:59:06:78:DC:FE:99:DF:D3:80:40:2E:C5:9B:D8:B8:64
Certificate issuer:       /CN=06AC590B87FF90201CF77F6DCA5E49EDAA1E1037
Certificate serial:       53A629CA97CB58543DE46AAECC40FEB1CB7903A6
Authority key identifier: 06:AC:59:0B:87:FF:90:20:1C:F7:7F:6D:CA:5E:49:ED:AA:1E:10:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06AC590B87FF90201CF77F6DCA5E49EDAA1E1037.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QUc4oD4aNborng5G3kuB1umDUeCErLBAPMoGygqEzPB/0/34352e37302e39322e302f32332d3233203d3e20323637363136.roa
Signing time:             Mon 30 Mar 2026 19:02:27 +0000
ROA not before:           Mon 30 Mar 2026 18:57:27 +0000
ROA not after:            Mon 29 Mar 2027 19:02:27 +0000
asID:                     267616
IP address blocks:        45.70.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9QUc4oD4aNborng5G3kuB1umDUeCErLBAPMoGygqEzPB/0/06AC590B87FF90201CF77F6DCA5E49EDAA1E1037.crl
                          rsync://rpki-repo.registro.br/repo/9QUc4oD4aNborng5G3kuB1umDUeCErLBAPMoGygqEzPB/0/06AC590B87FF90201CF77F6DCA5E49EDAA1E1037.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06AC590B87FF90201CF77F6DCA5E49EDAA1E1037.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 04:10:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a6:29:ca:97:cb:58:54:3d:e4:6a:ae:cc:40:fe:b1:cb:79:03:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06AC590B87FF90201CF77F6DCA5E49EDAA1E1037
        Validity
            Not Before: Mar 30 18:57:27 2026 GMT
            Not After : Mar 29 19:02:27 2027 GMT
        Subject: CN=85CCE5C0590678DCFE99DFD380402EC59BD8B864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1d:58:1d:78:5b:39:20:02:d2:39:7e:3a:24:
                    d4:82:f2:7c:9e:d1:fa:69:47:6b:5e:6b:eb:f3:65:
                    72:f4:5d:82:41:cf:5b:39:8a:fa:3c:71:b2:3b:9c:
                    1c:d6:34:14:77:57:30:a6:fb:05:7e:7c:89:ec:80:
                    94:f7:23:ff:d7:a1:23:ff:48:cc:00:da:bb:47:3a:
                    32:47:12:12:26:81:29:5b:a5:a2:9d:3f:39:06:89:
                    67:92:ad:0e:ec:1b:41:df:0d:64:2d:79:14:3f:e4:
                    78:0a:c5:76:7e:2b:f5:3f:69:95:5e:a0:ab:23:96:
                    ae:9c:73:de:3d:2d:81:af:11:d3:41:41:e1:0e:05:
                    43:2c:b8:01:ea:a5:a9:15:d9:86:f8:59:77:48:5a:
                    4e:d6:1f:ec:b5:b4:1f:0e:b8:ef:ef:87:80:ed:bb:
                    a9:9f:1d:aa:7e:f4:dc:84:84:be:96:8e:0e:f6:c4:
                    92:2b:15:9b:b2:0e:56:78:3e:d6:5c:ca:8e:d2:41:
                    a0:64:ee:5c:8c:9e:94:bb:9e:3f:c4:f5:93:9f:57:
                    fb:d5:26:3b:d6:0e:1c:09:35:28:32:a0:a5:f7:33:
                    e2:70:1c:39:66:39:1a:ca:35:0b:6d:36:df:6f:22:
                    96:fb:4d:78:9a:a9:35:c6:54:62:aa:52:d7:81:43:
                    e4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:CC:E5:C0:59:06:78:DC:FE:99:DF:D3:80:40:2E:C5:9B:D8:B8:64
            X509v3 Authority Key Identifier:
