Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/34352e3233302e3136322e302f32332d3233203d3e20323637323134.roa
File:                     34352e3233302e3136322e302f32332d3233203d3e20323637323134.roa (raw, json)
Hash identifier:          JKgV2BfQ3RYcLpotrOP8yza7uMo5J+dfUwRwlTVHNdA=
Subject key identifier:   51:78:13:3C:B3:71:11:B6:6A:B5:62:7F:96:3C:CF:C8:F2:2B:CE:6B
Certificate issuer:       /CN=B80A28EDDD66AE3F07174B404FF6865AAB90A7DB
Certificate serial:       5DBFEFFC0424EF427025792A4A6F4A402E0D74B3
Authority key identifier: B8:0A:28:ED:DD:66:AE:3F:07:17:4B:40:4F:F6:86:5A:AB:90:A7:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/34352e3233302e3136322e302f32332d3233203d3e20323637323134.roa
Signing time:             Wed 01 Oct 2025 15:01:40 +0000
ROA not before:           Wed 01 Oct 2025 14:56:40 +0000
ROA not after:            Wed 30 Sep 2026 15:01:40 +0000
asID:                     267214
IP address blocks:        45.230.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.crl
                          rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:16:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:bf:ef:fc:04:24:ef:42:70:25:79:2a:4a:6f:4a:40:2e:0d:74:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B80A28EDDD66AE3F07174B404FF6865AAB90A7DB
        Validity
            Not Before: Oct  1 14:56:40 2025 GMT
            Not After : Sep 30 15:01:40 2026 GMT
        Subject: CN=5178133CB37111B66AB5627F963CCFC8F22BCE6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:20:73:ed:dd:d1:ef:03:e8:38:22:96:b4:33:
                    25:f1:fb:9c:30:10:a4:8c:07:0e:38:a8:89:59:ba:
                    06:b9:7a:4a:6b:b2:ef:5b:ac:38:29:4f:93:81:c8:
                    4b:a3:5e:37:40:61:b4:77:7f:82:4b:1f:1d:c4:47:
                    20:e3:97:1b:a5:03:71:b0:9d:c5:a9:06:30:9f:4c:
                    82:83:e4:69:4b:21:b2:7a:75:2d:c5:de:ba:cc:81:
                    dd:f3:5d:5b:aa:6a:f6:87:73:97:31:b1:5e:68:5e:
                    7b:85:1c:e1:b7:2d:f0:1a:75:f4:d5:b2:a6:b1:a3:
                    69:c4:37:a7:94:84:7b:71:11:a1:e9:86:57:50:5f:
                    a9:12:63:9c:f9:2d:8d:16:4a:ef:ac:30:89:85:af:
                    7a:83:81:53:80:26:77:8c:70:33:5d:09:7b:15:ac:
                    41:78:6c:6e:37:2c:d3:ea:9c:39:bb:d4:84:ad:92:
                    b5:52:2f:de:38:77:5d:f2:eb:f4:00:3c:cc:42:32:
                    f3:61:52:a4:72:44:1f:d4:34:54:9e:ca:96:90:81:
                    6a:8d:49:7b:83:fc:42:c1:55:32:e5:15:9d:85:c9:
                    26:a7:d3:04:a8:e3:fb:f5:4a:21:a3:d2:90:22:00:
                    52:e2:c5:df:a2:0e:51:4f:cd:13:d7:be:3c:1a:9f:
                    a7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:78:13:3C:B3:71:11:B6:6A:B5:62:7F:96:3C:CF:C8:F2:2B:CE:6B
            X509v3 Authority Key Identifier:
                keyid:B8:0A:28:ED:DD:66:AE:3F:07:17:4B:40:4F:F6:86:5A:AB:90:A7:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/34352e3233302e3136322e302f32332d3233203d3e20323637323134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:3a:a4:da:32:cf:db:5d:e3:f1:05:25:77:b8:a0:7f:df:26:
         00:f9:48:b3:47:c6:65:8f:80:f3:ba:36:98:09:b1:e3:a5:b9:
         e6:aa:5f:11:56:f2:69:8a:23:a4:a1:7b:fb:ee:c4:ad:ef:ed:
         47:f9:6c:51:82:32:46:12:4a:57:13:43:29:bc:ac:07:99:69:
         b2:34:8f:bb:c2:ff:29:fe:55:a0:9a:c8:8c:17:22:28:ca:b0:
         ea:67:bb:b1:32:45:d7:05:a9:75:10:1c:99:6a:b0:38:e0:df:
         36:d3:e6:a7:44:26:a3:a5:c6:75:01:31:b6:fe:66:43:54:dd:
         11:98:35:68:1f:77:d8:72:5b:5b:0a:35:1d:2c:42:e5:79:4d:
         ce:f2:80:3b:b8:28:dc:03:74:c6:96:e7:57:50:9b:04:51:c2:
         7f:ab:27:83:e3:eb:cf:66:cf:cb:e3:32:c7:e4:36:d5:37:fc:
         62:f0:1f:cf:01:6c:a3:e7:ce:b9:12:52:0d:d6:8c:60:43:06:
         d4:71:e7:e2:48:de:f8:2e:6a:f0:17:56:87:fd:1b:94:e3:1e:
         1e:c4:1d:ba:8a:5b:7c:cb:80:44:54:1e:d9:01:59:ad:d3:6a:
         22:e7:44:56:10:d7:01:2e:db:d9:4f:74:49:46:dc:87:84:42:
         bc:6e:c2:25
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXb/v/AQk70JwJXkqSm9KQC4NdLMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjgwQTI4RURERDY2QUUzRjA3MTc0QjQwNEZGNjg2NUFB
QjkwQTdEQjAeFw0yNTEwMDExNDU2NDBaFw0yNjA5MzAxNTAxNDBaMDMxMTAvBgNV
BAMTKDUxNzgxMzNDQjM3MTExQjY2QUI1NjI3Rjk2M0NDRkM4RjIyQkNFNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMIHPt3dHvA+g4Ipa0MyXx+5ww
EKSMBw44qIlZuga5ekprsu9brDgpT5OByEujXjdAYbR3f4JLHx3ERyDjlxulA3Gw
ncWpBjCfTIKD5GlLIbJ6dS3F3rrMgd3zXVuqavaHc5cxsV5oXnuFHOG3LfAadfTV
sqaxo2nEN6eUhHtxEaHphldQX6kSY5z5LY0WSu+sMImFr3qDgVOAJneMcDNdCXsV
rEF4bG43LNPqnDm71IStkrVSL944d13y6/QAPMxCMvNhUqRyRB/UNFSeypaQgWqN
SXuD/ELBVTLlFZ2FySan0wSo4/v1SiGj0pAiAFLixd+iDlFPzRPXvjwan6frAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUUXgTPLNxEbZqtWJ/ljzPyPIrzmswHwYDVR0j
BBgwFoAUuAoo7d1mrj8HF0tAT/aGWquQp9swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVU5ZEVpTUZ6NkhZOUxrYVZ0NFQ2RjFnOUpCSzJISHZObUo2WlA4d3Rl
MTUvMC9CODBBMjhFRERENjZBRTNGMDcxNzRCNDA0RkY2ODY1QUFCOTBBN0RCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4MEEyOEVEREQ2NkFFM0Yw
NzE3NEI0MDRGRjY4NjVBQUI5MEE3REIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVVOWRFaU1GejZIWTlMa2FWdDRUNkYxZzlKQksySEh2Tm1KNlpQOHd0ZTE1LzAv
MzQzNTJlMzIzMzMwMmUzMTM2MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzczMjMxMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt5qIwDQYJKoZIhvcNAQELBQADggEBAH46pNoy
z9td4/EFJXe4oH/fJgD5SLNHxmWPgPO6NpgJseOlueaqXxFW8mmKI6She/vuxK3v
7Uf5bFGCMkYSSlcTQym8rAeZabI0j7vC/yn+VaCayIwXIijKsOpnu7EyRdcFqXUQ
HJlqsDjg3zbT5qdEJqOlxnUBMbb+ZkNU3RGYNWgfd9hyW1sKNR0sQuV5Tc7ygDu4
KNwDdMaW51dQmwRRwn+rJ4Pj689mz8vjMsfkNtU3/GLwH88BbKPnzrkSUg3WjGBD
BtRx5+JI3vguavAXVof9G5TjHh7EHbqKW3zLgERUHtkBWa3TaiLnRFYQ1wEu29lP
dElG3IeEQrxuwiU=
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:04:17 2025 by rpki-client