Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/34352e3138332e3231322e302f32322d3232203d3e20323639323932.roa
File:                     34352e3138332e3231322e302f32322d3232203d3e20323639323932.roa (raw, json)
Hash identifier:          dKMX6qACUJhaUBirHnkZJbAFc2qN+rbyd2QiST1MyPI=
Subject key identifier:   5B:F3:B7:D0:7F:4E:68:20:5B:98:86:BD:84:E6:08:B6:AA:1A:99:68
Certificate issuer:       /CN=891876379661096633CCF1E14D82D1BBB9CBF133
Certificate serial:       3CE2390E61F0C4960BE9F115FA1BAE611FBC7AAA
Authority key identifier: 89:18:76:37:96:61:09:66:33:CC:F1:E1:4D:82:D1:BB:B9:CB:F1:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891876379661096633CCF1E14D82D1BBB9CBF133.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/34352e3138332e3231322e302f32322d3232203d3e20323639323932.roa
Signing time:             Tue 16 Sep 2025 17:07:05 +0000
ROA not before:           Tue 16 Sep 2025 17:02:05 +0000
ROA not after:            Tue 15 Sep 2026 17:07:05 +0000
asID:                     269292
IP address blocks:        45.183.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/891876379661096633CCF1E14D82D1BBB9CBF133.crl
                          rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/891876379661096633CCF1E14D82D1BBB9CBF133.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891876379661096633CCF1E14D82D1BBB9CBF133.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 21:05:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e2:39:0e:61:f0:c4:96:0b:e9:f1:15:fa:1b:ae:61:1f:bc:7a:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891876379661096633CCF1E14D82D1BBB9CBF133
        Validity
            Not Before: Sep 16 17:02:05 2025 GMT
            Not After : Sep 15 17:07:05 2026 GMT
        Subject: CN=5BF3B7D07F4E68205B9886BD84E608B6AA1A9968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:58:62:41:0f:9e:5b:b6:d8:0d:7d:56:55:36:
                    8d:31:e2:a0:37:db:71:aa:9d:62:11:58:3d:78:39:
                    c2:94:83:06:02:f9:eb:39:c1:d7:af:b5:e7:3c:1b:
                    3f:ce:cc:10:52:c0:dd:c4:52:bf:b7:f2:1f:41:14:
                    d7:03:51:cd:62:f0:cb:be:92:f5:e6:eb:b4:83:21:
                    c4:37:c3:9f:61:8a:ec:a8:b0:ae:4c:f5:0c:36:8f:
                    70:4b:d0:ac:bf:eb:d0:dd:7e:c0:88:c8:a1:95:97:
                    a7:ec:9a:6a:e6:85:0a:78:8d:7a:fe:41:10:85:1a:
                    77:f7:86:62:81:3e:7e:18:02:05:91:74:bf:6f:cd:
                    98:1b:4d:e0:8f:69:56:68:65:84:ea:7f:c4:1f:c9:
                    5d:cb:60:ba:18:fa:92:8f:99:61:11:a5:db:f4:74:
                    00:b3:3c:e9:7b:81:0f:71:88:a8:19:6b:5c:9c:e7:
                    7a:2a:1c:ee:04:62:8d:5e:a3:d1:fb:82:5b:08:87:
                    45:6b:75:00:e5:85:99:25:58:db:4a:5d:44:c5:1e:
                    f4:5f:e1:ae:e3:b8:59:92:c4:b6:91:0b:6a:70:4a:
                    27:6e:55:3d:5b:26:40:c2:96:f7:df:dc:8e:3c:df:
                    cd:a5:28:4c:9c:ca:0a:78:2d:75:6f:65:35:20:fe:
                    ea:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F3:B7:D0:7F:4E:68:20:5B:98:86:BD:84:E6:08:B6:AA:1A:99:68
            X509v3 Authority Key Identifier:
