Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QUc4oD4aNborng5G3kuB1umDUeCErLBAPMoGygqEzPB/0/34352e37302e39342e302f32332d3233203d3e20323637363136.roa
File:                     34352e37302e39342e302f32332d3233203d3e20323637363136.roa (raw, json)
Hash identifier:          SicCLyHuiv2z5ZBf43vYiL8VhMgc9H5FxDior+/XbTs=
Subject key identifier:   38:01:B0:45:E1:65:D0:2D:AE:02:45:37:4F:41:61:F2:55:98:49:D7
Certificate issuer:       /CN=06AC590B87FF90201CF77F6DCA5E49EDAA1E1037
Certificate serial:       0BACFAC34CF84D3684490FE2F27931C2FBD4A0EF
Authority key identifier: 06:AC:59:0B:87:FF:90:20:1C:F7:7F:6D:CA:5E:49:ED:AA:1E:10:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06AC590B87FF90201CF77F6DCA5E49EDAA1E1037.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QUc4oD4aNborng5G3kuB1umDUeCErLBAPMoGygqEzPB/0/34352e37302e39342e302f32332d3233203d3e20323637363136.roa
Signing time:             Mon 30 Mar 2026 19:02:46 +0000
ROA not before:           Mon 30 Mar 2026 18:57:46 +0000
ROA not after:            Mon 29 Mar 2027 19:02:46 +0000
asID:                     267616
IP address blocks:        45.70.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9QUc4oD4aNborng5G3kuB1umDUeCErLBAPMoGygqEzPB/0/06AC590B87FF90201CF77F6DCA5E49EDAA1E1037.crl
                          rsync://rpki-repo.registro.br/repo/9QUc4oD4aNborng5G3kuB1umDUeCErLBAPMoGygqEzPB/0/06AC590B87FF90201CF77F6DCA5E49EDAA1E1037.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06AC590B87FF90201CF77F6DCA5E49EDAA1E1037.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 04:10:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ac:fa:c3:4c:f8:4d:36:84:49:0f:e2:f2:79:31:c2:fb:d4:a0:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06AC590B87FF90201CF77F6DCA5E49EDAA1E1037
        Validity
            Not Before: Mar 30 18:57:46 2026 GMT
            Not After : Mar 29 19:02:46 2027 GMT
        Subject: CN=3801B045E165D02DAE0245374F4161F2559849D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ed:08:aa:e5:e9:b6:95:50:84:1c:b5:46:53:
                    18:5a:9e:62:e7:c5:28:1c:1a:56:1a:a0:a3:e1:68:
                    f3:da:4c:22:df:66:cb:c1:22:2a:5e:80:6a:79:39:
                    bb:90:8b:06:fc:81:d9:c0:89:ac:40:b9:2d:e8:79:
                    40:70:b7:dc:11:4d:3b:eb:f9:bf:a8:9c:e6:f6:15:
                    f1:08:67:69:69:06:5b:10:64:a4:96:04:f0:e9:bf:
                    c9:0a:78:cf:ca:99:71:60:75:82:6b:f1:29:20:a5:
                    36:15:44:2e:9f:12:2e:00:76:92:f0:31:6d:d1:55:
                    60:6d:93:25:a1:65:6a:da:e3:d0:a8:4d:16:2f:28:
                    c1:f2:09:31:0c:3f:e2:5b:fb:b0:22:72:e5:cd:d6:
                    cf:2a:ae:6c:bb:30:68:5c:23:91:56:f0:04:e4:70:
                    6c:cf:a1:87:ce:8b:45:11:8b:94:79:50:8a:e3:6d:
                    75:9e:a6:82:c9:6d:02:3a:59:2c:21:01:05:90:11:
                    73:45:9f:fa:3b:ee:be:ff:ea:62:91:28:49:4f:cc:
                    79:f1:b6:ad:d5:db:c5:3a:3a:33:3f:d2:f6:3b:98:
                    f6:17:b4:bc:8e:34:4e:46:62:ae:76:9a:77:ae:46:
                    91:66:51:ce:d6:fb:aa:37:d6:70:ab:df:02:b3:af:
                    a4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:01:B0:45:E1:65:D0:2D:AE:02:45:37:4F:41:61:F2:55:98:49:D7
            X509v3 Authority Key Identifier:
                keyid:06:AC:59:0B:87:FF:90:20:1C:F7:7F:6D:CA:5E:49:ED:AA:1E:10:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QUc4oD4aNborng5G3kuB1umDUeCErLBAPMoGygqEzPB/0/06AC590B87FF90201CF77F6DCA5E49EDAA1E1037.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06AC590B87FF90201CF77F6DCA5E49EDAA1E1037.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QUc4oD4aNborng5G3kuB1umDUeCErLBAPMoGygqEzPB/0/34352e37302e39342e302f32332d3233203d3e20323637363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:93:14:b4:0d:a5:cc:7f:d7:12:74:4a:64:f2:9a:f8:06:10:
         fb:bb:7e:34:f0:f3:7a:32:e7:ad:56:32:c1:81:e6:ff:43:ef:
         b6:b5:ba:83:bc:0c:65:0c:25:af:86:00:56:bd:40:b5:0e:65:
         25:2b:da:d1:9e:13:1b:eb:8b:76:c8:8e:01:8a:7f:46:8e:18:
         67:ce:a4:eb:40:ad:b4:8a:62:ec:d6:f0:4b:0f:62:08:c4:18:
         d3:b8:be:b4:14:00:90:ad:0a:4b:2a:9a:e0:a2:df:2a:bf:f0:
         f9:c0:11:c3:19:7e:e5:de:a4:36:2e:5a:b4:ab:de:b0:b4:3c:
         1a:ac:11:d7:9a:28:27:0d:93:b2:53:7e:da:de:a4:0e:77:d4:
         a2:85:de:8c:14:99:37:d4:b3:ab:0f:9b:f5:52:28:a8:41:f4:
         65:d9:41:f1:3d:31:c1:2c:4b:2a:9f:a5:fb:0d:c1:a1:df:c4:
         8f:90:87:ef:d1:96:10:ef:57:70:6a:cd:4a:04:ab:fa:ac:04:
         72:57:0d:ef:6d:bf:1f:9c:a7:4a:c5:e7:42:ab:5d:de:bd:2c:
         aa:16:c7:5a:58:3c:d0:9a:15:d7:ed:17:24:fa:7b:0f:f7:d6:
         db:3b:98:36:8c:af:6f:82:01:58:5a:51:62:f1:ce:de:28:e5:
         fb:a3:7b:d0
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUC6z6w0z4TTaESQ/i8nkxwvvUoO8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDZBQzU5MEI4N0ZGOTAyMDFDRjc3RjZEQ0E1RTQ5RURB
QTFFMTAzNzAeFw0yNjAzMzAxODU3NDZaFw0yNzAzMjkxOTAyNDZaMDMxMTAvBgNV
BAMTKDM4MDFCMDQ1RTE2NUQwMkRBRTAyNDUzNzRGNDE2MUYyNTU5ODQ5RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs7Qiq5em2lVCEHLVGUxhanmLn
xSgcGlYaoKPhaPPaTCLfZsvBIipegGp5ObuQiwb8gdnAiaxAuS3oeUBwt9wRTTvr
+b+onOb2FfEIZ2lpBlsQZKSWBPDpv8kKeM/KmXFgdYJr8SkgpTYVRC6fEi4AdpLw
MW3RVWBtkyWhZWra49CoTRYvKMHyCTEMP+Jb+7AicuXN1s8qrmy7MGhcI5FW8ATk
cGzPoYfOi0URi5R5UIrjbXWepoLJbQI6WSwhAQWQEXNFn/o77r7/6mKRKElPzHnx
tq3V28U6OjM/0vY7mPYXtLyONE5GYq52mneuRpFmUc7W+6o31nCr3wKzr6RLAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUOAGwReFl0C2uAkU3T0Fh8lWYSdcwHwYDVR0j
BBgwFoAUBqxZC4f/kCAc939tyl5J7aoeEDcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVFVYzRvRDRhTmJvcm5nNUcza3VCMXVtRFVlQ0VyTEJBUE1vR3lncUV6
UEIvMC8wNkFDNTkwQjg3RkY5MDIwMUNGNzdGNkRDQTVFNDlFREFBMUUxMDM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2QUM1OTBCODdGRjkwMjAx
Q0Y3N0Y2RENBNUU0OUVEQUExRTEwMzcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlRVWM0b0Q0YU5ib3JuZzVHM2t1QjF1bURVZUNFckxCQVBNb0d5Z3FFelBCLzAv
MzQzNTJlMzczMDJlMzkzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzNzM2
MzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAS1GXjANBgkqhkiG9w0BAQsFAAOCAQEABZMUtA2lzH/X
EnRKZPKa+AYQ+7t+NPDzejLnrVYywYHm/0PvtrW6g7wMZQwlr4YAVr1AtQ5lJSva
0Z4TG+uLdsiOAYp/Ro4YZ86k60CttIpi7NbwSw9iCMQY07i+tBQAkK0KSyqa4KLf
Kr/w+cARwxl+5d6kNi5atKvesLQ8GqwR15ooJw2TslN+2t6kDnfUooXejBSZN9Sz
qw+b9VIoqEH0ZdlB8T0xwSxLKp+l+w3Bod/Ej5CH79GWEO9XcGrNSgSr+qwEclcN
722/H5ynSsXnQqtd3r0sqhbHWlg80JoV1+0XJPp7D/fW2zuYNoyvb4IBWFpRYvHO
3ijl+6N70A==
-----END CERTIFICATE-----
Generated at Thu Apr 9 19:08:26 2026 by rpki-client