Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/99fRWK3KHYAnyGMGFayYV77LyeZwJ4ffr1G8i5fYbAVS/0/34352e3233332e3132362e302f32332d3233203d3e20323637333131.roa
File:                     34352e3233332e3132362e302f32332d3233203d3e20323637333131.roa (raw, json)
Hash identifier:          hkAiU9SKIffWbbhZVgkH26phKKIyNw1XWljFUakm6ns=
Subject key identifier:   9D:CC:7E:65:D1:FF:9F:1C:53:99:D3:A6:75:4F:FB:A5:4B:92:0D:76
Certificate issuer:       /CN=E37674EA65316CC55C5DC1C00268312BA10868A5
Certificate serial:       3098E68C7CC28854392B3ABD312512E3921B5940
Authority key identifier: E3:76:74:EA:65:31:6C:C5:5C:5D:C1:C0:02:68:31:2B:A1:08:68:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E37674EA65316CC55C5DC1C00268312BA10868A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/99fRWK3KHYAnyGMGFayYV77LyeZwJ4ffr1G8i5fYbAVS/0/34352e3233332e3132362e302f32332d3233203d3e20323637333131.roa
Signing time:             Tue 09 Jun 2026 12:56:15 +0000
ROA not before:           Tue 09 Jun 2026 12:51:15 +0000
ROA not after:            Tue 08 Jun 2027 12:56:15 +0000
asID:                     267311
IP address blocks:        45.233.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/99fRWK3KHYAnyGMGFayYV77LyeZwJ4ffr1G8i5fYbAVS/0/E37674EA65316CC55C5DC1C00268312BA10868A5.crl
                          rsync://rpki-repo.registro.br/repo/99fRWK3KHYAnyGMGFayYV77LyeZwJ4ffr1G8i5fYbAVS/0/E37674EA65316CC55C5DC1C00268312BA10868A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E37674EA65316CC55C5DC1C00268312BA10868A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 12:13:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:98:e6:8c:7c:c2:88:54:39:2b:3a:bd:31:25:12:e3:92:1b:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E37674EA65316CC55C5DC1C00268312BA10868A5
        Validity
            Not Before: Jun  9 12:51:15 2026 GMT
            Not After : Jun  8 12:56:15 2027 GMT
        Subject: CN=9DCC7E65D1FF9F1C5399D3A6754FFBA54B920D76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:34:50:98:e3:7c:50:52:fa:4c:1d:67:b5:f7:
                    25:30:45:a2:37:75:8d:74:be:65:4f:e8:8c:01:b3:
                    95:b1:bf:7e:e5:1f:45:1e:4b:55:0d:9a:cf:2d:59:
                    53:a1:79:ea:52:62:bb:77:89:5a:4a:42:9f:1e:af:
                    e6:6a:38:b9:0c:48:56:5e:96:a9:52:1b:4c:4c:71:
                    42:19:15:81:2c:a7:73:b5:00:52:73:bc:e4:a2:b4:
                    50:0d:b4:07:1e:c8:8b:b8:66:d5:7d:3d:f8:d0:25:
                    00:96:d6:97:90:c1:eb:3a:bf:b4:56:f5:15:0d:17:
                    47:d1:f4:43:be:50:97:6d:ca:eb:c8:5c:80:ef:ed:
                    f5:58:20:03:a5:1b:c3:4e:b6:30:9b:f3:c2:c3:9b:
                    f0:cd:96:d9:7c:07:a4:5f:5c:58:35:30:b0:1e:38:
                    d9:c3:59:02:44:c8:1d:82:2f:89:bf:33:d6:b0:bf:
                    4a:9a:de:ec:9b:fa:8e:8b:49:71:bb:c7:32:92:4e:
                    5f:7b:58:44:86:ea:da:83:f4:e7:5f:d9:c9:24:ff:
                    71:cb:df:03:b8:fa:94:b7:3f:0d:7d:66:1b:6a:ff:
                    cf:ee:39:b7:a5:91:d6:dc:0c:fe:39:36:0f:ce:ae:
                    39:22:07:5d:18:72:c3:40:6c:23:4a:25:69:8b:94:
                    78:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:CC:7E:65:D1:FF:9F:1C:53:99:D3:A6:75:4F:FB:A5:4B:92:0D:76
            X509v3 Authority Key Identifier:
                keyid:E3:76:74:EA:65:31:6C:C5:5C:5D:C1:C0:02:68:31:2B:A1:08:68:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/99fRWK3KHYAnyGMGFayYV77LyeZwJ4ffr1G8i5fYbAVS/0/E37674EA65316CC55C5DC1C00268312BA10868A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E37674EA65316CC55C5DC1C00268312BA10868A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/99fRWK3KHYAnyGMGFayYV77LyeZwJ4ffr1G8i5fYbAVS/0/34352e3233332e3132362e302f32332d3233203d3e20323637333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:03:ec:61:39:e6:da:cd:8a:57:19:53:ee:1a:ca:9a:00:de:
         22:3b:71:80:ed:ed:10:e4:78:05:7f:49:9a:18:0d:87:3c:17:
         c1:32:67:a9:c2:3a:d0:0f:a3:3d:3f:60:df:a4:d3:0f:8c:5b:
         2f:1a:1d:f0:eb:32:a0:5f:e9:1d:40:33:64:ad:93:b1:72:df:
         2d:b6:ce:13:24:f2:4f:df:8f:95:b9:db:5a:cb:9d:e6:92:96:
         17:5d:ee:9b:f7:90:e7:35:0b:2c:62:e1:5f:24:f7:15:d2:14:
         8d:6f:bb:57:0b:c4:5f:5d:7f:a8:bf:d1:99:53:bc:17:72:24:
         45:e9:30:24:ef:7e:4e:39:0d:9e:52:cf:54:f6:2c:e1:40:c6:
         54:c9:30:fb:0f:3a:94:ed:38:3f:e1:2c:25:85:39:f8:a1:3b:
         c1:ed:2a:26:ec:b5:16:3c:1c:ae:d4:38:ba:07:90:60:6d:dc:
         3d:ef:4a:75:a5:19:e3:c9:23:59:5d:db:8d:15:f6:a6:43:36:
         34:86:c1:c7:20:eb:4b:55:f9:c0:6e:92:d7:10:25:87:6a:f3:
         de:37:c5:7f:4d:0b:79:92:b9:ea:c3:07:79:a8:51:52:85:7c:
         0d:4d:7d:98:a6:42:6a:b2:f8:67:ba:dd:58:ed:42:b6:29:17:
         c0:16:30:be
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMJjmjHzCiFQ5Kzq9MSUS45IbWUAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM3Njc0RUE2NTMxNkNDNTVDNURDMUMwMDI2ODMxMkJB
MTA4NjhBNTAeFw0yNjA2MDkxMjUxMTVaFw0yNzA2MDgxMjU2MTVaMDMxMTAvBgNV
BAMTKDlEQ0M3RTY1RDFGRjlGMUM1Mzk5RDNBNjc1NEZGQkE1NEI5MjBENzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClNFCY43xQUvpMHWe19yUwRaI3
dY10vmVP6IwBs5Wxv37lH0UeS1UNms8tWVOheepSYrt3iVpKQp8er+ZqOLkMSFZe
lqlSG0xMcUIZFYEsp3O1AFJzvOSitFANtAceyIu4ZtV9PfjQJQCW1peQwes6v7RW
9RUNF0fR9EO+UJdtyuvIXIDv7fVYIAOlG8NOtjCb88LDm/DNltl8B6RfXFg1MLAe
ONnDWQJEyB2CL4m/M9awv0qa3uyb+o6LSXG7xzKSTl97WESG6tqD9Odf2ckk/3HL
3wO4+pS3Pw19Zhtq/8/uObelkdbcDP45Ng/OrjkiB10YcsNAbCNKJWmLlHjrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUncx+ZdH/nxxTmdOmdU/7pUuSDXYwHwYDVR0j
BBgwFoAU43Z06mUxbMVcXcHAAmgxK6EIaKUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTlmUldLM0tIWUFueUdNR0ZheVlWNzdMeWVad0o0ZmZyMUc4aTVmWWJB
VlMvMC9FMzc2NzRFQTY1MzE2Q0M1NUM1REMxQzAwMjY4MzEyQkExMDg2OEE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzNzY3NEVBNjUzMTZDQzU1
QzVEQzFDMDAyNjgzMTJCQTEwODY4QTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzk5ZlJXSzNLSFlBbnlHTUdGYXlZVjc3THllWndKNGZmcjFHOGk1ZlliQVZTLzAv
MzQzNTJlMzIzMzMzMmUzMTMyMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzczMzMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt6X4wDQYJKoZIhvcNAQELBQADggEBAGAD7GE5
5trNilcZU+4aypoA3iI7cYDt7RDkeAV/SZoYDYc8F8EyZ6nCOtAPoz0/YN+k0w+M
Wy8aHfDrMqBf6R1AM2Stk7Fy3y22zhMk8k/fj5W521rLneaSlhdd7pv3kOc1Cyxi
4V8k9xXSFI1vu1cLxF9df6i/0ZlTvBdyJEXpMCTvfk45DZ5Sz1T2LOFAxlTJMPsP
OpTtOD/hLCWFOfihO8HtKibstRY8HK7UOLoHkGBt3D3vSnWlGePJI1ld240V9qZD
NjSGwccg60tV+cBuktcQJYdq8943xX9NC3mSuerDB3moUVKFfA1NfZimQmqy+Ge6
3VjtQrYpF8AWML4=
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:13:50 2026 by rpki-client