Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvBKKtCJ7rkidWoPjuDuDQ7DEudLVjGTycKyKZEcZMK4/0/34352e3138342e382e302f32322d3332203d3e20323639333037.roa
File:                     34352e3138342e382e302f32322d3332203d3e20323639333037.roa (raw, json)
Hash identifier:          ZCo8Oe9D6lEFYl59vfSb6+FgJaYWLzCUtLZZGifFev8=
Subject key identifier:   85:B7:B0:96:FF:85:FC:C1:38:D0:A7:F1:CB:49:F5:79:DC:2B:83:B9
Certificate issuer:       /CN=0F9F75BC9C67C40FED41DBE07057EA800F8BEC26
Certificate serial:       22A35F840FD3062E1E93B3C5167F80CFD688CE21
Authority key identifier: 0F:9F:75:BC:9C:67:C4:0F:ED:41:DB:E0:70:57:EA:80:0F:8B:EC:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9F75BC9C67C40FED41DBE07057EA800F8BEC26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvBKKtCJ7rkidWoPjuDuDQ7DEudLVjGTycKyKZEcZMK4/0/34352e3138342e382e302f32322d3332203d3e20323639333037.roa
Signing time:             Mon 06 Jul 2026 19:23:27 +0000
ROA not before:           Mon 06 Jul 2026 19:18:27 +0000
ROA not after:            Mon 05 Jul 2027 19:23:27 +0000
asID:                     269307
IP address blocks:        45.184.8.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BvBKKtCJ7rkidWoPjuDuDQ7DEudLVjGTycKyKZEcZMK4/0/0F9F75BC9C67C40FED41DBE07057EA800F8BEC26.crl
                          rsync://rpki-repo.registro.br/repo/BvBKKtCJ7rkidWoPjuDuDQ7DEudLVjGTycKyKZEcZMK4/0/0F9F75BC9C67C40FED41DBE07057EA800F8BEC26.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9F75BC9C67C40FED41DBE07057EA800F8BEC26.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 07:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a3:5f:84:0f:d3:06:2e:1e:93:b3:c5:16:7f:80:cf:d6:88:ce:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F9F75BC9C67C40FED41DBE07057EA800F8BEC26
        Validity
            Not Before: Jul  6 19:18:27 2026 GMT
            Not After : Jul  5 19:23:27 2027 GMT
        Subject: CN=85B7B096FF85FCC138D0A7F1CB49F579DC2B83B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5c:c1:61:99:62:9d:21:fe:b5:3d:eb:de:56:
                    73:cb:00:62:54:bb:73:6e:e2:70:ca:93:f1:a9:30:
                    01:24:12:52:5d:ce:92:8e:cc:3a:8a:dd:a1:0e:54:
                    50:2e:dd:f0:99:68:43:a3:c2:32:7c:ab:e0:89:7c:
                    59:85:27:bc:ec:cc:68:a0:9f:b1:cd:2a:e1:96:be:
                    2c:01:fd:4c:4f:18:76:14:f6:51:38:e8:ab:e0:27:
                    63:c0:01:81:20:8a:04:8b:15:91:12:cf:9f:bc:c5:
                    2c:b6:8a:40:85:77:2c:fd:b0:f1:b1:af:9e:7d:f8:
                    21:1b:fd:27:1b:ad:ec:55:f3:e3:ab:ae:0b:8d:e1:
                    47:64:74:39:86:6a:68:34:d8:43:e7:df:2c:f0:6d:
                    24:2c:e9:83:12:56:6a:6d:6a:df:c3:c2:55:20:c6:
                    dd:ac:01:9c:07:a9:b3:f5:81:1b:32:9d:ab:30:e3:
                    10:5d:cc:e8:32:0e:a6:45:4b:2d:09:43:27:34:1d:
                    07:cb:1a:c1:87:a1:28:5a:64:eb:ed:68:43:d4:c1:
                    1a:bb:38:3c:57:2e:1c:10:ab:21:44:fd:f2:1e:07:
                    ec:32:5f:61:5d:81:3e:a9:95:6e:ed:89:03:a1:71:
                    14:66:77:de:1b:93:64:85:33:6e:89:21:c6:2f:cf:
                    6e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B7:B0:96:FF:85:FC:C1:38:D0:A7:F1:CB:49:F5:79:DC:2B:83:B9
            X509v3 Authority Key Identifier:
