Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/34352e3233392e3136342e302f32342d3332203d3e20323633393830.roa
File:                     34352e3233392e3136342e302f32342d3332203d3e20323633393830.roa (raw, json)
Hash identifier:          RF52EOuaFxVEG/ao3wZnptnDqpVC/pFFpElU3/Isbls=
Subject key identifier:   3F:99:D1:62:89:4F:74:20:71:5E:22:79:95:7B:4C:41:BC:C5:D3:86
Certificate issuer:       /CN=2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2
Certificate serial:       37691AB8CE0A085D527C4210F3A9D61A7E38E8B7
Authority key identifier: 2A:07:55:CD:A1:0D:BE:BB:A6:A8:24:11:2F:67:CD:AE:61:44:A1:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/34352e3233392e3136342e302f32342d3332203d3e20323633393830.roa
Signing time:             Mon 08 Jun 2026 18:38:16 +0000
ROA not before:           Mon 08 Jun 2026 18:33:16 +0000
ROA not after:            Mon 07 Jun 2027 18:38:16 +0000
asID:                     263980
IP address blocks:        45.239.164.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.crl
                          rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 16:23:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:69:1a:b8:ce:0a:08:5d:52:7c:42:10:f3:a9:d6:1a:7e:38:e8:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2
        Validity
            Not Before: Jun  8 18:33:16 2026 GMT
            Not After : Jun  7 18:38:16 2027 GMT
        Subject: CN=3F99D162894F7420715E2279957B4C41BCC5D386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a0:8f:2a:77:22:a0:15:52:d8:d3:25:22:92:
                    f4:d1:6a:82:d3:c0:fc:dc:f2:49:90:e2:99:e6:f9:
                    49:45:29:3b:f2:88:98:a0:b6:44:fb:13:c2:37:dd:
                    9f:5c:df:50:77:21:4e:25:eb:53:b4:d0:79:6e:f7:
                    70:2b:ee:9f:45:26:02:36:24:fa:8f:6c:b6:d8:a1:
                    15:b5:71:6d:21:32:f9:5f:7b:4f:da:2e:ff:2b:b5:
                    8b:c3:03:1e:b2:d0:5b:c4:6f:e7:cf:90:ae:9d:7b:
                    6d:3d:9f:73:22:ca:5d:74:4a:9b:ec:22:97:75:93:
                    32:2b:bf:3c:55:8a:9e:7c:75:43:71:45:56:b9:4a:
                    0c:f1:a5:a2:52:e5:e5:5e:6d:e6:96:08:5c:5a:6d:
                    83:6c:18:c3:aa:3a:0d:ee:48:13:6a:99:02:14:7b:
                    3a:02:82:33:e7:e2:cd:d7:9a:0f:d8:b3:05:03:1d:
                    1d:12:28:c6:d3:46:ae:a1:85:12:f5:95:56:c7:ae:
                    61:37:81:71:90:f7:f5:4f:2d:61:45:84:4e:69:cb:
                    0d:c3:f5:11:b1:73:13:a5:cc:97:cd:69:9b:86:e8:
                    8d:99:9f:b1:5a:a9:5c:97:9b:a1:3b:18:2c:c0:64:
                    47:54:bf:45:90:81:16:94:b4:84:12:9f:9d:fd:61:
                    02:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:99:D1:62:89:4F:74:20:71:5E:22:79:95:7B:4C:41:BC:C5:D3:86
            X509v3 Authority Key Identifier:
                keyid:2A:07:55:CD:A1:0D:BE:BB:A6:A8:24:11:2F:67:CD:AE:61:44:A1:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/34352e3233392e3136342e302f32342d3332203d3e20323633393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:dc:7d:05:b8:fe:0d:94:31:1d:2f:e1:72:c0:e6:f2:7a:54:
         23:24:7e:88:20:d3:c9:24:06:06:aa:15:83:ba:df:07:2a:86:
         60:cb:a0:4d:7e:39:30:ba:cd:21:4e:37:8d:f5:43:79:c6:12:
         1e:a5:1a:88:2c:46:83:3c:43:cf:bc:ad:98:d5:f0:d2:3c:3e:
         5f:63:94:3b:ec:f8:d0:93:63:5e:ad:67:f0:b5:f3:c3:eb:69:
         5c:ae:56:ce:ee:75:49:ac:95:b0:f8:5c:00:ab:da:d1:a6:97:
         5b:da:4b:19:ad:90:a8:13:ca:e3:b1:bc:7c:5c:6e:a0:05:c7:
         1b:07:e3:f9:1b:7f:74:a6:04:a0:68:a8:6a:1f:d6:a9:b5:bc:
         4b:da:d4:6b:1b:18:f1:ca:80:42:65:f5:4a:be:6d:f6:94:f8:
         cb:a9:95:9b:65:d0:e1:a3:de:7d:da:92:83:79:61:71:69:d7:
         02:f8:25:29:40:bd:2e:ed:30:1c:b1:36:83:0e:3e:2c:46:6d:
         1b:9a:52:f4:ce:a3:4b:31:76:42:e5:24:b9:31:64:5c:05:1b:
         09:c3:08:7a:89:2a:2c:60:9a:f8:88:e1:f5:65:24:83:f7:8c:
         b4:9b:66:59:cd:56:d5:3e:5e:46:d2:7e:83:b9:f1:e5:b7:ed:
         56:2f:8d:6d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUN2kauM4KCF1SfEIQ86nWGn446LcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEwNzU1Q0RBMTBEQkVCQkE2QTgyNDExMkY2N0NEQUU2
MTQ0QTFFMjAeFw0yNjA2MDgxODMzMTZaFw0yNzA2MDcxODM4MTZaMDMxMTAvBgNV
BAMTKDNGOTlEMTYyODk0Rjc0MjA3MTVFMjI3OTk1N0I0QzQxQkNDNUQzODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYoI8qdyKgFVLY0yUikvTRaoLT
wPzc8kmQ4pnm+UlFKTvyiJigtkT7E8I33Z9c31B3IU4l61O00Hlu93Ar7p9FJgI2
JPqPbLbYoRW1cW0hMvlfe0/aLv8rtYvDAx6y0FvEb+fPkK6de209n3Miyl10Spvs
Ipd1kzIrvzxVip58dUNxRVa5SgzxpaJS5eVebeaWCFxabYNsGMOqOg3uSBNqmQIU
ezoCgjPn4s3Xmg/YswUDHR0SKMbTRq6hhRL1lVbHrmE3gXGQ9/VPLWFFhE5pyw3D
9RGxcxOlzJfNaZuG6I2Zn7FaqVyXm6E7GCzAZEdUv0WQgRaUtIQSn539YQIdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUP5nRYolPdCBxXiJ5lXtMQbzF04YwHwYDVR0j
BBgwFoAUKgdVzaENvrumqCQRL2fNrmFEoeIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjVXR2VNVWdla0hKZDg3M1pnSGRjSjk5c1dEbllRelZtSnlVck5QUHRE
OVMvMC8yQTA3NTVDREExMERCRUJCQTZBODI0MTEyRjY3Q0RBRTYxNDRBMUUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBMDc1NUNEQTEwREJFQkJB
NkE4MjQxMTJGNjdDREFFNjE0NEExRTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI1V0dlTVVnZWtISmQ4NzNaZ0hkY0o5OXNXRG5ZUXpWbUp5VXJOUFB0RDlTLzAv
MzQzNTJlMzIzMzM5MmUzMTM2MzQyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMjM2
MzMzOTM4MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt76QwDQYJKoZIhvcNAQELBQADggEBAK/cfQW4
/g2UMR0v4XLA5vJ6VCMkfogg08kkBgaqFYO63wcqhmDLoE1+OTC6zSFON431Q3nG
Eh6lGogsRoM8Q8+8rZjV8NI8Pl9jlDvs+NCTY16tZ/C188PraVyuVs7udUmslbD4
XACr2tGml1vaSxmtkKgTyuOxvHxcbqAFxxsH4/kbf3SmBKBoqGof1qm1vEva1Gsb
GPHKgEJl9Uq+bfaU+MuplZtl0OGj3n3akoN5YXFp1wL4JSlAvS7tMByxNoMOPixG
bRuaUvTOo0sxdkLlJLkxZFwFGwnDCHqJKixgmviI4fVlJIP3jLSbZlnNVtU+XkbS
foO58eW37VYvjW0=
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:07:57 2026 by rpki-client