Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CdZLpMmsr9xpC45GGBTBVRz11GZVHoankf8Bbtjfs19u/0/34352e3139302e3230322e302f32332d3233203d3e20323639363530.roa
File:                     34352e3139302e3230322e302f32332d3233203d3e20323639363530.roa (raw, json)
Hash identifier:          QLgDq5729Ya268M7esqZdm1HMrC25IqbyESs9fw5Z8A=
Subject key identifier:   E3:C6:1D:3E:67:A6:07:D8:2C:1E:EA:8A:A9:1C:F9:99:2D:BA:1C:35
Certificate issuer:       /CN=63377862BEA07DEEBC233F8B42ED11B557AD6C06
Certificate serial:       0F3F722B2511041CB3923B79A4C82A6105B87BEC
Authority key identifier: 63:37:78:62:BE:A0:7D:EE:BC:23:3F:8B:42:ED:11:B5:57:AD:6C:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63377862BEA07DEEBC233F8B42ED11B557AD6C06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdZLpMmsr9xpC45GGBTBVRz11GZVHoankf8Bbtjfs19u/0/34352e3139302e3230322e302f32332d3233203d3e20323639363530.roa
Signing time:             Tue 11 Aug 2026 14:34:25 +0000
ROA not before:           Tue 11 Aug 2026 14:29:25 +0000
ROA not after:            Tue 10 Aug 2027 14:34:25 +0000
asID:                     269650
IP address blocks:        45.190.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CdZLpMmsr9xpC45GGBTBVRz11GZVHoankf8Bbtjfs19u/0/63377862BEA07DEEBC233F8B42ED11B557AD6C06.crl
                          rsync://rpki-repo.registro.br/repo/CdZLpMmsr9xpC45GGBTBVRz11GZVHoankf8Bbtjfs19u/0/63377862BEA07DEEBC233F8B42ED11B557AD6C06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63377862BEA07DEEBC233F8B42ED11B557AD6C06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 20:20:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:3f:72:2b:25:11:04:1c:b3:92:3b:79:a4:c8:2a:61:05:b8:7b:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63377862BEA07DEEBC233F8B42ED11B557AD6C06
        Validity
            Not Before: Aug 11 14:29:25 2026 GMT
            Not After : Aug 10 14:34:25 2027 GMT
        Subject: CN=E3C61D3E67A607D82C1EEA8AA91CF9992DBA1C35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f0:fc:ac:6c:41:79:f7:51:39:42:46:fa:20:
                    4e:66:47:99:2a:7c:68:7a:9b:94:60:58:62:e0:eb:
                    36:58:f5:af:8f:87:57:1c:fc:de:34:22:42:e2:8d:
                    27:95:17:a0:f4:0d:7a:be:38:45:c8:63:c7:78:0a:
                    8c:bd:c1:6b:31:f7:79:d3:af:3f:49:77:bf:36:f3:
                    35:45:5d:f4:50:c3:17:e5:00:ec:7e:d1:ae:94:06:
                    9d:5e:3c:35:47:4f:83:61:b2:56:d2:8d:5c:73:7d:
                    25:f0:5a:5b:3a:28:cc:c9:bd:47:95:fa:ea:2a:4b:
                    15:a5:ac:79:4a:d9:91:34:44:3e:00:f2:ba:11:d1:
                    32:77:c1:b9:22:ff:cc:ed:19:e3:50:d5:21:ef:92:
                    7b:49:e8:0d:db:fc:2c:06:ac:22:31:ff:d1:d1:50:
                    27:39:9b:7a:11:6c:86:6a:8c:d4:ea:c8:bf:07:22:
                    fe:a6:69:a0:be:ab:54:98:32:f3:57:0e:4d:d5:a1:
                    b7:46:22:2e:ff:7a:82:84:b9:c1:a4:91:37:a6:7f:
                    b8:c3:ab:a7:3c:cd:01:dd:13:b7:92:82:2d:a3:3b:
                    df:3d:2a:39:ef:6d:f7:c5:e8:44:6a:92:c9:62:99:
                    b4:07:be:3d:73:50:69:3d:20:d1:09:a4:c7:3f:ea:
                    ac:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C6:1D:3E:67:A6:07:D8:2C:1E:EA:8A:A9:1C:F9:99:2D:BA:1C:35
