Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/34352e3138322e36302e302f32342d3332203d3e20323639323230.roa
File:                     34352e3138322e36302e302f32342d3332203d3e20323639323230.roa (raw, json)
Hash identifier:          iLlGdKIav4n55PPHeL2qgO/uSYg/d7xtGXQDH057KMQ=
Subject key identifier:   EC:F9:10:19:CC:2C:7B:1A:B9:DE:82:85:E5:53:55:F7:C3:2B:47:B0
Certificate issuer:       /CN=D6E315D505A9FD327F8C5FCFB284F96BDF315E8F
Certificate serial:       0DE4703526E5B85C9FBDEDA9F8B2DFB8D0AAEE7D
Authority key identifier: D6:E3:15:D5:05:A9:FD:32:7F:8C:5F:CF:B2:84:F9:6B:DF:31:5E:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E315D505A9FD327F8C5FCFB284F96BDF315E8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/34352e3138322e36302e302f32342d3332203d3e20323639323230.roa
Signing time:             Tue 23 Sep 2025 21:34:52 +0000
ROA not before:           Tue 23 Sep 2025 21:29:52 +0000
ROA not after:            Tue 22 Sep 2026 21:34:52 +0000
asID:                     269220
IP address blocks:        45.182.60.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/D6E315D505A9FD327F8C5FCFB284F96BDF315E8F.crl
                          rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/D6E315D505A9FD327F8C5FCFB284F96BDF315E8F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E315D505A9FD327F8C5FCFB284F96BDF315E8F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e4:70:35:26:e5:b8:5c:9f:bd:ed:a9:f8:b2:df:b8:d0:aa:ee:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6E315D505A9FD327F8C5FCFB284F96BDF315E8F
        Validity
            Not Before: Sep 23 21:29:52 2025 GMT
            Not After : Sep 22 21:34:52 2026 GMT
        Subject: CN=ECF91019CC2C7B1AB9DE8285E55355F7C32B47B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cb:11:fd:2e:55:01:b5:17:67:05:4d:c9:24:
                    bd:c9:83:38:0b:ca:f3:64:93:86:96:ce:59:ce:3f:
                    e2:b7:91:19:51:9f:22:86:13:83:08:9c:8c:c4:8b:
                    50:1a:5e:c7:6b:25:6d:75:b1:f4:51:65:bf:02:08:
                    78:7c:31:1a:0a:9e:86:36:b2:6e:43:1e:3c:86:55:
                    15:85:2c:ed:1d:73:e9:aa:80:28:31:ba:c4:69:22:
                    c7:25:7a:d0:5a:33:74:64:26:04:99:a0:73:16:ed:
                    a6:7b:32:86:60:4e:3e:48:c5:e7:e7:31:bf:c8:62:
                    25:f9:ba:fb:c7:a9:ce:75:39:5c:00:58:63:99:58:
                    3d:c9:26:c5:4c:6b:c4:d0:2d:87:e9:10:e8:ad:11:
                    9d:f8:d1:7e:ff:3e:25:fb:1d:ac:8d:79:d0:35:4a:
                    26:7f:b0:22:3d:9d:44:db:63:ce:29:53:20:87:b3:
                    d4:55:29:b6:88:c6:be:81:3c:5c:a7:21:15:0c:58:
                    94:aa:60:db:38:ff:e4:78:a2:72:f7:32:46:6f:2f:
                    a1:c7:ad:7c:75:65:bd:16:fa:00:a8:ad:83:f3:3f:
                    b6:92:cf:05:7c:ac:c3:5c:7a:51:63:8b:9c:89:85:
                    bd:0a:cd:e9:8b:ec:94:1e:65:27:c5:3f:ad:63:ae:
                    56:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F9:10:19:CC:2C:7B:1A:B9:DE:82:85:E5:53:55:F7:C3:2B:47:B0
            X509v3 Authority Key Identifier:
                keyid:D6:E3:15:D5:05:A9:FD:32:7F:8C:5F:CF:B2:84:F9:6B:DF:31:5E:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/D6E315D505A9FD327F8C5FCFB284F96BDF315E8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E315D505A9FD327F8C5FCFB284F96BDF315E8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/34352e3138322e36302e302f32342d3332203d3e20323639323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:40:df:08:10:6d:6a:34:e7:61:4c:f2:ba:b5:e1:f4:93:e1:
         75:d2:cf:ed:5e:af:ba:d2:a9:f3:74:12:80:f5:13:56:37:8f:
         e9:aa:14:f1:10:df:11:72:a1:8e:62:37:30:a6:bc:02:63:13:
         31:3e:74:0a:3d:90:65:5c:57:04:16:2b:8e:88:00:95:05:59:
         a9:30:1f:6a:63:95:46:c7:55:dc:ed:98:71:58:fe:8a:7b:5b:
         79:33:92:22:da:04:13:56:63:1f:e4:ec:b5:8a:9b:1b:76:60:
         ed:12:c6:bd:f5:60:83:47:92:f7:50:3d:95:86:9a:5b:8f:d0:
         66:a4:ce:da:9d:f0:7b:e4:04:40:cb:72:22:6f:bb:b6:c9:a2:
         66:f3:d5:95:17:28:da:44:fe:93:3a:0f:cf:6f:c7:35:b7:1f:
         9a:9a:b7:b1:20:bb:6f:20:5f:5c:f3:d4:7f:10:86:94:6d:a7:
         6b:58:0a:45:2d:43:a7:3f:15:aa:51:9d:75:41:cc:0f:a6:b7:
         ad:a8:2a:ef:cb:53:85:3a:fa:d3:35:72:5b:8c:ba:78:5d:6d:
         42:cc:cb:41:c5:e1:77:51:b0:68:b5:e9:68:f4:b2:ac:ea:01:
         29:e9:92:9f:2b:10:6b:f9:61:b1:be:3e:88:bf:a0:41:4f:25:
         bb:cd:b4:fa
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUDeRwNSbluFyfve2p+LLfuNCq7n0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDZFMzE1RDUwNUE5RkQzMjdGOEM1RkNGQjI4NEY5NkJE
RjMxNUU4RjAeFw0yNTA5MjMyMTI5NTJaFw0yNjA5MjIyMTM0NTJaMDMxMTAvBgNV
BAMTKEVDRjkxMDE5Q0MyQzdCMUFCOURFODI4NUU1NTM1NUY3QzMyQjQ3QjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMyxH9LlUBtRdnBU3JJL3JgzgL
yvNkk4aWzlnOP+K3kRlRnyKGE4MInIzEi1AaXsdrJW11sfRRZb8CCHh8MRoKnoY2
sm5DHjyGVRWFLO0dc+mqgCgxusRpIscletBaM3RkJgSZoHMW7aZ7MoZgTj5Ixefn
Mb/IYiX5uvvHqc51OVwAWGOZWD3JJsVMa8TQLYfpEOitEZ340X7/PiX7HayNedA1
SiZ/sCI9nUTbY84pUyCHs9RVKbaIxr6BPFynIRUMWJSqYNs4/+R4onL3MkZvL6HH
rXx1Zb0W+gCorYPzP7aSzwV8rMNcelFji5yJhb0KzemL7JQeZSfFP61jrlaLAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU7PkQGcwsexq53oKF5VNV98MrR7AwHwYDVR0j
BBgwFoAU1uMV1QWp/TJ/jF/PsoT5a98xXo8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXRUNDFTbTZjWlByM0R5VXVBTTdKVDdQZnJ4aU54a1paZGZ2UFpETmo3
WXAvMC9ENkUzMTVENTA1QTlGRDMyN0Y4QzVGQ0ZCMjg0Rjk2QkRGMzE1RThGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2RTMxNUQ1MDVBOUZEMzI3
RjhDNUZDRkIyODRGOTZCREYzMTVFOEYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F0VDQxU202Y1pQcjNEeVV1QU03SlQ3UGZyeGlOeGtaWmRmdlBaRE5qN1lwLzAv
MzQzNTJlMzEzODMyMmUzNjMwMmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzIzNjM5
MzIzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALbY8MA0GCSqGSIb3DQEBCwUAA4IBAQCJQN8IEG1q
NOdhTPK6teH0k+F10s/tXq+60qnzdBKA9RNWN4/pqhTxEN8RcqGOYjcwprwCYxMx
PnQKPZBlXFcEFiuOiACVBVmpMB9qY5VGx1Xc7ZhxWP6Ke1t5M5Ii2gQTVmMf5Oy1
ipsbdmDtEsa99WCDR5L3UD2Vhppbj9BmpM7anfB75ARAy3Iib7u2yaJm89WVFyja
RP6TOg/Pb8c1tx+amrexILtvIF9c89R/EIaUbadrWApFLUOnPxWqUZ11QcwPpret
qCrvy1OFOvrTNXJbjLp4XW1CzMtBxeF3UbBotelo9LKs6gEp6ZKfKxBr+WGxvj6I
v6BBTyW7zbT6
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:03:23 2025 by rpki-client