                keyid:0F:9F:75:BC:9C:67:C4:0F:ED:41:DB:E0:70:57:EA:80:0F:8B:EC:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvBKKtCJ7rkidWoPjuDuDQ7DEudLVjGTycKyKZEcZMK4/0/0F9F75BC9C67C40FED41DBE07057EA800F8BEC26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9F75BC9C67C40FED41DBE07057EA800F8BEC26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvBKKtCJ7rkidWoPjuDuDQ7DEudLVjGTycKyKZEcZMK4/0/34352e3138342e382e302f32322d3332203d3e20323639333037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:61:88:4e:d6:26:ea:0e:f2:9a:31:00:cd:89:df:c7:df:9c:
         7e:8c:5e:59:b7:e7:a3:ca:34:f4:af:35:cb:80:b9:17:bd:8b:
         50:f3:a0:d6:23:74:f5:20:a3:e1:e9:a5:03:61:a6:9b:5a:02:
         38:bd:c5:2e:3b:9e:8b:04:81:03:ca:76:b8:e8:7f:b4:5b:7d:
         ed:a5:64:41:7a:1a:69:61:8c:72:e2:c7:f8:9a:59:1f:69:b6:
         ca:51:ec:f6:17:59:2a:43:42:40:fb:90:7c:bf:e4:3c:64:3f:
         73:5d:32:86:a1:1d:fd:6b:b7:c2:8d:da:84:2f:a6:a5:ac:ed:
         3b:22:06:4f:77:06:6d:bd:48:5a:39:74:ac:a6:1c:6d:c8:22:
         c2:e4:1c:40:8c:1a:a9:bc:2d:bd:24:1c:01:20:9b:43:39:63:
         18:b5:6c:de:39:e1:42:08:31:d2:d3:db:bd:62:e4:d6:30:04:
         15:83:2f:4e:07:a7:0a:2c:f5:59:b4:54:8b:bd:b0:64:6d:e8:
         b8:11:5c:35:9c:1c:b1:7e:ff:4a:63:3c:27:4b:b7:69:58:d0:
         2b:05:66:af:52:5c:55:09:5f:03:bc:b1:fe:13:29:a4:c3:f1:
         b3:c7:3c:58:c8:37:47:90:96:5c:62:38:3c:32:59:cc:e4:2c:
         0f:b1:9c:19
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUIqNfhA/TBi4ek7PFFn+Az9aIziEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEY5Rjc1QkM5QzY3QzQwRkVENDFEQkUwNzA1N0VBODAw
RjhCRUMyNjAeFw0yNjA3MDYxOTE4MjdaFw0yNzA3MDUxOTIzMjdaMDMxMTAvBgNV
BAMTKDg1QjdCMDk2RkY4NUZDQzEzOEQwQTdGMUNCNDlGNTc5REMyQjgzQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyXMFhmWKdIf61PeveVnPLAGJU
u3Nu4nDKk/GpMAEkElJdzpKOzDqK3aEOVFAu3fCZaEOjwjJ8q+CJfFmFJ7zszGig
n7HNKuGWviwB/UxPGHYU9lE46KvgJ2PAAYEgigSLFZESz5+8xSy2ikCFdyz9sPGx
r559+CEb/ScbrexV8+OrrguN4UdkdDmGamg02EPn3yzwbSQs6YMSVmptat/DwlUg
xt2sAZwHqbP1gRsynasw4xBdzOgyDqZFSy0JQyc0HQfLGsGHoShaZOvtaEPUwRq7
ODxXLhwQqyFE/fIeB+wyX2FdgT6plW7tiQOhcRRmd94bk2SFM26JIcYvz245AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUhbewlv+F/ME40Kfxy0n1edwrg7kwHwYDVR0j
BBgwFoAUD591vJxnxA/tQdvgcFfqgA+L7CYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnZCS0t0Q0o3cmtpZFdvUGp1RHVEUTdERXVkTFZqR1R5Y0t5S1pFY1pN
SzQvMC8wRjlGNzVCQzlDNjdDNDBGRUQ0MURCRTA3MDU3RUE4MDBGOEJFQzI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGOUY3NUJDOUM2N0M0MEZF
RDQxREJFMDcwNTdFQTgwMEY4QkVDMjYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J2QktLdENKN3JraWRXb1BqdUR1RFE3REV1ZExWakdUeWNLeUtaRWNaTUs0LzAv
MzQzNTJlMzEzODM0MmUzODJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMyMzYzOTMz
MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi24CDANBgkqhkiG9w0BAQsFAAOCAQEAn2GITtYm6g7y
mjEAzYnfx9+cfoxeWbfno8o09K81y4C5F72LUPOg1iN09SCj4emlA2Gmm1oCOL3F
LjueiwSBA8p2uOh/tFt97aVkQXoaaWGMcuLH+JpZH2m2ylHs9hdZKkNCQPuQfL/k
PGQ/c10yhqEd/Wu3wo3ahC+mpaztOyIGT3cGbb1IWjl0rKYcbcgiwuQcQIwaqbwt
vSQcASCbQzljGLVs3jnhQggx0tPbvWLk1jAEFYMvTgenCiz1WbRUi72wZG3ouBFc
NZwcsX7/SmM8J0u3aVjQKwVmr1JcVQlfA7yx/hMppMPxs8c8WMg3R5CWXGI4PDJZ
zOQsD7GcGQ==
-----END CERTIFICATE-----
Generated at Wed Jul 8 16:13:45 2026 by rpki-client