Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/74EFCWkHJfUVQZksZHFeiBhdUM578pwimoCa6CmNotJ8/0/34352e3137372e3232302e302f32332d3332203d3e20323639303439.roa
File:                     34352e3137372e3232302e302f32332d3332203d3e20323639303439.roa (raw, json)
Hash identifier:          GxvmG0wRvbmgIkD6VfKi2TmrWLT9irJV5hjrULRzHew=
Subject key identifier:   AB:9A:5C:53:73:8F:9C:6F:40:EA:EF:F9:D4:1F:3A:53:8A:8E:90:8E
Certificate issuer:       /CN=62A5C0540F947AA10155F189BB23E78C40777E10
Certificate serial:       17A9FE5AF751EECB81B1FF21380A95985B691FA0
Authority key identifier: 62:A5:C0:54:0F:94:7A:A1:01:55:F1:89:BB:23:E7:8C:40:77:7E:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62A5C0540F947AA10155F189BB23E78C40777E10.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/74EFCWkHJfUVQZksZHFeiBhdUM578pwimoCa6CmNotJ8/0/34352e3137372e3232302e302f32332d3332203d3e20323639303439.roa
Signing time:             Thu 25 Sep 2025 23:27:16 +0000
ROA not before:           Thu 25 Sep 2025 23:22:16 +0000
ROA not after:            Thu 24 Sep 2026 23:27:16 +0000
asID:                     269049
IP address blocks:        45.177.220.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/74EFCWkHJfUVQZksZHFeiBhdUM578pwimoCa6CmNotJ8/0/62A5C0540F947AA10155F189BB23E78C40777E10.crl
                          rsync://rpki-repo.registro.br/repo/74EFCWkHJfUVQZksZHFeiBhdUM578pwimoCa6CmNotJ8/0/62A5C0540F947AA10155F189BB23E78C40777E10.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62A5C0540F947AA10155F189BB23E78C40777E10.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 01:40:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a9:fe:5a:f7:51:ee:cb:81:b1:ff:21:38:0a:95:98:5b:69:1f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62A5C0540F947AA10155F189BB23E78C40777E10
        Validity
            Not Before: Sep 25 23:22:16 2025 GMT
            Not After : Sep 24 23:27:16 2026 GMT
        Subject: CN=AB9A5C53738F9C6F40EAEFF9D41F3A538A8E908E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:17:e0:e0:c6:ce:da:93:64:47:16:84:d7:15:
                    a7:ba:8c:5f:cd:f4:0f:49:c0:de:2a:84:ae:77:c7:
                    5b:20:41:19:5f:9e:54:78:41:23:a7:60:b9:03:f1:
                    ff:0b:e3:58:e1:5c:04:ec:b8:2c:fd:95:e1:31:87:
                    d1:84:68:9b:dc:91:c4:4b:5a:6d:08:05:e0:cd:41:
                    b3:5c:8d:0c:f1:3d:2c:5d:fb:34:86:88:38:80:de:
                    37:a2:00:88:ad:f6:08:b4:0d:3d:52:1f:ad:00:98:
                    84:a0:be:77:06:0f:b9:98:82:fb:f2:e6:ed:f2:ba:
                    a0:63:18:59:76:1f:fa:e2:23:25:e7:9b:99:eb:5a:
                    3f:f9:4f:7c:f8:81:a2:cb:34:af:fb:76:24:5e:4d:
                    4b:d2:09:d7:43:8e:83:01:47:b9:0b:b9:3b:34:b2:
                    bb:ba:71:73:fe:3b:0b:d2:dc:7f:15:1c:87:e1:e7:
                    87:e2:58:87:c1:c8:f4:af:7d:ea:bc:b8:65:26:a9:
                    e0:4c:89:a3:44:46:0e:e5:30:8e:97:4e:c5:e5:35:
                    4d:01:f0:ac:34:b4:28:05:72:ad:5d:de:f7:38:24:
                    8f:3c:a9:ee:0e:56:7f:b6:20:a0:cd:51:80:d4:d3:
                    33:a9:f6:85:f6:35:7d:44:8a:b9:91:20:09:88:c7:
                    fc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:9A:5C:53:73:8F:9C:6F:40:EA:EF:F9:D4:1F:3A:53:8A:8E:90:8E
            X509v3 Authority Key Identifier:
                keyid:62:A5:C0:54:0F:94:7A:A1:01:55:F1:89:BB:23:E7:8C:40:77:7E:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/74EFCWkHJfUVQZksZHFeiBhdUM578pwimoCa6CmNotJ8/0/62A5C0540F947AA10155F189BB23E78C40777E10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62A5C0540F947AA10155F189BB23E78C40777E10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/74EFCWkHJfUVQZksZHFeiBhdUM578pwimoCa6CmNotJ8/0/34352e3137372e3232302e302f32332d3332203d3e20323639303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:4a:85:fc:36:1e:c4:6e:d6:9f:2d:69:de:32:7a:77:e2:07:
         e9:c7:35:b5:91:ea:b7:e2:c3:56:8e:9f:47:88:46:1b:b6:8e:
         2e:66:f2:0f:48:4d:9a:97:00:c4:0c:2e:cf:5a:b3:9e:b6:3a:
         19:d7:77:ac:7d:1a:d5:91:98:41:95:48:3d:a0:72:bc:b1:25:
         c9:10:cf:28:e8:43:2a:2f:7f:b6:a9:eb:05:fe:ac:7c:88:72:
         30:fe:5e:de:6d:fd:7e:7c:ed:98:ed:59:10:fe:04:f3:2a:fe:
         4b:ef:a8:e3:06:3c:d7:85:7e:72:30:7d:d6:f6:e5:83:c4:c0:
         a0:b0:a4:d7:b4:d0:92:0d:35:2a:88:51:fb:bf:cc:c4:d2:a1:
         bf:3a:fb:7e:72:7e:83:1f:8f:4e:8f:57:a5:68:cc:4e:73:33:
         61:1e:34:03:4b:2e:95:4e:0b:78:f2:05:77:a8:9b:bd:52:34:
         84:f9:5f:85:6b:f8:c3:a2:7b:f0:42:19:be:6f:de:06:64:79:
         53:3b:1d:55:a0:33:8e:47:71:62:49:59:d8:3d:79:60:b3:a2:
         39:a4:fe:37:33:7c:4c:27:64:f9:26:57:73:5d:4c:d9:35:fc:
         2b:82:7a:16:25:5f:4a:f3:46:8f:08:70:1c:75:21:96:c1:12:
         b1:9a:21:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:05:00 2025 by rpki-client