                keyid:06:AC:59:0B:87:FF:90:20:1C:F7:7F:6D:CA:5E:49:ED:AA:1E:10:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QUc4oD4aNborng5G3kuB1umDUeCErLBAPMoGygqEzPB/0/06AC590B87FF90201CF77F6DCA5E49EDAA1E1037.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06AC590B87FF90201CF77F6DCA5E49EDAA1E1037.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QUc4oD4aNborng5G3kuB1umDUeCErLBAPMoGygqEzPB/0/34352e37302e39322e302f32332d3233203d3e20323637363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:52:a3:c9:00:65:13:90:92:60:7c:19:90:e1:7c:b6:a8:f2:
         06:67:88:17:a7:eb:2d:c2:18:35:f0:48:a3:f1:7f:fb:ee:15:
         22:0e:83:ba:62:91:bf:41:67:a1:8d:71:a3:cb:33:51:52:f4:
         3d:de:c1:df:3a:74:57:5d:09:22:12:10:4f:bb:fc:72:20:8f:
         e6:ca:86:e7:f9:2a:55:0b:3e:e6:2b:82:5a:72:ce:4b:e3:61:
         ff:e3:b9:60:b0:32:7a:d4:8d:25:90:32:32:18:c4:49:35:c4:
         75:fc:d5:3f:4f:64:57:43:d6:4f:f3:03:cf:0d:66:1e:08:8d:
         bd:3c:9e:23:c8:0b:5b:94:dc:fb:5e:c0:63:fe:aa:ab:ab:bf:
         9c:3e:a6:a8:3e:44:a3:e8:75:b0:90:46:26:63:e8:2f:dd:79:
         67:f6:b1:16:2b:6b:7e:5a:95:df:18:ce:f7:6a:0b:d3:f8:3d:
         cf:98:d4:76:bf:2d:a7:08:55:b1:35:5c:18:48:e2:32:61:39:
         8c:43:0c:a6:47:18:86:1f:68:75:0c:2a:72:e0:7b:b6:aa:6d:
         40:72:2a:1a:da:02:64:fd:1c:1c:9c:44:b5:94:43:11:17:02:
         88:b4:f3:dc:64:38:64:02:52:64:af:76:1f:c2:b6:e4:e4:40:
         de:a4:e2:8a
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUU6YpypfLWFQ95GquzED+sct5A6YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDZBQzU5MEI4N0ZGOTAyMDFDRjc3RjZEQ0E1RTQ5RURB
QTFFMTAzNzAeFw0yNjAzMzAxODU3MjdaFw0yNzAzMjkxOTAyMjdaMDMxMTAvBgNV
BAMTKDg1Q0NFNUMwNTkwNjc4RENGRTk5REZEMzgwNDAyRUM1OUJEOEI4NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwHVgdeFs5IALSOX46JNSC8nye
0fppR2tea+vzZXL0XYJBz1s5ivo8cbI7nBzWNBR3VzCm+wV+fInsgJT3I//XoSP/
SMwA2rtHOjJHEhImgSlbpaKdPzkGiWeSrQ7sG0HfDWQteRQ/5HgKxXZ+K/U/aZVe
oKsjlq6cc949LYGvEdNBQeEOBUMsuAHqpakV2Yb4WXdIWk7WH+y1tB8OuO/vh4Dt
u6mfHap+9NyEhL6Wjg72xJIrFZuyDlZ4PtZcyo7SQaBk7lyMnpS7nj/E9ZOfV/vV
JjvWDhwJNSgyoKX3M+JwHDlmORrKNQttNt9vIpb7TXiaqTXGVGKqUteBQ+TzAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUhczlwFkGeNz+md/TgEAuxZvYuGQwHwYDVR0j
BBgwFoAUBqxZC4f/kCAc939tyl5J7aoeEDcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVFVYzRvRDRhTmJvcm5nNUcza3VCMXVtRFVlQ0VyTEJBUE1vR3lncUV6
UEIvMC8wNkFDNTkwQjg3RkY5MDIwMUNGNzdGNkRDQTVFNDlFREFBMUUxMDM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2QUM1OTBCODdGRjkwMjAx
Q0Y3N0Y2RENBNUU0OUVEQUExRTEwMzcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlRVWM0b0Q0YU5ib3JuZzVHM2t1QjF1bURVZUNFckxCQVBNb0d5Z3FFelBCLzAv
MzQzNTJlMzczMDJlMzkzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzNzM2
MzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAS1GXDANBgkqhkiG9w0BAQsFAAOCAQEARFKjyQBlE5CS
YHwZkOF8tqjyBmeIF6frLcIYNfBIo/F/++4VIg6DumKRv0FnoY1xo8szUVL0Pd7B
3zp0V10JIhIQT7v8ciCP5sqG5/kqVQs+5iuCWnLOS+Nh/+O5YLAyetSNJZAyMhjE
STXEdfzVP09kV0PWT/MDzw1mHgiNvTyeI8gLW5Tc+17AY/6qq6u/nD6mqD5Eo+h1
sJBGJmPoL915Z/axFitrflqV3xjO92oL0/g9z5jUdr8tpwhVsTVcGEjiMmE5jEMM
pkcYhh9odQwqcuB7tqptQHIqGtoCZP0cHJxEtZRDERcCiLTz3GQ4ZAJSZK92H8K2
5ORA3qTiig==
-----END CERTIFICATE-----
Generated at Thu Apr 9 19:08:25 2026 by rpki-client