            X509v3 Authority Key Identifier:
                keyid:63:37:78:62:BE:A0:7D:EE:BC:23:3F:8B:42:ED:11:B5:57:AD:6C:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdZLpMmsr9xpC45GGBTBVRz11GZVHoankf8Bbtjfs19u/0/63377862BEA07DEEBC233F8B42ED11B557AD6C06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63377862BEA07DEEBC233F8B42ED11B557AD6C06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdZLpMmsr9xpC45GGBTBVRz11GZVHoankf8Bbtjfs19u/0/34352e3139302e3230322e302f32332d3233203d3e20323639363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:c6:d9:ac:da:ff:43:a5:33:73:2f:fa:51:a2:bb:9c:35:04:
         a0:0d:c2:42:1b:e6:8b:1a:34:64:4a:4a:6e:89:52:24:b0:f2:
         62:38:39:08:02:b1:f0:3a:c0:fc:0f:c3:58:2d:66:fc:70:80:
         b2:0b:9c:72:e5:e2:93:01:16:29:18:77:ca:d1:ec:aa:28:fd:
         f0:3e:25:bb:95:8d:27:7c:f9:be:43:bf:96:cf:fb:43:88:2d:
         f6:be:94:8c:ac:d9:5e:3b:9d:36:50:23:27:45:34:41:83:56:
         20:69:63:84:1b:7f:d5:1e:14:3b:ca:ed:d6:4f:b4:47:5a:a8:
         8e:ab:09:7d:67:78:78:09:46:7b:6a:ca:2f:0d:74:c4:bd:f2:
         99:09:ac:96:bd:0e:24:76:32:7d:92:ce:01:1a:a7:4d:62:11:
         06:37:c9:14:77:b3:e3:37:f4:f2:dc:68:4d:c7:00:4f:05:91:
         6b:4c:2d:b5:82:d6:b3:fe:e7:63:96:47:cf:b8:16:3c:e8:e4:
         70:b9:95:7d:cd:f3:42:cb:07:a9:9c:05:2f:f0:42:07:7a:61:
         a6:df:78:6c:4d:85:2e:ee:5c:55:88:9e:68:64:11:53:7c:26:
         e5:86:30:cd:91:26:7c:f9:05:c1:de:ac:7b:60:70:49:c5:62:
         7b:40:80:37
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDz9yKyURBByzkjt5pMgqYQW4e+wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjMzNzc4NjJCRUEwN0RFRUJDMjMzRjhCNDJFRDExQjU1
N0FENkMwNjAeFw0yNjA4MTExNDI5MjVaFw0yNzA4MTAxNDM0MjVaMDMxMTAvBgNV
BAMTKEUzQzYxRDNFNjdBNjA3RDgyQzFFRUE4QUE5MUNGOTk5MkRCQTFDMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC28PysbEF591E5Qkb6IE5mR5kq
fGh6m5RgWGLg6zZY9a+Ph1cc/N40IkLijSeVF6D0DXq+OEXIY8d4Coy9wWsx93nT
rz9Jd7828zVFXfRQwxflAOx+0a6UBp1ePDVHT4NhslbSjVxzfSXwWls6KMzJvUeV
+uoqSxWlrHlK2ZE0RD4A8roR0TJ3wbki/8ztGeNQ1SHvkntJ6A3b/CwGrCIx/9HR
UCc5m3oRbIZqjNTqyL8HIv6maaC+q1SYMvNXDk3VobdGIi7/eoKEucGkkTemf7jD
q6c8zQHdE7eSgi2jO989KjnvbffF6ERqkslimbQHvj1zUGk9INEJpMc/6qwZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU48YdPmemB9gsHuqKqRz5mS26HDUwHwYDVR0j
BBgwFoAUYzd4Yr6gfe68Iz+LQu0RtVetbAYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2RaTHBNbXNyOXhwQzQ1R0dCVEJWUnoxMUdaVkhvYW5rZjhCYnRqZnMx
OXUvMC82MzM3Nzg2MkJFQTA3REVFQkMyMzNGOEI0MkVEMTFCNTU3QUQ2QzA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYzMzc3ODYyQkVBMDdERUVC
QzIzM0Y4QjQyRUQxMUI1NTdBRDZDMDYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NkWkxwTW1zcjl4cEM0NUdHQlRCVlJ6MTFHWlZIb2Fua2Y4QmJ0amZzMTl1LzAv
MzQzNTJlMzEzOTMwMmUzMjMwMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzkzNjM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtvsowDQYJKoZIhvcNAQELBQADggEBALnG2aza
/0OlM3Mv+lGiu5w1BKANwkIb5osaNGRKSm6JUiSw8mI4OQgCsfA6wPwPw1gtZvxw
gLILnHLl4pMBFikYd8rR7Koo/fA+JbuVjSd8+b5Dv5bP+0OILfa+lIys2V47nTZQ
IydFNEGDViBpY4Qbf9UeFDvK7dZPtEdaqI6rCX1neHgJRntqyi8NdMS98pkJrJa9
DiR2Mn2SzgEap01iEQY3yRR3s+M39PLcaE3HAE8FkWtMLbWC1rP+52OWR8+4Fjzo
5HC5lX3N80LLB6mcBS/wQgd6YabfeGxNhS7uXFWInmhkEVN8JuWGMM2RJnz5BcHe
rHtgcEnFYntAgDc=
-----END CERTIFICATE-----
Generated at Sun Aug 23 09:16:04 2026 by rpki-client