Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/34352e37302e3231392e302f32342d3234203d3e20323637353838.roa
File:                     34352e37302e3231392e302f32342d3234203d3e20323637353838.roa (raw, json)
Hash identifier:          jB+rmIe8/Bw66iM+yRa4ECqXzZLA6goiEGFEgXaQxNs=
Subject key identifier:   05:D3:2E:A6:E8:6A:24:7F:36:8E:92:A6:59:92:9D:9A:F4:2A:F2:D6
Certificate issuer:       /CN=EB27E991207232DB9C6D847F06224E25D3606469
Certificate serial:       24FE0000AD25C9EFD418C3192CFEE54252406936
Authority key identifier: EB:27:E9:91:20:72:32:DB:9C:6D:84:7F:06:22:4E:25:D3:60:64:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB27E991207232DB9C6D847F06224E25D3606469.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/34352e37302e3231392e302f32342d3234203d3e20323637353838.roa
Signing time:             Fri 15 May 2026 15:14:00 +0000
ROA not before:           Fri 15 May 2026 15:09:00 +0000
ROA not after:            Fri 14 May 2027 15:14:00 +0000
asID:                     267588
IP address blocks:        45.70.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/EB27E991207232DB9C6D847F06224E25D3606469.crl
                          rsync://rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/EB27E991207232DB9C6D847F06224E25D3606469.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB27E991207232DB9C6D847F06224E25D3606469.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 00:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:fe:00:00:ad:25:c9:ef:d4:18:c3:19:2c:fe:e5:42:52:40:69:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB27E991207232DB9C6D847F06224E25D3606469
        Validity
            Not Before: May 15 15:09:00 2026 GMT
            Not After : May 14 15:14:00 2027 GMT
        Subject: CN=3082010A0282010100BF131EB8D0D047A3CB53B070D52486A452A7D33819DD36ED9C8A562DDEFAB20B6D8B2909EA312F981484E621C35CC2365D4E65E3573717FED95FB1298D6B727EAEE8FA0E914215A1C992C7CA7CA8392D4F9E60F2C2A6289D4A43DE7E5AEE04F05DE8F13465E5EC795E7A4B1C9A1AEF47F260C07C56551367B143C1F116B5A26AC1986C22D1D2C974978E7017D5532D198F8249E208046FFF6D5A978FC10B2ACE733C05BA69840F36BF0D194CF041F8E4C9108C58CBED340DDA79ACE2659004EFADDF55B27B06BD723B7E61A19CB2A836124247403B81C90FBF115A74340B1A1ECDB9AA577B7B1F11A18A52713852C1F6BFD0B2DB7568A8A5C402E8DC5CD11C6D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:13:1e:b8:d0:d0:47:a3:cb:53:b0:70:d5:24:
                    86:a4:52:a7:d3:38:19:dd:36:ed:9c:8a:56:2d:de:
                    fa:b2:0b:6d:8b:29:09:ea:31:2f:98:14:84:e6:21:
                    c3:5c:c2:36:5d:4e:65:e3:57:37:17:fe:d9:5f:b1:
                    29:8d:6b:72:7e:ae:e8:fa:0e:91:42:15:a1:c9:92:
                    c7:ca:7c:a8:39:2d:4f:9e:60:f2:c2:a6:28:9d:4a:
                    43:de:7e:5a:ee:04:f0:5d:e8:f1:34:65:e5:ec:79:
                    5e:7a:4b:1c:9a:1a:ef:47:f2:60:c0:7c:56:55:13:
                    67:b1:43:c1:f1:16:b5:a2:6a:c1:98:6c:22:d1:d2:
                    c9:74:97:8e:70:17:d5:53:2d:19:8f:82:49:e2:08:
                    04:6f:ff:6d:5a:97:8f:c1:0b:2a:ce:73:3c:05:ba:
                    69:84:0f:36:bf:0d:19:4c:f0:41:f8:e4:c9:10:8c:
                    58:cb:ed:34:0d:da:79:ac:e2:65:90:04:ef:ad:df:
                    55:b2:7b:06:bd:72:3b:7e:61:a1:9c:b2:a8:36:12:
                    42:47:40:3b:81:c9:0f:bf:11:5a:74:34:0b:1a:1e:
                    cd:b9:aa:57:7b:7b:1f:11:a1:8a:52:71:38:52:c1:
                    f6:bf:d0:b2:db:75:68:a8:a5:c4:02:e8:dc:5c:d1:
                    1c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D3:2E:A6:E8:6A:24:7F:36:8E:92:A6:59:92:9D:9A:F4:2A:F2:D6
            X509v3 Authority Key Identifier:
                keyid:EB:27:E9:91:20:72:32:DB:9C:6D:84:7F:06:22:4E:25:D3:60:64:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/EB27E991207232DB9C6D847F06224E25D3606469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB27E991207232DB9C6D847F06224E25D3606469.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/34352e37302e3231392e302f32342d3234203d3e20323637353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:71:21:cf:69:cc:52:38:cc:7e:0c:58:54:c5:aa:e8:d6:29:
         59:c4:6c:a0:e2:18:1c:96:78:f0:1e:8f:42:d3:4f:d8:2f:65:
         c2:5a:27:0f:8a:14:2f:5b:1f:7c:69:1f:7a:b5:b4:ad:b3:c9:
         ca:89:ed:27:cb:06:72:e0:b9:8d:b5:3e:48:99:ba:1b:28:d2:
         8c:ef:c8:7a:4f:3c:57:d9:96:a5:c9:34:e0:19:95:d5:a9:b0:
         64:64:da:59:ac:f0:80:2b:e9:c8:23:17:de:9c:80:98:49:6e:
         30:77:22:7e:68:a1:4f:da:ff:e4:c5:b7:d1:1c:f1:83:b5:b1:
         41:dd:b4:2c:51:03:50:af:11:2c:8d:60:17:0d:c4:47:01:bb:
         aa:42:7b:28:9e:e9:b5:54:62:2f:4a:71:b6:77:6e:22:6e:9d:
         a8:a0:ae:b7:63:b3:80:b6:98:2c:3c:cb:bc:2f:2d:89:3f:a8:
         34:58:fa:f1:ec:9d:c9:6f:21:c4:42:4f:60:e9:e9:a2:52:9f:
         63:31:e5:2f:a3:24:33:e7:ea:96:da:9e:f2:d8:9e:07:05:b0:
         8f:fc:36:cf:7c:01:0b:97:f1:f3:e8:1a:41:2e:b1:62:77:b5:
         9f:de:bb:49:44:47:42:0a:1b:de:35:e6:ed:cc:a3:4b:ea:0c:
         b2:e8:c8:cd
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUJP4AAK0lye/UGMMZLP7lQlJAaTYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUIyN0U5OTEyMDcyMzJEQjlDNkQ4NDdGMDYyMjRFMjVE
MzYwNjQ2OTAeFw0yNjA1MTUxNTA5MDBaFw0yNzA1MTQxNTE0MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkYxMzFFQjhEMEQwNDdBM0NC
NTNCMDcwRDUyNDg2QTQ1MkE3RDMzODE5REQzNkVEOUM4QTU2MkRERUZBQjIwQjZE
OEIyOTA5RUEzMTJGOTgxNDg0RTYyMUMzNUNDMjM2NUQ0RTY1RTM1NzM3MTdGRUQ5
NUZCMTI5OEQ2QjcyN0VBRUU4RkEwRTkxNDIxNUExQzk5MkM3Q0E3Q0E4MzkyRDRG
OUU2MEYyQzJBNjI4OUQ0QTQzREU3RTVBRUUwNEYwNURFOEYxMzQ2NUU1RUM3OTVF
N0E0QjFDOUExQUVGNDdGMjYwQzA3QzU2NTUxMzY3QjE0M0MxRjExNkI1QTI2QUMx
OTg2QzIyRDFEMkM5NzQ5NzhFNzAxN0Q1NTMyRDE5OEY4MjQ5RTIwODA0NkZGRjZE
NUE5NzhGQzEwQjJBQ0U3MzNDMDVCQTY5ODQwRjM2QkYwRDE5NENGMDQxRjhFNEM5
MTA4QzU4Q0JFRDM0MEREQTc5QUNFMjY1OTAwNEVGQURERjU1QjI3QjA2QkQ3MjNC
N0U2MUExOUNCMkE4MzYxMjQyNDc0MDNCODFDOTBGQkYxMTVBNzQzNDBCMUExRUNE
QjlBQTU3N0I3QjFGMTFBMThBNTI3MTM4NTJDMUY2QkZEMEIyREI3NTY4QThBNUM0
MDJFOERDNUNEMTFDNkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvxMeuNDQR6PLU7Bw1SSGpFKn0zgZ3TbtnIpWLd76sgttiykJ6jEv
mBSE5iHDXMI2XU5l41c3F/7ZX7EpjWtyfq7o+g6RQhWhyZLHynyoOS1PnmDywqYo
nUpD3n5a7gTwXejxNGXl7HleekscmhrvR/JgwHxWVRNnsUPB8Ra1omrBmGwi0dLJ
dJeOcBfVUy0Zj4JJ4ggEb/9tWpePwQsqznM8BbpphA82vw0ZTPBB+OTJEIxYy+00
Ddp5rOJlkATvrd9VsnsGvXI7fmGhnLKoNhJCR0A7gckPvxFadDQLGh7NuapXe3sf
EaGKUnE4UsH2v9Cy23VoqKXEAujcXNEcbQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FAXTLqboaiR/No6SplmSnZr0KvLWMB8GA1UdIwQYMBaAFOsn6ZEgcjLbnG2EfwYi
TiXTYGRpMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZEd1hWejE5bWs1WWN3
RGFpWnFRbnRpVVZtOVdnTWZhWm5Cb1l0UDZnQ21SLzAvRUIyN0U5OTEyMDcyMzJE
QjlDNkQ4NDdGMDYyMjRFMjVEMzYwNjQ2OS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9FQjI3RTk5MTIwNzIzMkRCOUM2RDg0N0YwNjIyNEUyNUQzNjA2
NDY5LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby82RHdYVnoxOW1rNVljd0RhaVpx
UW50aVVWbTlXZ01mYVpuQm9ZdFA2Z0NtUi8wLzM0MzUyZTM3MzAyZTMyMzEzOTJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNzM1MzgzOC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1G
2zANBgkqhkiG9w0BAQsFAAOCAQEAM3Ehz2nMUjjMfgxYVMWq6NYpWcRsoOIYHJZ4
8B6PQtNP2C9lwlonD4oUL1sffGkferW0rbPJyontJ8sGcuC5jbU+SJm6GyjSjO/I
ek88V9mWpck04BmV1amwZGTaWazwgCvpyCMX3pyAmEluMHcifmihT9r/5MW30Rzx
g7WxQd20LFEDUK8RLI1gFw3ERwG7qkJ7KJ7ptVRiL0pxtnduIm6dqKCut2OzgLaY
LDzLvC8tiT+oNFj68eydyW8hxEJPYOnpolKfYzHlL6MkM+fqltqe8tieBwWwj/w2
z3wBC5fx8+gaQS6xYne1n967SURHQgob3jXm7cyjS+oMsujIzQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:05:03 2026 by rpki-client