Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/34352e3138392e33352e302f32342d3234203d3e20323734373633.roa
File:                     34352e3138392e33352e302f32342d3234203d3e20323734373633.roa (raw, json)
Hash identifier:          GUnuNUq25OqK8U34niiFHmYG8FgYW5BaLNMMEqea2oU=
Subject key identifier:   04:22:53:7A:72:D2:D0:0D:11:E2:4A:CD:F7:53:F9:BE:56:11:41:09
Certificate issuer:       /CN=40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE
Certificate serial:       2F23A4938DAB33720706D471E76F9AAA9152E780
Authority key identifier: 40:BB:14:A2:FD:8B:81:10:30:42:BF:32:FA:C9:B2:D9:0A:CF:8A:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/34352e3138392e33352e302f32342d3234203d3e20323734373633.roa
Signing time:             Thu 19 Mar 2026 20:39:48 +0000
ROA not before:           Thu 19 Mar 2026 20:34:48 +0000
ROA not after:            Thu 18 Mar 2027 20:39:48 +0000
asID:                     274763
IP address blocks:        45.189.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.crl
                          rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 16:51:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:23:a4:93:8d:ab:33:72:07:06:d4:71:e7:6f:9a:aa:91:52:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE
        Validity
            Not Before: Mar 19 20:34:48 2026 GMT
            Not After : Mar 18 20:39:48 2027 GMT
        Subject: CN=0422537A72D2D00D11E24ACDF753F9BE56114109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c1:c9:c3:a9:99:3f:2a:47:88:f1:a6:ce:7c:
                    19:a8:b2:ef:e0:6e:56:d1:a8:7b:80:38:37:b1:97:
                    d6:00:3c:a9:bd:b0:51:dd:99:c0:1c:e2:3a:89:75:
                    63:c2:1d:9d:7f:a1:53:b5:8c:cc:4c:8c:24:c1:b5:
                    95:75:68:9e:2d:e6:14:81:2e:04:1b:39:2f:02:77:
                    9a:b6:d3:f2:9a:5b:cb:55:e8:a2:cf:5c:37:0f:46:
                    fc:97:d3:76:6f:13:3b:d3:7e:35:ed:29:8e:bd:29:
                    c1:64:1b:bf:86:40:78:72:4c:26:95:49:87:12:b1:
                    aa:90:93:cf:0a:17:8f:23:2b:be:5b:09:15:07:85:
                    ce:fe:a9:ec:4c:24:24:8c:84:90:88:5e:d8:e8:1c:
                    94:8c:38:cb:57:30:fe:ab:69:9a:d3:ff:7d:93:d2:
                    db:00:13:b2:a0:18:1b:0a:b7:00:cf:68:3f:35:c9:
                    77:d4:95:8e:0c:d8:05:e4:b7:f9:bf:da:5f:97:4c:
                    18:66:72:5d:e5:54:3a:c4:58:98:fa:e0:ce:ea:48:
                    63:d1:0d:32:3d:52:ea:c5:02:e1:6d:d6:5b:03:94:
                    60:8d:04:db:d8:86:fa:93:3c:15:61:52:b1:9e:34:
                    ff:5b:30:b5:5c:5a:c4:b1:55:b2:cf:67:d9:c2:e0:
                    c8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:22:53:7A:72:D2:D0:0D:11:E2:4A:CD:F7:53:F9:BE:56:11:41:09
            X509v3 Authority Key Identifier:
                keyid:40:BB:14:A2:FD:8B:81:10:30:42:BF:32:FA:C9:B2:D9:0A:CF:8A:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/34352e3138392e33352e302f32342d3234203d3e20323734373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:15:a8:2f:55:39:11:fd:14:98:b4:53:08:c9:3a:81:42:96:
         eb:82:db:d1:8b:3e:13:03:34:c0:45:1f:cf:cc:93:64:32:fb:
         e3:38:27:77:d2:b8:c0:ef:ed:c7:99:61:b0:75:f1:61:ea:19:
         c9:cc:2b:11:98:0c:41:c1:1d:af:9e:07:05:d1:b1:99:63:11:
         21:79:59:a4:b9:08:6d:8b:66:ad:d2:7c:62:ac:49:aa:f3:08:
         1a:f4:bb:23:b2:ca:99:8a:35:d2:47:13:74:ba:ae:69:e8:0d:
         46:f0:9c:c8:20:f6:1b:ac:fd:b3:a3:05:c6:8e:84:93:a3:d3:
         c4:9a:1e:b2:d2:02:6a:df:71:d6:4b:e2:a8:51:5e:33:89:eb:
         90:22:c5:b6:9b:a2:1f:4a:2a:22:e4:0f:fa:02:77:ce:9e:7e:
         2a:53:48:fd:c4:18:45:32:de:cd:3f:82:be:d9:1e:06:3e:f1:
         8b:be:42:3f:4a:42:81:fd:c3:64:13:00:f8:36:4c:b9:a9:d6:
         20:88:01:0d:9c:d9:ca:c4:c8:9b:98:01:99:e3:ee:ae:1e:6e:
         a8:57:2e:41:a6:a5:ba:34:3f:25:91:c4:0b:b7:d6:61:33:3c:
         d6:c9:22:f6:db:24:d3:cf:94:22:e0:8e:7d:b6:1b:bd:8d:e4:
         92:39:a7:99
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULyOkk42rM3IHBtRx52+aqpFS54AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDBCQjE0QTJGRDhCODExMDMwNDJCRjMyRkFDOUIyRDkw
QUNGOEFGRTAeFw0yNjAzMTkyMDM0NDhaFw0yNzAzMTgyMDM5NDhaMDMxMTAvBgNV
BAMTKDA0MjI1MzdBNzJEMkQwMEQxMUUyNEFDREY3NTNGOUJFNTYxMTQxMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/wcnDqZk/KkeI8abOfBmosu/g
blbRqHuAODexl9YAPKm9sFHdmcAc4jqJdWPCHZ1/oVO1jMxMjCTBtZV1aJ4t5hSB
LgQbOS8Cd5q20/KaW8tV6KLPXDcPRvyX03ZvEzvTfjXtKY69KcFkG7+GQHhyTCaV
SYcSsaqQk88KF48jK75bCRUHhc7+qexMJCSMhJCIXtjoHJSMOMtXMP6raZrT/32T
0tsAE7KgGBsKtwDPaD81yXfUlY4M2AXkt/m/2l+XTBhmcl3lVDrEWJj64M7qSGPR
DTI9UurFAuFt1lsDlGCNBNvYhvqTPBVhUrGeNP9bMLVcWsSxVbLPZ9nC4MjbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUBCJTenLS0A0R4krN91P5vlYRQQkwHwYDVR0j
BBgwFoAUQLsUov2LgRAwQr8y+smy2QrPiv4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG9Xb245dWtqNVlLZ1lmRUNkc0g0cmI5N0pVRnBjWDJ0WkYycVM2TTk2
NjIvMC80MEJCMTRBMkZEOEI4MTEwMzA0MkJGMzJGQUM5QjJEOTBBQ0Y4QUZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwQkIxNEEyRkQ4QjgxMTAz
MDQyQkYzMkZBQzlCMkQ5MEFDRjhBRkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRvV29uOXVrajVZS2dZZkVDZHNINHJiOTdKVUZwY1gydFpGMnFTNk05NjYyLzAv
MzQzNTJlMzEzODM5MmUzMzM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM0
MzczNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALb0jMA0GCSqGSIb3DQEBCwUAA4IBAQALFagvVTkR
/RSYtFMIyTqBQpbrgtvRiz4TAzTARR/PzJNkMvvjOCd30rjA7+3HmWGwdfFh6hnJ
zCsRmAxBwR2vngcF0bGZYxEheVmkuQhti2at0nxirEmq8wga9LsjssqZijXSRxN0
uq5p6A1G8JzIIPYbrP2zowXGjoSTo9PEmh6y0gJq33HWS+KoUV4zieuQIsW2m6If
Sioi5A/6AnfOnn4qU0j9xBhFMt7NP4K+2R4GPvGLvkI/SkKB/cNkEwD4Nky5qdYg
iAENnNnKxMibmAGZ4+6uHm6oVy5BpqW6ND8lkcQLt9ZhMzzWySL22yTTz5Qi4I59
thu9jeSSOaeZ
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:26:54 2026 by rpki-client