Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/2/34352e3139302e34302e302f32322d3234203d3e20323639363333.roa
File:                     34352e3139302e34302e302f32322d3234203d3e20323639363333.roa (raw, json)
Hash identifier:          oGgYgBFd9ASID+xoV1xwnWGtbrt+cdGIGMMgkSjuEV0=
Subject key identifier:   32:F7:7B:D9:40:F7:9A:B3:79:26:96:3A:A7:34:2F:10:E9:D9:8C:9D
Certificate issuer:       /CN=1DD3EF111F81641C8BBB14F0B1A2FACB16E673E3
Certificate serial:       034865B954C2A55FE5EFA389EAA03C198F2DB3C7
Authority key identifier: 1D:D3:EF:11:1F:81:64:1C:8B:BB:14:F0:B1:A2:FA:CB:16:E6:73:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DD3EF111F81641C8BBB14F0B1A2FACB16E673E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/2/34352e3139302e34302e302f32322d3234203d3e20323639363333.roa
Signing time:             Fri 26 Sep 2025 12:35:31 +0000
ROA not before:           Fri 26 Sep 2025 12:30:31 +0000
ROA not after:            Fri 25 Sep 2026 12:35:31 +0000
asID:                     269633
IP address blocks:        45.190.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/2/1DD3EF111F81641C8BBB14F0B1A2FACB16E673E3.crl
                          rsync://rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/2/1DD3EF111F81641C8BBB14F0B1A2FACB16E673E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DD3EF111F81641C8BBB14F0B1A2FACB16E673E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:48:65:b9:54:c2:a5:5f:e5:ef:a3:89:ea:a0:3c:19:8f:2d:b3:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DD3EF111F81641C8BBB14F0B1A2FACB16E673E3
        Validity
            Not Before: Sep 26 12:30:31 2025 GMT
            Not After : Sep 25 12:35:31 2026 GMT
        Subject: CN=32F77BD940F79AB37926963AA7342F10E9D98C9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:08:b1:55:d9:7a:3a:02:aa:f6:69:f7:f5:cd:
                    e7:df:87:30:8c:b9:6e:8f:5d:44:30:ec:97:9a:88:
                    98:01:ce:89:f0:2b:e7:cf:a9:4c:c5:62:fe:5d:bc:
                    f1:27:6d:64:8f:80:45:7f:2d:f9:f2:70:27:19:b3:
                    e2:f9:b0:26:04:4c:bc:ea:5e:d9:47:07:14:df:35:
                    fd:20:ee:50:54:1e:2a:5e:46:38:ff:22:ce:4f:88:
                    34:9a:88:87:5f:a7:15:d4:bf:d6:a6:e6:9d:0e:86:
                    f0:5d:6f:86:f9:41:05:ee:b8:0b:59:db:36:ef:e9:
                    77:ce:df:b7:2b:40:83:5a:eb:2d:93:2f:c3:2e:33:
                    4f:f2:fb:3b:46:31:0d:2b:ae:d3:6a:18:31:1d:05:
                    23:a0:a3:96:ea:a2:1e:21:70:b8:f6:45:75:6c:e3:
                    22:09:83:54:be:d2:78:aa:e1:72:ec:fd:b0:6f:03:
                    9b:4b:98:fc:69:39:df:0c:53:20:a2:df:08:aa:88:
                    88:6d:7d:13:39:d8:11:83:f4:33:1c:6b:c5:9c:7f:
                    8a:62:40:91:bb:83:99:f7:7e:a0:9c:b0:ec:75:6b:
                    d5:da:18:c9:8e:22:5e:73:5e:71:b0:d6:fc:8f:e7:
                    0c:1a:ae:67:db:47:42:64:16:3d:ed:7e:5f:9d:7c:
                    80:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F7:7B:D9:40:F7:9A:B3:79:26:96:3A:A7:34:2F:10:E9:D9:8C:9D
            X509v3 Authority Key Identifier:
                keyid:1D:D3:EF:11:1F:81:64:1C:8B:BB:14:F0:B1:A2:FA:CB:16:E6:73:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/2/1DD3EF111F81641C8BBB14F0B1A2FACB16E673E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DD3EF111F81641C8BBB14F0B1A2FACB16E673E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/2/34352e3139302e34302e302f32322d3234203d3e20323639363333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:b8:8b:1e:23:f4:c0:62:ed:f3:81:41:c9:49:a5:17:19:3b:
         36:a7:48:a6:de:cd:cf:c6:a2:c0:6c:50:0a:3b:03:26:c5:c6:
         f9:ad:43:ee:99:c3:11:ae:eb:c0:1d:58:42:6e:40:fc:b9:07:
         ba:10:a0:19:a4:e7:ae:51:77:d2:4f:69:27:e9:f2:2e:c7:6b:
         86:18:6e:8a:1f:f9:ab:e3:26:ab:43:41:09:34:0e:3d:45:f2:
         78:3b:72:5e:d0:e2:6e:9f:99:f4:07:07:b3:3c:83:25:66:46:
         b0:82:e1:f5:d0:71:96:65:54:3b:81:41:5f:c5:30:56:ac:d6:
         a9:15:d6:4a:e6:7d:15:76:10:66:ee:07:81:07:2d:cf:7c:54:
         05:b0:0f:94:bd:f4:33:2d:ce:06:c4:b1:4f:08:a6:ae:62:d3:
         f5:1b:c9:70:2c:79:4f:58:0f:0a:56:e0:b5:6a:52:c2:a4:1a:
         ae:1c:da:bd:8a:de:e6:e4:c2:6f:07:dc:e7:b9:fc:d8:2e:23:
         b9:c9:03:f1:66:d7:5a:e7:46:56:cf:0a:df:ae:87:e4:81:2e:
         36:ca:94:af:1c:5c:16:e1:0e:87:c9:64:e7:f0:2f:98:cf:b4:
         bf:d7:1e:53:cc:a1:d9:3a:30:57:4e:a3:df:77:2b:3c:28:0e:
         8f:6f:85:38
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUA0hluVTCpV/l76OJ6qA8GY8ts8cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUREM0VGMTExRjgxNjQxQzhCQkIxNEYwQjFBMkZBQ0Ix
NkU2NzNFMzAeFw0yNTA5MjYxMjMwMzFaFw0yNjA5MjUxMjM1MzFaMDMxMTAvBgNV
BAMTKDMyRjc3QkQ5NDBGNzlBQjM3OTI2OTYzQUE3MzQyRjEwRTlEOThDOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVCLFV2Xo6Aqr2aff1zeffhzCM
uW6PXUQw7JeaiJgBzonwK+fPqUzFYv5dvPEnbWSPgEV/LfnycCcZs+L5sCYETLzq
XtlHBxTfNf0g7lBUHipeRjj/Is5PiDSaiIdfpxXUv9am5p0OhvBdb4b5QQXuuAtZ
2zbv6XfO37crQINa6y2TL8MuM0/y+ztGMQ0rrtNqGDEdBSOgo5bqoh4hcLj2RXVs
4yIJg1S+0niq4XLs/bBvA5tLmPxpOd8MUyCi3wiqiIhtfRM52BGD9DMca8Wcf4pi
QJG7g5n3fqCcsOx1a9XaGMmOIl5zXnGw1vyP5wwarmfbR0JkFj3tfl+dfIB1AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUMvd72UD3mrN5JpY6pzQvEOnZjJ0wHwYDVR0j
BBgwFoAUHdPvER+BZByLuxTwsaL6yxbmc+MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDczRlRFb1BDUXFzcjR1MTdlOGJSTjRjQTVwdUwxWE1IeVF6VEpnTnFm
MTgvMi8xREQzRUYxMTFGODE2NDFDOEJCQjE0RjBCMUEyRkFDQjE2RTY3M0UzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFERDNFRjExMUY4MTY0MUM4
QkJCMTRGMEIxQTJGQUNCMTZFNjczRTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q3M0ZURW9QQ1Fxc3I0dTE3ZThiUk40Y0E1cHVMMVhNSHlRelRKZ05xZjE4LzIv
MzQzNTJlMzEzOTMwMmUzNDMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM5
MzYzMzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLb4oMA0GCSqGSIb3DQEBCwUAA4IBAQCeuIseI/TA
Yu3zgUHJSaUXGTs2p0im3s3PxqLAbFAKOwMmxcb5rUPumcMRruvAHVhCbkD8uQe6
EKAZpOeuUXfST2kn6fIux2uGGG6KH/mr4yarQ0EJNA49RfJ4O3Je0OJun5n0Bwez
PIMlZkawguH10HGWZVQ7gUFfxTBWrNapFdZK5n0VdhBm7geBBy3PfFQFsA+UvfQz
Lc4GxLFPCKauYtP1G8lwLHlPWA8KVuC1alLCpBquHNq9it7m5MJvB9znufzYLiO5
yQPxZtda50ZWzwrfrofkgS42ypSvHFwW4Q6HyWTn8C+Yz7S/1x5TzKHZOjBXTqPf
dys8KA6Pb4U4
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:48:31 2025 by rpki-client