                keyid:89:18:76:37:96:61:09:66:33:CC:F1:E1:4D:82:D1:BB:B9:CB:F1:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/891876379661096633CCF1E14D82D1BBB9CBF133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891876379661096633CCF1E14D82D1BBB9CBF133.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/34352e3138332e3231322e302f32322d3232203d3e20323639323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:4e:75:17:e3:be:5e:a7:aa:98:1b:5b:45:98:1d:d6:c4:a6:
         61:86:3d:8b:37:10:9e:26:97:63:f6:b7:71:07:7d:fd:2e:75:
         f3:90:83:d4:c4:05:f8:d0:28:07:7f:c6:53:4c:38:e0:f3:0c:
         87:a4:a7:a8:90:a0:b3:3d:e6:6c:93:98:6e:5d:13:f1:c5:69:
         0e:32:e3:8c:c3:78:37:6d:27:9f:8e:62:59:3a:d7:ae:74:b6:
         fc:3f:4c:f7:94:2f:ac:22:39:52:6d:73:9d:fd:34:89:28:2d:
         ad:a9:e9:6f:21:90:37:75:62:8e:d6:0c:93:d2:40:8f:ec:47:
         b0:0e:90:3d:d1:d5:ba:0d:f4:e1:e2:1f:30:a5:66:31:6f:1a:
         a0:00:8f:61:40:13:f8:2c:b3:0f:cd:3e:de:db:d4:6f:0d:64:
         a1:ae:fa:f3:4f:0e:7a:9f:a3:61:ca:41:d1:d1:f9:e9:0c:4d:
         f6:d2:b6:7e:34:94:7f:62:07:58:10:6a:72:20:12:2a:5b:73:
         7d:45:35:c0:0c:e2:eb:fd:3d:36:f5:d9:eb:56:e9:8a:2c:94:
         43:c3:8f:f2:32:af:09:3b:10:d9:96:d8:a2:e9:94:f6:a9:0d:
         09:f9:42:79:9f:f1:83:0c:3c:11:ed:02:d9:43:fb:29:ae:98:
         8b:e6:c1:d6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPOI5DmHwxJYL6fEV+huuYR+8eqowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODkxODc2Mzc5NjYxMDk2NjMzQ0NGMUUxNEQ4MkQxQkJC
OUNCRjEzMzAeFw0yNTA5MTYxNzAyMDVaFw0yNjA5MTUxNzA3MDVaMDMxMTAvBgNV
BAMTKDVCRjNCN0QwN0Y0RTY4MjA1Qjk4ODZCRDg0RTYwOEI2QUExQTk5NjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSWGJBD55bttgNfVZVNo0x4qA3
23GqnWIRWD14OcKUgwYC+es5wdevtec8Gz/OzBBSwN3EUr+38h9BFNcDUc1i8Mu+
kvXm67SDIcQ3w59hiuyosK5M9Qw2j3BL0Ky/69DdfsCIyKGVl6fsmmrmhQp4jXr+
QRCFGnf3hmKBPn4YAgWRdL9vzZgbTeCPaVZoZYTqf8QfyV3LYLoY+pKPmWERpdv0
dACzPOl7gQ9xiKgZa1yc53oqHO4EYo1eo9H7glsIh0VrdQDlhZklWNtKXUTFHvRf
4a7juFmSxLaRC2pwSiduVT1bJkDClvff3I48382lKEycygp4LXVvZTUg/urRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUW/O30H9OaCBbmIa9hOYItqoamWgwHwYDVR0j
BBgwFoAUiRh2N5ZhCWYzzPHhTYLRu7nL8TMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDNjaWVxenZNQzJQS1RBOVRZZVBqcVFuOFEyZEt4Zlg4UmdoS0tvcHFN
RlAvMC84OTE4NzYzNzk2NjEwOTY2MzNDQ0YxRTE0RDgyRDFCQkI5Q0JGMTMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5MTg3NjM3OTY2MTA5NjYz
M0NDRjFFMTREODJEMUJCQjlDQkYxMzMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QzY2llcXp2TUMyUEtUQTlUWWVQanFRbjhRMmRLeGZYOFJnaEtLb3BxTUZQLzAv
MzQzNTJlMzEzODMzMmUzMjMxMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzkzMjM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItt9QwDQYJKoZIhvcNAQELBQADggEBAItOdRfj
vl6nqpgbW0WYHdbEpmGGPYs3EJ4ml2P2t3EHff0udfOQg9TEBfjQKAd/xlNMOODz
DIekp6iQoLM95myTmG5dE/HFaQ4y44zDeDdtJ5+OYlk61650tvw/TPeUL6wiOVJt
c539NIkoLa2p6W8hkDd1Yo7WDJPSQI/sR7AOkD3R1boN9OHiHzClZjFvGqAAj2FA
E/gssw/NPt7b1G8NZKGu+vNPDnqfo2HKQdHR+ekMTfbStn40lH9iB1gQanIgEipb
c31FNcAM4uv9PTb12etW6YoslEPDj/Iyrwk7ENmW2KLplPapDQn5Qnmf8YMMPBHt
AtlD+ymumIvmwdY=
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:54:59 2025 by rpki-client