Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YNy9pUfScMNGH1SmZLmyaTMPUuW7opCRBJghzE2LfFj/0/34352e3138392e3133362e302f32322d3234203d3e20323639353930.roa
File:                     34352e3138392e3133362e302f32322d3234203d3e20323639353930.roa (raw, json)
Hash identifier:          3UE77j49DEXhnSEHkZ4h+EPXDcAa301AanjzmbZezqg=
Subject key identifier:   E3:3F:3B:59:42:E7:A4:A4:55:8E:A4:DA:A4:DF:D6:B9:10:F9:18:44
Certificate issuer:       /CN=C58A469341D2EFFDB450D434A30F25C9B1AD2A2C
Certificate serial:       112EFB3593BE6F442857717611F1C5FF5942647E
Authority key identifier: C5:8A:46:93:41:D2:EF:FD:B4:50:D4:34:A3:0F:25:C9:B1:AD:2A:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C58A469341D2EFFDB450D434A30F25C9B1AD2A2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YNy9pUfScMNGH1SmZLmyaTMPUuW7opCRBJghzE2LfFj/0/34352e3138392e3133362e302f32322d3234203d3e20323639353930.roa
Signing time:             Fri 01 May 2026 22:34:55 +0000
ROA not before:           Fri 01 May 2026 22:29:55 +0000
ROA not after:            Fri 30 Apr 2027 22:34:55 +0000
asID:                     269590
IP address blocks:        45.189.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9YNy9pUfScMNGH1SmZLmyaTMPUuW7opCRBJghzE2LfFj/0/C58A469341D2EFFDB450D434A30F25C9B1AD2A2C.crl
                          rsync://rpki-repo.registro.br/repo/9YNy9pUfScMNGH1SmZLmyaTMPUuW7opCRBJghzE2LfFj/0/C58A469341D2EFFDB450D434A30F25C9B1AD2A2C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C58A469341D2EFFDB450D434A30F25C9B1AD2A2C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 21:12:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:2e:fb:35:93:be:6f:44:28:57:71:76:11:f1:c5:ff:59:42:64:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C58A469341D2EFFDB450D434A30F25C9B1AD2A2C
        Validity
            Not Before: May  1 22:29:55 2026 GMT
            Not After : Apr 30 22:34:55 2027 GMT
        Subject: CN=E33F3B5942E7A4A4558EA4DAA4DFD6B910F91844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:32:6b:a0:df:34:bd:fd:be:1a:a6:8e:b8:fe:
                    63:59:23:c4:f1:bf:99:43:76:8f:c3:1c:4c:c6:ac:
                    b3:4f:e5:17:cd:f5:63:93:6c:24:7e:23:e3:01:68:
                    07:a6:e4:ce:e7:60:30:76:3d:c3:9a:85:55:73:fd:
                    7e:15:ab:da:3c:32:f8:1d:7a:63:b9:10:23:6f:ef:
                    c6:bc:45:d7:d2:7d:2d:90:47:e5:bf:fd:4a:02:22:
                    bf:3f:93:a5:61:d2:22:c0:29:e9:51:4f:32:03:f3:
                    64:ab:ae:b6:5f:56:99:bf:97:fa:7e:31:dd:ee:04:
                    98:c6:1b:78:a2:26:29:2f:77:be:9f:ed:5e:13:06:
                    1a:f0:b0:d7:da:31:f7:b7:4b:38:23:c3:13:d4:9a:
                    66:29:71:84:c0:53:04:44:6d:47:45:2d:14:12:80:
                    c2:de:04:29:23:77:52:e4:dc:d5:8c:61:96:25:a9:
                    a6:76:b3:ea:29:bb:41:54:6d:7c:1e:cb:c8:30:7c:
                    12:69:50:ca:dc:c6:1e:65:4a:f6:f7:d3:b5:a9:56:
                    6d:6a:6e:c0:55:70:ab:64:19:f7:32:6f:7a:32:8e:
                    77:f3:a2:07:2b:cc:dc:d3:60:00:9e:65:e3:39:a3:
                    99:56:24:3b:f2:36:da:0f:5f:4d:c0:bc:c3:a7:20:
                    07:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:3F:3B:59:42:E7:A4:A4:55:8E:A4:DA:A4:DF:D6:B9:10:F9:18:44
            X509v3 Authority Key Identifier:
                keyid:C5:8A:46:93:41:D2:EF:FD:B4:50:D4:34:A3:0F:25:C9:B1:AD:2A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YNy9pUfScMNGH1SmZLmyaTMPUuW7opCRBJghzE2LfFj/0/C58A469341D2EFFDB450D434A30F25C9B1AD2A2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C58A469341D2EFFDB450D434A30F25C9B1AD2A2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YNy9pUfScMNGH1SmZLmyaTMPUuW7opCRBJghzE2LfFj/0/34352e3138392e3133362e302f32322d3234203d3e20323639353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:01:0c:bb:25:fe:4d:31:ac:3b:81:26:a3:b4:82:cb:6d:6a:
         34:da:44:cf:71:4b:b5:65:e7:22:ee:7d:14:09:df:d4:63:c0:
         44:ff:d5:37:dc:83:ac:a0:aa:62:88:fd:af:dc:d7:83:0b:bd:
         bd:63:59:9a:b4:4e:3b:ab:69:06:b8:09:b2:53:0b:1a:36:6a:
         12:c9:bb:f4:7d:c1:a9:e6:a8:2f:ce:89:74:07:e0:f0:fa:4c:
         26:b6:f7:2b:30:b3:34:f5:d6:f7:33:bb:d8:f4:97:09:d3:66:
         06:d7:60:48:88:55:22:6d:79:51:f9:da:85:52:96:e2:06:56:
         29:5b:9b:1a:ec:32:de:85:d4:79:49:35:61:54:b6:87:e0:08:
         1a:94:3f:06:04:be:46:e0:4e:48:4e:a8:54:b9:97:db:c1:0f:
         9d:99:9c:36:d7:fe:c5:7d:22:91:7a:0d:6b:77:ba:ff:7f:56:
         5d:82:a5:66:6c:9d:5e:12:ad:9c:51:44:b5:b7:31:32:64:aa:
         e3:2d:b4:68:58:02:c1:96:2b:11:db:81:1b:9a:b6:0f:33:f2:
         7d:ad:6d:38:cc:8c:16:4e:f5:0d:6a:8a:f0:3e:a5:f5:33:87:
         ca:68:c4:64:57:af:10:09:94:c2:8b:ee:28:33:81:da:54:dd:
         66:f4:f1:54
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUES77NZO+b0QoV3F2EfHF/1lCZH4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzU4QTQ2OTM0MUQyRUZGREI0NTBENDM0QTMwRjI1QzlC
MUFEMkEyQzAeFw0yNjA1MDEyMjI5NTVaFw0yNzA0MzAyMjM0NTVaMDMxMTAvBgNV
BAMTKEUzM0YzQjU5NDJFN0E0QTQ1NThFQTREQUE0REZENkI5MTBGOTE4NDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXMmug3zS9/b4apo64/mNZI8Tx
v5lDdo/DHEzGrLNP5RfN9WOTbCR+I+MBaAem5M7nYDB2PcOahVVz/X4Vq9o8Mvgd
emO5ECNv78a8RdfSfS2QR+W//UoCIr8/k6Vh0iLAKelRTzID82SrrrZfVpm/l/p+
Md3uBJjGG3iiJikvd76f7V4TBhrwsNfaMfe3SzgjwxPUmmYpcYTAUwREbUdFLRQS
gMLeBCkjd1Lk3NWMYZYlqaZ2s+opu0FUbXwey8gwfBJpUMrcxh5lSvb307WpVm1q
bsBVcKtkGfcyb3oyjnfzogcrzNzTYACeZeM5o5lWJDvyNtoPX03AvMOnIAdPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU4z87WULnpKRVjqTapN/WuRD5GEQwHwYDVR0j
BBgwFoAUxYpGk0HS7/20UNQ0ow8lybGtKiwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVlOeTlwVWZTY01OR0gxU21aTG15YVRNUFV1VzdvcENSQkpnaHpFMkxm
RmovMC9DNThBNDY5MzQxRDJFRkZEQjQ1MEQ0MzRBMzBGMjVDOUIxQUQyQTJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M1OEE0NjkzNDFEMkVGRkRC
NDUwRDQzNEEzMEYyNUM5QjFBRDJBMkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlZTnk5cFVmU2NNTkdIMVNtWkxteWFUTVBVdVc3b3BDUkJKZ2h6RTJMZkZqLzAv
MzQzNTJlMzEzODM5MmUzMTMzMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzkzNTM5MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItvYgwDQYJKoZIhvcNAQELBQADggEBAFYBDLsl
/k0xrDuBJqO0gsttajTaRM9xS7Vl5yLufRQJ39RjwET/1Tfcg6ygqmKI/a/c14ML
vb1jWZq0TjuraQa4CbJTCxo2ahLJu/R9wanmqC/OiXQH4PD6TCa29yswszT11vcz
u9j0lwnTZgbXYEiIVSJteVH52oVSluIGVilbmxrsMt6F1HlJNWFUtofgCBqUPwYE
vkbgTkhOqFS5l9vBD52ZnDbX/sV9IpF6DWt3uv9/Vl2CpWZsnV4SrZxRRLW3MTJk
quMttGhYAsGWKxHbgRuatg8z8n2tbTjMjBZO9Q1qivA+pfUzh8poxGRXrxAJlMKL
7igzgdpU3Wb08VQ=
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:16:49 2026 by rpki-client